Privacy Policy
Last updated: 13 August 2026
This Privacy Policy explains how DaraSphere (“DaraSphere”, “we”, “us” or “our”) collects, uses, stores and shares personal data when you visit darasphere.com, create an account, place or enquire about an order, subscribe to communications, submit a review, use our support services or otherwise interact with us.
1. Who we are
DaraSphere operates this website and is the controller of the personal data described in this Policy. We are based in Dubai, United Arab Emirates. Our correspondence location is 5629+73P, Dubai, United Arab Emirates.
Privacy and customer-support enquiries may be sent to support@darasphere.com or through our Contact page. Our English-language support hours are 9:00 a.m. to 9:00 p.m. UAE time, and our usual response time is less than one business day.
2. Scope
This Policy applies to customers and visitors in the United Arab Emirates, Gulf Cooperation Council countries, the United Kingdom, Germany, the Netherlands and any other location from which our website is accessed. It should be read with our Cookie Policy, Terms & Conditions, Shipping Policy and Returns & Refund Policy.
3. Personal data we collect
- Identity and contact data: name, email address, telephone number, billing and delivery address.
- Order and transaction data: products, quantities, order value, currency, payment status, delivery method, returns, refunds and communications about an order. Full card details are handled by the payment provider shown at checkout and are not stored by DaraSphere.
- Account data: username, encrypted password, saved addresses, preferences and order history.
- Support data: contact-form submissions, support-chat messages and information you voluntarily provide to help us answer a question.
- Marketing data: newsletter or Aquarium Care Planner sign-up, consent status, sign-up source and time, unsubscribe status and communication preferences.
- Content data: reviews, comments, photos or other user-generated content you choose to submit.
- Technical and usage data: IP address, device and browser information, approximate location derived from IP, referral source, pages viewed, timestamps, cookie identifiers and security logs.
We generally collect data directly from you, automatically from your browser or device, and from service providers involved in payment, fraud prevention, delivery and website operation. Please do not provide sensitive personal data unless we specifically request it and it is necessary.
4. Why we use personal data and our legal bases
| Purpose | Typical data | Legal basis |
|---|---|---|
| Provide products, accounts, checkout, delivery and customer support | Identity, contact, account, order and transaction data | Performance of a contract or steps requested before a contract |
| Process payments, refunds, accounting and tax records | Order, transaction and billing data | Contract and legal obligations |
| Prevent fraud, spam, abuse and security incidents | Technical, account, order and support data | Legitimate interests and legal obligations |
| Improve the website, products and customer experience | Usage, technical, feedback and aggregated statistics | Legitimate interests; consent where required for non-essential cookies |
| Send the requested planner or service message | Email, sign-up and delivery data | Contract/requested service |
| Send optional marketing communications | Email and marketing preferences | Consent, which may be withdrawn at any time |
| Publish and moderate reviews or comments | Name/display name, review, comment and related technical data | Consent, contract and legitimate interests in authentic feedback and moderation |
| Establish, exercise or defend legal claims | Relevant account, order, transaction and communication records | Legitimate interests and legal obligations |
5. Checkout and payments
Our store is operated using WooCommerce. When payment methods are available, the provider displayed at checkout processes the payment information required to authorise the transaction. We receive transaction identifiers, payment status and limited billing details, but we do not intentionally store complete payment-card numbers or card security codes.
6. Email sign-up and the Aquarium Care Planner
When you request the free Aquarium Care Planner, we collect the email address you submit, your consent choice, sign-up source and time, a one-way hash of your IP address and limited browser information for delivery, security and spam prevention. The PDF may be provided through a time-limited secure download link. We send marketing messages only where permitted and you may unsubscribe through the link in an email or by contacting us. Service or order messages are not marketing.
7. Cookies, statistics and embedded content
We use essential cookies for store functions such as the basket, account session, security and preferences. We may use privacy-oriented website statistics to understand visits and performance. Non-essential analytics, advertising or embedded third-party technologies will be used only where permitted and, where required, after consent. Embedded content may allow the relevant provider to receive technical and usage information. See our Cookie Policy for details and choices.
8. Who receives personal data
- hosting, caching, security, IT and website-administration providers;
- WooCommerce and providers supporting store functionality;
- payment providers selected or displayed at checkout;
- delivery, logistics and tracking providers where a shipment is arranged;
- email-delivery, customer-support and communication providers;
- analytics providers and embedded-content providers where enabled;
- professional advisers, auditors, insurers, regulators, courts or law-enforcement bodies where legally required; and
- a purchaser or successor if our business or relevant assets are reorganised or transferred, subject to appropriate safeguards.
We do not sell personal data. We require service providers to use personal data only for the agreed services and to protect it appropriately.
9. International transfers
DaraSphere is based in the UAE and serves customers in several countries. Personal data may therefore be processed in the UAE and in countries where our service providers operate. Where EU or UK personal data is transferred internationally, we use an available lawful mechanism and appropriate safeguards, such as an adequacy decision, approved contractual clauses or another recognised safeguard, as applicable. You may contact us for more information about the safeguards relevant to your data.
10. Retention
| Record | Typical retention approach |
|---|---|
| Orders, invoices, payments and refunds | For the period required for fulfilment, accounting, tax, dispute and legal obligations |
| Account information | While the account remains active and for a reasonable period afterwards, unless earlier deletion is appropriate |
| Support and contact messages | As long as needed to resolve the enquiry and maintain appropriate business records |
| Marketing consent and suppression records | Until consent is withdrawn; a minimal suppression record may be retained to respect an unsubscribe request |
| Security and technical logs | For a limited period proportionate to security, troubleshooting and fraud-prevention needs |
| Published reviews or comments | While published and as needed for moderation, authenticity and legal records |
We may retain information longer where required by law, a regulator, litigation hold or an unresolved dispute. When data is no longer needed, we delete, anonymise or securely isolate it.
11. Security
We use proportionate technical and organisational measures designed to protect personal data, including encrypted website connections, access controls, updates, backups, logging and service-provider controls. No online system can be guaranteed completely secure. If a personal-data breach creates a risk requiring notification, we will take the steps required by applicable law.
12. Your rights
Depending on your location and the applicable law, including the UAE Personal Data Protection Law, EU GDPR or UK GDPR, you may have rights to:
- request access to and a copy of your personal data;
- correct incomplete or inaccurate data;
- request deletion in applicable circumstances;
- restrict or object to processing;
- receive certain data in a portable format;
- withdraw consent at any time without affecting earlier lawful processing;
- object to direct marketing at any time; and
- complain to the competent data-protection authority.
To exercise a right, contact us through the details below. We may need to verify your identity and may retain a record of the request. Rights are subject to legal limits and exemptions. EEA users may complain to the data-protection authority in their country; UK users may complain to the Information Commissioner’s Office; UAE users may contact the competent UAE data-protection authority.
13. Children
Our store and services are not directed to children, and we do not knowingly collect personal data from a child who cannot lawfully provide it. A parent or guardian who believes a child has provided personal data should contact us so that we can take appropriate action.
14. Automated decisions
We do not currently make decisions producing legal or similarly significant effects based solely on automated processing. Security and fraud-prevention tools may flag activity for review.
15. Changes to this Policy
We may update this Policy when our practices, services or legal obligations change. The “Last updated” date identifies the current version. Where a change is material, we will provide an appropriate notice.
16. Contact us
Email: support@darasphere.com
Contact form: darasphere.com/contact/
Correspondence location: 5629+73P, Dubai, United Arab Emirates