Same-day delivery in Dubai, order by 2 pm†Gift wrap and a handwritten note, free†

The house · Privacy

Privacy

What the house keeps about you, why, for how long, and how to have it changed or deleted.

Updated 21 October 2026

Who keeps it

The companyThe company's legal name, as on its trade licence†, trading as Novyn.
AddressThe company's registered address in the UAE†
QuestionsWrite to [email protected]† about anything on this page.

What we keep

Your accountYour name and email, and your password, kept only as a one-way hash that nobody at the house can read.
Your ordersWhat you ordered and paid, your email and mobile, the delivery address and landmark, and the gift note and charms wish if you wrote them.
A saved addressOnly when you tick Save this address for next time.
Your cardNever reaches the house. You type it into the payment provider's own secure field; we receive only whether the payment went through, and its reference.
CodesThe 6-digit codes and one-tap links we email you are kept scrambled, and stop working after 10 minutes and 24 hours.

In your browser

CookiesThe house sets three, all to sign you in: one keeps you signed in for up to 30 days, one tells the pages that you are, and one holds a new sign-up open for 24 hours while you confirm your email.
On your deviceYour parcel, the charms you try on a bag, your first name for the greeting and a checkout in progress stay in your browser's own storage, until you check out.
No trackingNo analytics, advertising or social-media trackers.
The bot checkWhen you create an account, reset a password or check out as a guest, Cloudflare Turnstile checks that a person is using the page. It reads technical signals from your browser, such as its IP address and type, and doesn't use them to profile you.

Why

Your orderTo take your payment, wrap and deliver the parcel, and send your receipt. This is the contract between us: without it there is no order.
Your accountBecause you asked for one.
The lawTo keep the shop's records for as long as UAE law requires.
SafetyTo stop repeated sign-in and checkout attempts, by counting them for each IP address and email.
MarketingNone. The house sends no newsletters or offers. If that ever changes, it will ask you first, and saying no will always be easy.
Never soldYour details are never sold, or shared for anyone else's marketing.

Who else sees it

PaymentsStripe† processes your payment, and your card details stay with them.
DeliveryYour name, mobile and address go to the courier†, to deliver the parcel.
HostingCloudflare runs the site, its database and the bot check. The database is kept in Cloudflare's data centres in the eastern United States.†
EmailYour codes and receipts are sent through the email service†.
Outside the UAESome of these services keep data in other countries, under data-protection terms agreed with the house.
The authoritiesWhen UAE law requires it, and only what it requires.

How long

OrdersFive years, as UAE tax law requires of a shop's records.†
Your accountUntil you ask us to close it. Closing it deletes your name, password and saved addresses; your orders stay for the five years above.
Signed in30 days at most, or until you sign out.
Attempt countsDeleted within a day.

Your rights

See and correctAsk what we keep about you, and have anything wrong put right.
Take a copyAsk for your details in a file you can take elsewhere.
DeleteAsk us to delete your details. We keep only what the law makes us keep, for as long as it says.
ObjectAsk us to stop using your details for anything but your order.
HowWrite to [email protected]† from the address you use with us. We answer within 30 days.†
ComplainIf we fall short, you can complain to the UAE's data protection authority.

Children

Accounts and orders are for adults. If a child has given us their details, write to us and we will delete them.†

Changes

When this page changes, the date at the top changes. If a change affects what we do with details you have already given us, we email you first.†