Last Updated: June 13, 2026
Shifa Prime General Trading FZE LLC (hereinafter referred to as "Shifa Prime", "we", "us", or "our"), operating from the Ajman Free Zone, United Arab Emirates, is committed to protecting the privacy, confidentiality, and security of the personal data of our users, customers, and partners (hereinafter referred to as "you" or "your").
This Privacy Policy explains how we collect, use, disclose, process, and safeguard your personal data when you visit our website www.shifaprime.ae (the "Site"), purchase products from our Wellness division, or interact with our upcoming Automotive Marketplace pre-launch frameworks. This policy is governed by the federal laws of the United Arab Emirates, including UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL).

1. DATA CATEGORIES WE COLLECT
To power our high-velocity e-commerce and lead-generation engines, Shifa Prime collects both personal data explicitly provided by you and technical data tracked automatically by our infrastructure.
1.1. Personal Data Provided Directly by You:
 Identity Data: First name, last name, business name, and corporate registration details (relevant to dealer networks).
Contact Data: Email address, telephone number, physical shipping address, and billing address.
Financial Transaction Data: Payment card details (processed securely via encrypted third-party payment gateways), billing history, and order invoices. Profile & Commercial Data: Your account credentials, product preferences, feedback, customer service inquiries, and vehicle search/lead preferences submitted via our Automotive portal.
1.2. Data Collected Automatically via Technology:
Technical and Device Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and device hardware identifiers. Usage and Analytics Data: Detailed metrics on how you navigate our Site, page response times, download errors, product views, add-to-cart actions, and checkout progressions.

2. HOW WE COLLECT YOUR DATA
We utilize multi-layered data ingestion pathways to maintain permanent control of our corporate marketing intelligence:
Direct Interaction: When you create an account, complete a wellness purchase, subscribe to our newsletters, or submit a "Coming Soon" contact form on our Automotive page.
Server-Side & Client-Side Tracking Technologies: We utilize advanced tracking mechanics, including browser cookies, web beacons, Meta Pixel, and Meta Conversions API (CAPI). These systems log real-time customer behavior directly from our Shopify server architecture to optimize performance marketing data.

3. PURPOSES OF DATA PROCESSING & LEGAL BASIS
Shifa Prime processes your personal data strictly under valid legal frameworks, including contract execution, regulatory compliance, and our legitimate commercial interests.
For fulfillment and commerce, including processing orders, managing payments, and coordinating shipping for wellness products, we process your Identity, Contact, Financial, and Transaction Data. This processing is necessary for the execution of a commercial contract.
For logistics coordination, we share your Identity and Contact Data with tier-1 regional fulfillment networks like Aramex. This processing is necessary for the execution of a commercial contract.
For automotive network building, such as registering early-access requests, dealer applications, and managing marketplace leads, we process your Identity, Contact, and Profile Data. This processing is based on your explicit consent and our legitimate interest in expanding our enterprise networks.
For funnel optimization, we track Technical and Usage Data through server-side APIs to improve mobile checkout speed and stabilize conversion rates. This processing is based on our legitimate commercial interest in stabilizing and improving platform performance.
For legal compliance, we process your Identity, Contact, and Transaction Data to adhere to UAE tax requirements, custom mandates, or municipal health reporting laws. This processing is required for the fulfillment of statutory legal obligations under UAE law.

4. DATA SHARING & CROSS-BORDER TRANSFERS
Shifa Prime protects its enterprise independence by refusing to sell or rent your data to external data brokers. We share your information exclusively with trusted third-party providers critical to executing our operations:
Logistics Partners (Aramex): We transmit shipping profiles (names, addresses, phone numbers) to our regional shipping partners to facilitate rapid 24-to-48-hour delivery across the UAE and GCC corridors. 
Payment Processors: Financial card details are fed directly into tier-1, PCI-DSS compliant secure vaults (such as Stripe) using industrial-grade encryption. Shifa Prime does not store raw credit card numbers on its internal servers.
Marketing Infrastructure Engines: Technical usage data is communicated through server-to-server frameworks (like Meta CAPI) to monitor performance ad conversion health.
Cross-Border Transfers: Because our suppliers and technology stacks span multiple continents, your data may be processed outside the UAE. Shifa Prime ensures all international data transfers maintain adequate structural security protocols that match or exceed UAE PDPL standards.

5. DATA RETENTION POLICY
We retain your personal data only for as long as is strictly necessary to satisfy the commercial purposes for which it was captured, including the settlement of any delivery disputes, financial auditing tracking, or warranty inspection periods.
E-commerce transaction records are securely archived to comply with UAE corporate record-keeping laws.
Marketing lead data captured via our Automotive "Coming Soon" banner is retained until you explicitly request removal or choose to unsubscribe from our early-access dealer network updates.

6. SECURITY MECHANISMS & DATA PROTECTION
Shifa Prime deploys institutional-grade security architectures to prevent your personal information from being accidentally lost, altered, leaked, or accessed by unauthorized actors.
Our digital framework relies on Secure Sockets Layer (SSL/TLS) encryption across all endpoints.
Access to your personal information is restricted under a strict "least-privilege" operational protocol. Only internal operations managers, data developers, or compliance staff who require access to complete a specific task are granted data system permissions.

7. YOUR REGULATORY RIGHTS UNDER UAE PDPL
Under the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, you possess clear statutory rights regarding the management of your personal information:
Right to Information/Access: You have the right to request a clean confirmation of whether your data is being processed, alongside a copy of the specific data files.
Right to Correction/Rectification: You can request the immediate correction of inaccurate or incomplete personal information stored in our ledgers.
Right to Erasure (The Right to be Forgotten): You have the right to request that Shifa Prime completely purge your personal data from our operational networks when it is no longer required for active contract execution or legal mandates.
Right to Restrict Processing: You can request that we temporarily isolate or restrict the processing of your data under specific technical circumstances.
Right to Withdraw Consent: Where our operations rely explicitly on your consent (such as subscribing to our Automotive marketplace launch timeline), you may withdraw your consent at any time.
To exercise any of these structural data rights, please submit a formal query to our operations desk at the contact address listed below.

8. THIRD-PARTY LINK PROTECTION
Our Site may contain links or portals directing you to external websites, plug-ins, or marketplace fragments. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. Shifa Prime does not control these external platforms and carries zero liability for their independent privacy standards. We highly recommend reviewing the privacy notices of every outbound platform you visit.

9. MANDATORY MODIFICATIONS & REVISIONS
Shifa Prime reserves the sole right to update, revise, or rewrite this Privacy Policy at any time to adapt to new multi-vertical system rollouts, updated server configurations, or fresh regulatory updates issued by the UAE Data Office. Any modifications will become active immediately upon the posting of the revised text on the Site, marked by the "Last Updated" timeline at the top of this page.

10. CORPORATE REGISTRATION & CONTACT DETAILS
If you have any questions, compliance notices, or wish to invoke your personal data protection rights, please contact our data management team directly:
Corporate Entity Name: Shifa Prime General Trading FZE LLC
Registered Corporate Address: Ajman Free Zone, Ajman, United Arab Emirates
Dedicated Operations Email: support@shifaprime.com