Privacy policy

This policy explains what personal data thedrippack.com collects. The short answer is none. It covers this website only. It does not cover Amazon.ae, which operates under its own privacy notice.

Who is responsible

The Drip Pack, Dubai, United Arab Emirates, operates this website. For any question about this policy, write to hello@thedrippack.com.

What this site collects

Nothing that identifies you. There is no form anywhere on this site, no field to type into, and no address, name or any other detail is asked for or stored. The only measurement running is described next.

Website analytics

This site uses Cloudflare Web Analytics. It is cookieless. It does not set a cookie, it does not use a device fingerprint, and it does not follow you from one website to another. It records the page requested, the referring page, the country derived from the network request, and broad device and browser type. None of this identifies you as an individual.

Cloudflare processes this data on our behalf as a processor. Cloudflare states that it does not retain the IP address used to derive these measurements.

The measurement script is loaded from static.cloudflareinsights.com and is the only third party script on this site. You can confirm that for yourself by viewing the source of any page.

What this site does not collect

• No email address. There is no signup, no newsletter and no mailing list.
• No payment details. Every purchase happens on Amazon.ae, under Amazon's own terms and privacy notice.
• No account, no login, no password.
• No advertising or social media tracking pixels.
• No special category data as defined by the GDPR, and no sensitive personal data as defined by UAE Federal Decree Law No. 45 of 2021.

Why the analytics are collected

To understand how many people visit the site and which pages they read, so the site can be improved. The lawful basis under the GDPR is legitimate interest. The measurement is aggregate and cookieless, which is the least intrusive method available.

How long it is kept

Cloudflare retains Web Analytics measurements for a rolling period of up to six months, after which they are discarded. Nothing else is kept, because nothing else is collected.

Who it is shared with

The aggregate measurements described above are handled by Cloudflare alone, and only so that Cloudflare can provide the service. Nothing is sold, nothing is rented, and nothing is shared with advertisers or data brokers. There is no email list to share.

Cloudflare may handle data outside the United Arab Emirates. Where data leaves the UAE or the European Economic Area, the transfer relies on the standard contractual clauses and the safeguards that provider has in place.

Your rights

Under the GDPR and under UAE Federal Decree Law No. 45 of 2021 you have the right to ask what personal data is held about you, to have it corrected, to have it deleted, to restrict or object to how it is used, and to receive a copy of it in a portable format.

In practice there is nothing here to exercise those rights against. This site holds no personal data, so there is no record to retrieve, correct, export or delete, and no dedicated data request address is offered because there would be nothing to answer with. If you believe that is wrong, write to hello@thedrippack.com and it will be looked into. If an email address or any other personal data is ever collected in future, a request route is added to this page at the same time.

If you are in the European Economic Area or the United Kingdom and you are unhappy with how a question was handled, you may complain to your national data protection authority. If you are in the United Arab Emirates, you may complain to the UAE Data Office.

Cookies

This site sets no cookies. It uses no local storage and no session storage. Cloudflare Web Analytics was chosen over Google Analytics precisely because it is cookieless, and no other third party script runs on this site.

Because no cookie is set and no tracking technology requiring consent is used, no cookie consent banner is shown. This is a deliberate decision and it is recorded here so that the absence of a banner is documented rather than accidental. If an analytics tool that sets cookies is ever introduced, a consent banner becomes mandatory and this policy will be updated at the same time.

Security

The site is served over HTTPS. No personal data is stored on this website, because the site is a set of static files with no database, no server side code and no form.

Children

This site is not directed at children. Since nothing is collected from anyone, nothing is collected from a child either.

Links to other sites

Buy actions on this site lead to Amazon.ae. Once you follow one of those links you are on Amazon's website and Amazon's privacy notice applies. This policy does not cover it.

Changes to this policy

If this policy changes, the revised version is published on this page and the date at the top is updated.