1. Who we are
welovedecode.com is run by WeLoveDecode FZE LLC ("Decode", "we"). Decode provides a gifting platform: shops and service providers ("sellers") create gift pages, anyone can pay for a gift for the person named on a page ("recipient"), and the seller hands the gift over.
This policy covers the gifting platform and everyone who uses it: payers, recipients, sellers and their team members, and visitors. It follows the laws of the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
Decode is a technology platform only. The sale is between the payer and the seller. Each seller is responsible for the data it holds in its own systems and in its own payment account, under its own privacy policy.
2. What we collect
Payers
- Name and email address.
- The last four digits, brand and country of the card or wallet. We never see or store the full card number or security code.
- The payment: amount, currency, date and time, status.
- What was shown at payment: the seller, the recipient's name, the product, the Terms and the refund text. We keep this as proof in case of a dispute.
Recipients
- The name the seller writes on the gift page, the product and the price.
- A photo, if the recipient adds one.
- A mobile number, only if the seller sends the gift link through our platform by WhatsApp.
Sellers and their team members
- Business details: legal name, registration number, address, VAT number, contact phone and email. Bank details go directly to the payment processor; we do not store them.
- Team members: name, mobile number and role.
- The gift pages, campaigns and images they create.
Every visitor
- IP address, used for security and to prevent abuse. We do not store it in readable form.
- Country, worked out from the IP address, to show a price estimate in local currency.
- Device, browser, and the pages and buttons used.
3. Cookies
We use only the cookies the site needs to work: to keep team members logged in, to let only the recipient change the photo on a gift page, to keep a started payment with the right browser, and to count visitors without knowing who they are. These last up to 30 days. We use no advertising or tracking cookies.
4. How we use it
- To show gift pages and take payments.
- To send payment confirmations and notifications.
- To let the seller hand over the gift to the right person.
- To prevent fraud and abuse.
- To handle refunds, disputes and chargebacks.
- To keep records required by law.
- To keep the site secure, fix problems and improve it.
- To answer questions.
We do not sell personal data. We do not use it for advertising.
5. Who we share it with
- Payment processor: processes payments, refunds and disputes.
- The seller: delivers the gift or service.
- Messaging and email providers: send login codes, notifications and confirmations.
- Hosting and storage providers: run the website and store the data.
- Security providers: prevent abuse and bots.
- Authorities: only when the law requires it.
The recipient sees only the gift, never the payer's details.
If Decode is sold or merged, the data passes to the new owner under this policy.
6. How we share it
- Only over secure, encrypted connections.
- Each party gets only the data it needs for its task.
- Card details go from the payer's browser directly to the payment processor. They never pass through our servers. The payment processor's own privacy policy applies to them.
7. How we protect it
- Encrypted connections (HTTPS) on every page, and encrypted storage.
- Card payments handled only by a payment processor certified to PCI DSS Level 1.
- Each seller sees only its own data.
- Team members log in with one-time WhatsApp codes, not passwords.
- Limits and bot checks against abuse.
- Access to personal data only for authorised Decode staff.
- Regular security reviews.
No system is completely secure. If a breach affects your data, we will inform you and the authorities as UAE law requires.
8. How long we keep it
- Payment records: 7 years, as required by UAE law.
- Photos on unpaid gift pages and recipients' campaign photos: deleted within 30 days after the page or campaign ends.
- A paid gift: kept with its payment record.
- Other gift page details: kept only as long as needed to run the platform, or as the law requires.
- Team member accounts: until the seller removes them.
9. Where it is stored
Data is stored in the European Union. Some providers may process data in other countries, under contracts that protect it.
10. Your rights
You can ask to see, correct or delete your data. Payment records the law requires us to keep cannot be deleted before the 7 years end. A recipient can ask the seller to change or remove a gift page at any time.
Requests: sebastian@welovedecode.com. We answer within 30 days.
11. Your responsibilities
- Sellers must have the right to use the names, photos and numbers they put on the platform.
- Recipients must have the right to use any photo they add.
- Do not upload content that is unlawful or belongs to someone else.
Decode is not responsible for how sellers use data in their own systems, or for content that sellers, payers or recipients add or share.
12. Children
The platform is not meant for children under 18. A gift may be for a person of any age; the seller enters only the name.
13. Changes
We may update this policy. The date at the top shows the latest version. Using the platform after a change means you accept it.
14. Law
This policy is governed by the laws of the United Arab Emirates.