This Privacy Policy ("Policy") explains in a comprehensive and holistic manner how Ekatraa.com ("Ekatraa", "Company", "we", "us", or "our"), a Dubai‑based multi‑designer fashion, lifestyle, and luxury marketplace, collects, receives, uses, processes, stores, transfers, protects, and discloses information when you access or use our website, mobile applications, social media pages, physical stores, pop‑ups, exhibitions, events, WhatsApp/CRM communications, or any other services offered by Ekatraa (collectively, the "Platform" or "Services").
This Policy is intentionally drafted to protect the legal, commercial, reputational, and intellectual interests of the owner, while ensuring compliance with major global privacy and data protection frameworks including but not limited to:
- UAE Federal Decree‑Law No. 45 of 2021 (PDPL)
- GDPR (European Union)
- UK GDPR
- CCPA / CPRA (California, USA)
- India Digital Personal Data Protection Act, 2023
- OECD Privacy Principles and other internationally accepted standards
By accessing or using the Platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy.
1. Data Controller & Ownership
Ekatraa.com is the sole data controller and owner of all data collected through the Platform, unless expressly stated otherwise.
Registered Location: Dubai, United Arab Emirates
Official Privacy Contact: info@ekatraa.com
Ekatraa reserves full rights over how data is structured, anonymized, aggregated, analyzed, and commercially leveraged within the boundaries of applicable law.
2. Scope of Applicability
This Policy applies to:
- Website visitors and registered users
- Customers and potential customers
- Designers, brands, vendors, artisans, and suppliers
- Business partners, collaborators, influencers, affiliates
- Event attendees, pop‑up visitors, exhibition participants
- Employees, consultants, contractors (where applicable)
3. Categories of Information Collected
3.1 Personal Data Provided Directly
- Name, gender, age (where required)
- Email address, phone number, WhatsApp number
- Billing, shipping, and business addresses
- Government‑issued identification (only where legally required)
- Account credentials
- Purchase history and preferences
- Designer/vendor onboarding documents
- Communications, feedback, reviews, complaints
3.2 Automatically Collected & Technical Data
- IP address, geolocation (approximate)
- Device type, OS, browser, language
- Cookies, pixels, SDKs, log files
- Clickstream data, session duration, referral URLs
3.3 Transactional & Financial Data
- Payment status, transaction IDs
- Refund and chargeback data
Note: Card and banking data is processed by PCI‑DSS compliant third‑party gateways. Ekatraa does not store sensitive card information.
3.4 Third‑Party & Derived Data
- Social media interactions
- Marketing and analytics insights
- Data received from designers, couriers, payment partners
- Inferred preferences and behavior patterns
4. Purposes of Data Processing
Ekatraa processes data for legitimate and lawful purposes including but not limited to:
- Order processing, fulfillment, returns, exchanges
- Account creation, authentication, and management
- Designer/vendor onboarding, verification, and payouts
- Customer service and dispute resolution
- Marketing, branding, PR, newsletters, events, campaigns
- Personalization of content and recommendations
- Analytics, forecasting, and business intelligence
- Fraud detection, risk management, and abuse prevention
- Legal compliance, audits, and regulatory obligations
- Protection of Ekatraa’s business, assets, IP, and reputation
5. Legal Basis for Processing
Depending on jurisdiction, processing is based on one or more of the following:
- User consent
- Performance of a contract
- Compliance with legal obligations
- Legitimate interests of Ekatraa (including growth, security, and brand protection)
6. Cookies, Tracking & Advertising Technologies
Ekatraa uses first‑party and third‑party cookies, pixels, and similar technologies for:
- Functional and performance optimization
- Analytics and measurement
- Retargeting and interest‑based advertising
Users may control cookie preferences via browser settings or cookie banners where applicable.
7. Data Sharing & Disclosure
We do not sell personal data. Data may be shared strictly on a need‑to‑know basis with:
- Payment gateways and banks
- Courier, logistics, and fulfillment partners
- Cloud hosting, CRM, ERP, and IT vendors
- Marketing, PR, analytics, and ad platforms
- Designers/vendors for order fulfillment
- Legal, regulatory, or enforcement authorities
All third parties are contractually obligated to maintain confidentiality and security.
8. Cross‑Border Data Transfers
As a global platform, data may be processed outside your country of residence. Ekatraa ensures lawful safeguards including:
- Data processing agreements
- Standard contractual clauses
- Adequacy or equivalent protections
9. Data Retention & Archiving
Data is retained only as long as necessary for:
- Business operations
- Legal, tax, and regulatory compliance
- Dispute resolution and enforcement
Ekatraa reserves the right to retain anonymized or aggregated data indefinitely.
10. Security & Safeguards
Ekatraa implements robust administrative, technical, and physical safeguards including:
- Encryption and secure servers
- Role‑based access controls
- Periodic audits and risk assessments
- Employee confidentiality obligations
However, no system is completely secure; use of the Platform is at your own risk.
11. User Rights
Subject to law, users may request:
- Access, correction, or deletion of data
- Withdrawal of consent
- Restriction or objection to processing
- Data portability
Ekatraa may lawfully refuse or limit requests to protect its rights, comply with law, or prevent abuse.
12. Children’s Data
The Platform is not intended for individuals under 18. Any such data collected inadvertently will be deleted.
13. Marketing & Communications
Users may opt out of marketing communications at any time. Transactional and service communications will continue.
14. Intellectual Property, Analytics & Business Use
All data, insights, analytics, metrics, anonymized datasets, and derivative works generated through the Platform are the exclusive property of Ekatraa and may be used for commercial, strategic, and operational purposes.
15. Limitation of Liability & Indemnity
To the maximum extent permitted by law, Ekatraa disclaims liability for indirect or consequential damages, data breaches beyond reasonable control, or acts of third parties. Users agree to indemnify Ekatraa against claims arising from misuse of the Platform.
16. Changes to This Policy
Ekatraa may modify this Policy at any time. Updates will be posted on the Platform and become effective immediately.
17. Governing Law & Jurisdiction
This Privacy Policy shall be governed by the laws of the United Arab Emirates. Courts of Dubai shall have exclusive jurisdiction.
18. Contact Us
For privacy‑related queries:
Email: info@ekatraa.com
Address: Dubai, United Arab Emirates
This Privacy Policy forms an integral and binding part of Ekatraa.com’s Terms & Conditions.