My orders
Home / Privacy Policy

Privacy Policy

Last updated: 30 September 2026

1. Who we are

Flario Cosmetics Trading L.L.C, Trade License No. 1044975, Office 1905, Al Shafar Tower 1, Barsha Heights, Dubai, UAE ("we"). We run limbacosmetics.ae and decide how your personal data is used. Contact: [email protected], WhatsApp +971 50 264 7764.

2. What we collect

  • Your order: name, mobile number, email, emirate, area and address, your note for the courier, the products, amounts, payment method, payment status and order status.
  • My orders: your email and one-time sign-in codes. We keep only a scrambled form of each code; a code stops working after 10 minutes.
  • Hair quiz and Booster Lab: your answers about your hair and the routine we suggest. They stay on your device and are added to your order when you place one.
  • Your consents: which channel you agreed to (WhatsApp, SMS or email), the contact, the time and the wording you saw.
  • Refund requests: what you didn't like, how many times you used the product, a note about your hair if you add one, your description and 1–3 photos of the product. With your consent we may use the description and photos, without your name, to improve our products.
  • Messages you send us on WhatsApp, Instagram or email.
  • Website usage, only if you allow analytics cookies: pages you open, clicks and scrolling, device and browser type, and the country and city worked out from your IP address. The IP address itself is not stored. We may also record how you move through the site; anything you type is hidden, and the checkout and account pages are hidden completely.

We do not collect card numbers or Emirates ID: you enter your card on the Stripe payment page, and we only receive the payment result.

3. Why we use it

  • To take, deliver and support your order, including payment and refunds (to perform our contract with you).
  • To show you the status of your orders and let you sign in to My orders (to perform our contract with you).
  • With your consent, to send offers by WhatsApp, SMS or email, each channel separately.
  • With your consent, to understand how the site is used and to test which version of a page works better.
  • To protect the shop from abuse, for example by limiting repeated order look-ups and sign-in attempts (our legitimate interest).
  • To meet legal, tax and VAT obligations.

4. Who receives your data

Only the companies that help us run the shop, and only the data each of them needs:

  • Supabase: our database and sign-in, servers in the EU (Frankfurt).
  • Cloudflare: website hosting and protection.
  • Resend: order notifications to our team [[регион хранения — проверить]].
  • Google (Gmail): order confirmations and sign-in codes sent to your email.
  • PostHog: website analytics, servers in the EU (Frankfurt), only with your consent.
  • Delivery partners: name, phone, address and order contents. In Dubai our own courier delivers; in the other emirates, Quiqup.
  • Stripe: card payments. Stripe receives your email, the order number and amount, and the card details you enter on its payment page [[юрлицо Stripe для ОАЭ и регион хранения — юрист]].
  • Odoo, our accounting system: paid orders with your name, phone, email, address and order contents, to record sales and prepare delivery [[где расположен сервер Odoo — уточнить]].
  • Ivideon: the live production cameras on our About page. They load only when you press "Watch live", and Ivideon may then set its own cookies.
  • Meta (WhatsApp, Instagram), when you message us there.

We do not use advertising pixels at the moment. We do not sell your data.

5. Transfers outside the UAE

Some of these providers store data outside the UAE: in the European Union (Supabase, PostHog) and in the United States or on global networks (Cloudflare, Google, Resend, Stripe). We transfer this data on the basis of your consent and to perform our contract with you.

6. How long we keep it

  • Orders and invoices: 5 years, as UAE tax rules require.
  • Sign-in codes: they stop working after 10 minutes and are deleted after 30 days.
  • Consent records: as long as the consent is valid, then 5 years after you withdraw it.
  • Marketing: until you unsubscribe.
  • Website analytics: session recordings 30 days, other usage data 1 year.
  • Chats: 12 months.

7. Your rights

You can ask us to show, correct or delete your data, to limit how we use it, or to give it to you in a common format. You can object to marketing and withdraw any consent at any time: reply STOP on WhatsApp, use the unsubscribe link in an email, or change your choice in "Cookie settings". Contact [email protected]. You also have the right to complain to the UAE Data Office.

8. How we protect it

The site works only over an encrypted connection. Order data can be read only by our authorised staff, and every change to an order is logged. We do not store card numbers.

9. Children

The shop is meant for adults aged 18 and over.

10. Cookies

See our Cookie Policy and "Cookie settings" at the bottom of every page.

11. Changes

If we change this policy, we will update the date at the top of this page.