Privacy Policy
Here-O Donuts (“Here-O”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information you share with us.
This Privacy Policy explains how we collect, use, disclose, retain and protect your personal information when you visit our website, place an order, create an account, contact us, submit a corporate or catering enquiry, subscribe to marketing communications or otherwise interact with us.
By using our website or providing your personal information, you acknowledge the practices described in this Privacy Policy.
1. Information We Collect
Depending on how you interact with us, we may collect the following information:
Information you provide directly
- Your name
- Phone number
- Email address
- Billing and delivery address
- Company name
- Order and product preferences
- Corporate, wholesale, catering or event requirements
- Messages, feedback and customer-support communications
- Account login and profile information
- Marketing preferences
- Any other information you voluntarily provide
Order and payment information
When you make a purchase, we collect information relating to your order, payment status, transaction reference, delivery method and purchase history.
Payment-card information is processed securely by the payment providers available at checkout. We do not ordinarily receive or store your complete payment-card details.
Information collected automatically
When you browse our website, we and our service providers may automatically collect:
- IP address
- Browser and device type
- Operating system
- Pages viewed and links selected
- Referring website
- Approximate location
- Date and time of visits
- Cart and checkout activity
- Cookie identifiers and similar technical information
Information from third parties
We may receive information from Shopify, payment providers, delivery partners, analytics providers, social-media platforms, advertising services and applications connected to our store.
2. How We Use Your Information
We may use personal information to:
- Process, prepare and fulfil orders
- Arrange delivery or collection
- Process payments and refunds
- Communicate order confirmations and status updates
- Respond to questions, complaints and support requests
- Handle corporate, wholesale, catering and event enquiries
- Provide requested product or allergen information
- Create and manage customer accounts
- Detect fraud, misuse and security threats
- Maintain and improve our website, products and services
- Understand website usage and customer preferences
- Personalise your shopping experience
- Send promotional communications where you have consented or where otherwise permitted by law
- Comply with accounting, tax, food-safety, consumer-protection and other legal obligations
- Establish, exercise or defend legal claims
We will only process personal information where we have an appropriate legal basis, including your consent, performance of a contract, compliance with legal obligations, protection of legitimate interests or another basis permitted by applicable law.
3. Marketing Communications
We may send promotional emails, SMS messages or other marketing communications where you have agreed to receive them or where permitted by applicable law.
You can unsubscribe at any time by:
- Selecting the unsubscribe option in a marketing email
- Following the opt-out instructions in a message
- Contacting us using the details below
Unsubscribing from marketing will not prevent us from sending transactional messages relating to an existing order, enquiry or account.
4. How We Share Information
We may share personal information with trusted third parties where reasonably necessary, including:
- Shopify, which provides the ecommerce platform used to operate our online store
- Payment processors and financial institutions
- Delivery, courier and collection partners
- Website hosting, cloud-storage and IT-service providers
- Customer-service and communication platforms
- Analytics, advertising and marketing providers
- Fraud-prevention and cybersecurity providers
- Accountants, lawyers, insurers and professional advisers
- Government bodies, regulators and law-enforcement authorities where required
- A purchaser, investor or successor in connection with a business sale, restructuring or transfer
These parties may process information only for the services they provide, subject to their contractual and legal obligations.
We do not sell your personal information in exchange for monetary payment. Depending on the analytics or advertising tools enabled on our website, some disclosures may be treated as “sharing” under certain privacy laws. Available cookie controls can be used to manage non-essential tracking.
5. Shopify
Our store is hosted and operated through Shopify. Shopify processes certain customer and visitor information to provide the ecommerce platform, checkout, fraud prevention, analytics and related services.
Shopify may process information in countries outside the country in which you live. Shopify’s own privacy notices explain how it processes information in connection with its services.
Shopify advises merchants to disclose that their stores are hosted by Shopify and to maintain accurate privacy and cookie notices reflecting enabled store services.
6. Cookies and Similar Technologies
Our website uses cookies, pixels, local storage and similar technologies to:
- Operate essential website and checkout functions
- Remember cart contents and preferences
- Keep accounts secure
- Measure website traffic and performance
- Understand how visitors use the website
- Personalise content
- Support advertising and marketing, where enabled
Essential cookies are required for the website to function. Where required, non-essential cookies will be used according to your consent preferences.
You may manage your choices through the cookie banner or cookie-preference controls available on our website. You may also restrict cookies through your browser, although some website features may not work correctly.
7. International Data Transfers
Shopify and some of our service providers may process or store information outside the United Arab Emirates.
Where personal information is transferred internationally, we will take reasonable steps to ensure the transfer is handled in accordance with applicable data-protection requirements and appropriate safeguards.
8. Data Retention
We retain personal information only for as long as reasonably necessary to:
- Complete orders and provide services
- Maintain customer accounts
- Resolve disputes and support requests
- Meet accounting, tax and regulatory requirements
- Prevent fraud and enforce agreements
- Establish or defend legal claims
Retention periods may differ depending on the type of information and the purpose for which it was collected. Information that is no longer required will be deleted, anonymised or securely disposed of, subject to applicable legal requirements.
9. Information Security
We use reasonable administrative, organisational and technical measures intended to protect personal information against accidental loss, unauthorised access, alteration, disclosure or misuse.
However, no internet transmission or electronic storage system is completely secure. We cannot guarantee absolute security, and customers should protect their account credentials and notify us of suspected unauthorised activity.
10. Your Privacy Rights
Subject to applicable law, you may have the right to:
- Ask whether we process your personal information
- Request access to your personal information
- Request correction of inaccurate or incomplete information
- Request deletion of information
- Restrict or object to certain processing
- Withdraw consent where processing relies on consent
- Request transfer of eligible information
- Object to direct marketing
- Submit a complaint to the appropriate regulatory authority
To make a request, contact us using the details below. We may need to verify your identity before completing the request. Certain rights may be limited where information must be retained to comply with law, complete a transaction or defend legal claims.
11. Children’s Privacy
Our website is not directed specifically at children.
Where a parent, guardian, school, company or event organiser places an order for children, the person placing the order is responsible for providing any necessary information and obtaining any required permissions.
Please do not submit personal information about a child unless you are authorised to do so.
12. Third-Party Websites
Our website may contain links to third-party websites, social-media platforms, maps, payment services or other external services.
We are not responsible for the privacy, security or content practices of third parties. Please review their privacy notices before providing information to them.
13. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our services, technology, legal obligations or business practices.
The updated version will be posted on this page with a revised effective date. Material changes may also be communicated through the website or another appropriate method.
14. Contact Us
For questions, privacy requests or concerns, please contact:
Here-O Donuts
Dubai, United Arab Emirates
Email: hey@hereodonuts.com
Phone: +971 54 305 7711

































































