Hexago Blink ("we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, disclose, and safeguard your personal information when you visit hexagoblink.com, create a profile, place orders, or communicate with us.

Scope & Legal Basis

This policy applies to all personal data processed by Hexago Blink: In the UAE or outside UAE if it involves UAE residents, as required by PDPL’s extraterritorial reach. Processing is lawful only with specific, informed, unambiguous consent or under limited exceptions such as order fulfilment or legal obligations.

What We Collect & Why (Purpose Limitation)

We collect only minimal data necessary for the following purposes:

• Account Registration & Orders: name, email, password, shipping/billing address, phone number
• Order Processing & Support: purchase history, messaging logs, consent for marketing (optional)
• Site Analytics & Security: IP address, browser/device info, site activity, fraud detection

Data is collected solely for these legitimate, defined purposes and is not used for other unrelated activities.

Consent & Withdrawal

We obtain clear, affirmative consent before processing your personal data, including marketing preferences. You may withdraw consent at any time through your account dashboard or contact us directly. Withdrawal halts future processing but does not affect past processing.

Data Sharing & Third Parties

We may share your data only with:

• Payment processors (e.g., Stripe, PayPal) to execute transactions
• Shipping/logistics providers (e.g., GS CARGO, YLT, Yanwen Express, 17TRACK) for order fulfilment and tracking
• Customer support tools or communication platforms as needed

We do not sell personal data. Disclosure is limited to legitimate purposes or when required by UAE laws.

International Transfers

Since our systems and partners operate cross-border: Transfers outside the UAE are permitted only if the target jurisdiction has adequate data protection, or is covered by approved contracts or explicit user consent. We maintain a register of cross-border data flow with documented legal safeguards.

Data Security & Retention

We apply appropriate organizational and technical safeguards (e.g. encryption, access controls, pseudonymization) to protect personal data. Personal data is retained only as long as necessary for the original processing purpose or to comply with legal obligations—deleted or anonymized thereafter. We periodically review data holdings and purge unnecessary data at least annually.

Data Subject Rights

Under UAE PDPL, you have the right to:

• Access, correct, or delete your personal data
• Restrict or object to processing
• Request data portability
• Object to automated decision-making/profiling
• Withdraw consent at any time

Requests are free and handled within 30 days of receipt via email (Info@blinklighting.net), including submitting a verifiable identity.

Data Breach Notification

If a data breach occurs that risks the confidentiality or security of your personal data: We report promptly to the UAE Data Office and notify affected users immediately. Our notifications include breach scope, impacted data, and mitigation steps taken.

Data Protection Officer (DPO) & Accountability

Depending on scope or sensitivity of data processing, we may appoint a Data Protection Officer to manage compliance and serve as your point of contact. We also maintain records of data processing activities and implement Data Protection Impact Assessments when required, especially if automated profiling or high-risk processing is involved.

Cookies & Tracking

We use cookies and similar technologies to: Maintain sessions, personalize your experience, analyze traffic, and deliver marketing (with your consent). You can manage cookie preferences via your browser or account settings.

Children

We do not knowingly collect data from anyone under 18 years old. Any such data discovered will be deleted immediately upon notice.

Updates & Contact

We may update this policy as required. The “Last updated” date reflects changes. For questions or to submit data rights requests: Email: Info@blinklighting.net