Privacy policy

Last updated 11 September 2026

This policy explains what personal data thedrippack.com collects, why it is collected, how long it is kept and how to have it removed. It covers this website only. It does not cover Amazon.ae, which operates under its own privacy notice.

Who is responsible

The Drip Pack, Dubai, United Arab Emirates, is the controller of the personal data described here. For any question about this policy, or to make a request about your data, write to privacy@thedrippack.com.

What this site collects

Website analytics

This site uses Cloudflare Web Analytics. It is cookieless. It does not set a cookie, it does not use a device fingerprint, and it does not follow you from one website to another. It records the page requested, the referring page, the country derived from the network request, and broad device and browser type. None of this identifies you as an individual.

Cloudflare processes this data on our behalf as a processor. Cloudflare states that it does not retain the IP address used to derive these measurements.

Email signup

If you enter your email address in the signup form, that address is collected. It is submitted through Formspree, which receives and stores it on our behalf as a processor and passes it to us. The form also carries a hidden field that catches automated submissions. That field is not visible to you and is not used for any other purpose.

No other field is collected. The form does not ask for your name, your telephone number, your address or any payment detail, and it never will.

What this site does not collect

  • No payment details. Every purchase happens on Amazon.ae, under Amazon's own terms and privacy notice.
  • No account, no login, no password.
  • No advertising or social media tracking pixels.
  • No special category data as defined by the GDPR, and no sensitive personal data as defined by UAE Federal Decree Law No. 45 of 2021.

Why it is collected

  • Analytics. To understand how many people visit the site and which pages they read, so the site can be improved. The lawful basis under the GDPR is legitimate interest. The measurement is aggregate and cookieless, which is the least intrusive method available.
  • Email signup. To tell you once when the product is available on Amazon.ae, and to send occasional messages about the product after that. The lawful basis under the GDPR is consent, given when you submit the form. Under UAE Federal Decree Law No. 45 of 2021 the basis is likewise your consent.

How long it is kept

  • Analytics. Cloudflare retains Web Analytics measurements for a rolling period of up to six months, after which they are discarded.
  • Email addresses. Kept until you ask for removal, or until three years pass with no engagement from you, whichever comes first. At that point the address is deleted.

Who it is shared with

Personal data is shared only with the processors named above, Cloudflare and Formspree, and only so that they can provide the service described. It is not sold, it is not rented, and it is not shared with advertisers or data brokers.

Both processors may handle data outside the United Arab Emirates. Where data leaves the UAE or the European Economic Area, the transfer relies on the standard contractual clauses and the safeguards those providers have in place.

Your rights

Under the GDPR and under UAE Federal Decree Law No. 45 of 2021 you have the right to ask what personal data is held about you, to have it corrected, to have it deleted, to restrict or object to how it is used, and to receive a copy of it in a portable format. Where processing rests on consent, you may withdraw that consent at any time, and withdrawing it does not affect anything done before you withdrew it.

To exercise any of these rights, write to privacy@thedrippack.com. A request is answered within thirty days. Every marketing email also carries an unsubscribe link, and using it removes your address.

If you are in the European Economic Area or the United Kingdom and you are unhappy with how a request was handled, you may complain to your national data protection authority. If you are in the United Arab Emirates, you may complain to the UAE Data Office.

Cookies

This site sets no cookies. It uses no local storage and no session storage. Cloudflare Web Analytics was chosen over Google Analytics precisely because it is cookieless, and no other third party script runs on this site.

Because no cookie is set and no tracking technology requiring consent is used, no cookie consent banner is shown. This is a deliberate decision and it is recorded here so that the absence of a banner is documented rather than accidental. If an analytics tool that sets cookies is ever introduced, a consent banner becomes mandatory and this policy will be updated at the same time.

Security

The site is served over HTTPS. The email signup is transmitted over an encrypted connection. No personal data is stored on this website itself, because the site is a set of static files with no database and no server side code.

Children

This site is not directed at children, and the email signup is not intended for anyone under sixteen. If you believe a child has submitted an email address, write to the address above and it will be deleted.

Links to other sites

Buy actions on this site lead to Amazon.ae. Once you follow one of those links you are on Amazon's website and Amazon's privacy notice applies. This policy does not cover it.

Changes to this policy

If this policy changes, the revised version is published on this page and the date at the top is updated. Material changes affecting how your email address is used will also be sent to the address you gave.