Privacy Policy

1. Introduction

BALLER Shirt, operated by KOODO TECHNOLOGY LLC FZ (License No. 2649263.01) (“we,” “our,” or “us”), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your personal information when you visit our website ballershirt.com or make a purchase from us.

We comply with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), the EU General Data Protection Regulation (GDPR) for European users, and the California Consumer Privacy Act (CCPA) for California residents where applicable.

By using our website, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our website or services.

2. Information We Collect

We may collect the following categories of personal information:

• Personal Identification Information: Full name, email address, phone number, shipping address, and billing address when you place an order or create an account.
• Payment Information: Credit/debit card details, Stripe payment tokens, and billing information. Note: We do not store full payment card numbers; these are processed and tokenized securely by Stripe.
• Device & Usage Information: IP address, browser type and version, operating system, referring URLs, pages visited, time spent on pages, and browsing behavior through cookies and similar technologies.
• Order Information: Products purchased, order history, size preferences, customization details, and order value.
• Communication Information: Emails sent to hello@ballershirt.com, contact form submissions, customer support correspondence, and any feedback you provide.

3. How We Use Your Information

We use the collected information for the following purposes:

• To process and fulfill your orders, including payment processing, shipping, and delivery notifications.
• To communicate with you regarding your orders, returns, exchanges, or customer service inquiries.
• To improve our website, product offerings, and customer experience through analytics.
• To send promotional emails and marketing communications (you may opt out at any time via the unsubscribe link).
• To comply with legal obligations, prevent fraud, and enforce our Terms of Service.
• To personalize your shopping experience and recommend products that may interest you.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Consent: For marketing communications and optional cookies.
• Contract Performance: To process and fulfill your orders.
• Legal Obligation: To comply with tax, accounting, and regulatory requirements.
• Legitimate Interests: For analytics, fraud prevention, and website improvement, provided these do not override your rights.

5. Information Sharing & Third Parties

We do not sell, trade, or rent your personal information to third parties. However, we may share your information with trusted third-party service providers who assist us in operating our business:

• Payment Processing: Stripe — processes payment transactions securely. Stripe Privacy Policy
• Shipping & Fulfillment: Our delivery partners (e.g., Shipa, iMile) receive your name, address, and phone number for delivery purposes.
• Email Communications: Resend — used to send order confirmations, shipping updates, and marketing emails.
• Analytics: Google Analytics — helps us understand how visitors interact with our website.
• Customer Support: Our email and support tools to respond to your inquiries.

All third-party providers are contractually bound to protect your data and may only use it for the specific services they provide to us.

6. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and support our marketing efforts.

You can control cookie preferences through your browser settings. Disabling cookies may affect certain features of our website, including the checkout process. For more information on managing cookies, visitaboutcookies.org.

7. Behavioural Advertising

We may use your Personal Information to provide you with targeted advertising or marketing communications we believe may interest you. This is done through:

• Google Ads & Analytics: We use Google Analytics to understand how customers use the Site. You can opt out of Google Analyticshere. View theGoogle Privacy Policy.
• Social Media Platforms: We may use conversion tracking from Facebook, Instagram, or other platforms to measure the effectiveness of our advertising. You can manage your ad preferences in your platform account settings.

You may opt out of targeted advertising at theDigital Advertising AllianceorYour Online Choices.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• Order information: Retained for 5 years to comply with UAE tax and accounting legal requirements.
• Account information: Retained until you request deletion or account closure.
• Marketing communications: Retained until you unsubscribe or opt out.
• Analytics data: Retained for up to 26 months.

Once the retention period expires, personal data is securely deleted or anonymized.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• All payment transactions are encrypted using industry-standard SSL/TLS technology (HTTPS).
• Payment card data is tokenized by Stripe — we never store full card numbers on our servers.
• Access to personal data is restricted to authorized personnel only.
• Our servers and databases employ firewalls and access controls.

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United Arab Emirates where our company is registered, and the United States and Canada where our service providers (Stripe, Google, Resend) operate.

When transferring data from the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

11. Your Rights (GDPR — European Users)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data under certain conditions.
• Right to Restrict Processing: Request limitation of how we process your data.
• Right to Data Portability: Request your data in a structured, commonly used, machine-readable format.
• Right to Object: Object to our processing of your personal data for direct marketing purposes or legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at hello@ballershirt.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

12. Your Rights (CCPA — California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the right to:

• Know what personal information we collect, use, and share about you.
• Request deletion of your personal information, subject to certain exceptions.
• Opt out of the sale of your personal information (note: we do not sell personal information).
• Non-discrimination for exercising your CCPA rights — we will not deny service or charge different prices.
• Request details about the categories and specific pieces of personal information we have collected.

To make a CCPA request, email us at hello@ballershirt.com. We will verify your identity before processing the request.

13. UAE PDPL Compliance

As a company registered in the United Arab Emirates, we comply with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). Key principles we follow:

• Data collection with consent and for specified, legitimate purposes.
• Data minimization — we collect only what is necessary.
• Accuracy — we take steps to ensure data is accurate and up to date.
• Storage limitation — data is retained only as long as necessary.
• Integrity and confidentiality — appropriate security measures are in place.
• Accountability — we are responsible for demonstrating compliance.

14. Do Not Track

Some browsers have a “Do Not Track” (DNT) feature that signals to websites that you do not wish to be tracked. Our website does not currently respond to DNT signals because there is no uniform industry standard for how DNT should be interpreted. We will monitor developments and update this policy if standards change.

15. Minors

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor under 18 has provided us with personal data, we will take steps to delete it immediately. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@ballershirt.com.

16. Third-Party Links

Our website may contain links to third-party websites, including social media platforms, payment processors, and partner sites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Changes will be posted on this page with an updated “Last updated” date. For material changes, we may notify you by email or a prominent notice on our website. We encourage you to review this policy periodically.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer: