Privacy Policy

Betelgeuse is the data controller for personal data processed through the Site. Our order fulfilment, payment and hosting partners act as processors or independent controllers as described below. You can reach us at any time at hello@betelgeuseshop.com.

• Identifiers and contact data — name, email address, shipping and billing address, phone number.
• Commercial data — products viewed, items added to your bag, order history, returns and customer-service correspondence.
• Payment data — payments are processed by Shopify and its payment providers. We receive confirmation of payment and limited card metadata (card brand, last four digits); we never receive or store your full card number.
• Device and usage data — IP address, browser and device type, operating system, referring URL, pages viewed, time on page, and approximate location derived from IP.
• Cookie and advertising identifiers — cookie IDs, analytics client and session IDs, and advertising click identifiers (for example gclid and fbclid) and campaign (UTM) parameters.

We do not knowingly collect sensitive personal data (such as government ID numbers, health data, biometric data, precise geolocation, or data revealing racial or ethnic origin, religious belief, or sexual orientation) and we ask that you do not submit it to us.

• To process, fulfil, ship and support your orders and handle returns or refunds.
• To operate, secure and improve the Site and prevent fraud and abuse.
• To measure site performance and marketing effectiveness through analytics.
• To show and measure advertising, where you have given any consent the law requires.
• To send order updates and, with your consent, marketing emails you can opt out of at any time.
• To comply with tax, accounting, customs and other legal obligations.

Under the UAE PDPL, our legal bases are your consent, the performance of a contract with you, compliance with a legal obligation, and our legitimate interests in running and securing the business, balanced against your rights.

We use strictly necessary cookies to keep your shopping bag and checkout session working, and analytics and advertising technologies — which may include Google Analytics 4 and the Meta Pixel — to understand how the Site is used and to measure campaigns. These tools set cookies and may pass identifiers to our checkout on Shopify so a single visit is not counted twice.

You can block or delete cookies in your browser settings, use the Google Analytics opt-out browser add-on, or adjust advertising preferences with Google and Meta. Blocking these technologies will not prevent you from browsing or purchasing. We honour Global Privacy Control (GPC) signals as a valid opt-out of the sale or sharing of personal data where applicable law requires it.

• Shopify — storefront, checkout, order and payment processing.
• Printify and its print providers — production and fulfilment of your order.
• Shipping carriers — delivery and tracking.
• Analytics and advertising providers — Google and Meta, for measurement and campaign reporting.
• Hosting and infrastructure providers — operating the Site.
• Professional advisers, authorities and acquirers — where required by law, to enforce our terms, or in connection with a merger, acquisition or sale of assets.

We do not sell your personal data for money. Certain advertising and analytics cookies may constitute "sharing" or a "sale" under some US state laws; you may opt out as described in Section 7.

We are based in the United Arab Emirates and our service providers operate in the United States, the European Union and other countries. Your personal data may therefore be transferred outside your country of residence. Where the UAE PDPL applies, we transfer data only to jurisdictions recognised as providing an adequate level of protection, or on the basis of contractual safeguards, your explicit consent, or another lawful transfer condition in Articles 22 and 23 of the PDPL.

Depending on where you live (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with comprehensive privacy laws), you may have the right to:

• Know and access the categories and specific pieces of personal data we hold about you.
• Request deletion of your personal data, subject to legal exceptions.
• Correct inaccurate personal data.
• Obtain a portable copy of data you provided to us.
• Opt out of the sale or sharing of personal data and of targeted advertising.
• Limit the use of sensitive personal data (we do not use sensitive data for these purposes).
• Not be discriminated against for exercising these rights — prices and service remain the same.

California notice: in the past twelve months we have collected the categories of data listed in Section 2 for the business purposes in Section 3 and disclosed them to the recipients in Section 5. We retain personal data for the periods in Section 9. You may use an authorised agent to submit a request; we will verify your identity before acting.

To exercise any right, email hello@betelgeuseshop.com with the subject line "Privacy Request". We respond within 45 days, extendable by a further 45 days where permitted. If we decline, you may appeal by replying to our decision; where available you may also complain to your state attorney general.

If you are in the United Arab Emirates, you have the right to:

• Request information about how your data is processed and obtain access to it.
• Request transfer of your data to another controller in a structured, machine-readable format.
• Request correction or completion of inaccurate or incomplete data.
• Request erasure of your data, except where retention is required by law or for claims.
• Restrict or object to processing, including processing for direct marketing.
• Withdraw consent at any time, without affecting processing carried out before withdrawal.
• Object to decisions based solely on automated processing that produce legal effects — we do not carry out such decision-making.

Send requests to hello@betelgeuseshop.com. We respond within one month, extendable where a request is complex. If you are not satisfied, you may lodge a complaint with the UAE Data Office.

We keep order and transaction records for as long as required by tax and commercial law (generally five years from the end of the relevant financial year), customer-service correspondence for up to three years, marketing contact data until you unsubscribe, and analytics data for up to fourteen months. We then delete or anonymise it.

We use encryption in transit (HTTPS), access controls and vetted processors to protect personal data. No method of transmission or storage is completely secure. If a personal data breach occurs, we will notify affected individuals and the relevant authorities — including the UAE Data Office and applicable US state regulators — within the timeframes the law requires.

The Site is not directed to children under 13 and we do not knowingly collect their personal data in line with the US Children's Online Privacy Protection Act (COPPA). Minors under 16 in the UAE and in certain US states require parental or guardian consent. If you believe a child has given us personal data, contact us and we will delete it.

Marketing emails are sent only where permitted by law and always include an unsubscribe link, as required by the US CAN-SPAM Act and the UAE PDPL. Order confirmations, shipping notices and other transactional messages are not marketing and will continue while your order is active.

We may update this Privacy Policy. The effective date at the top shows the latest revision, and material changes will be highlighted on the Site. Continued use of the Site after an update means you accept the revised policy.

Betelgeuse — Dubai, United Arab Emirates. Email hello@betelgeuseshop.com for any privacy question, request or complaint.