Privacy Policy – Manishas Kitchen

1. Introduction

This Privacy Policy explains how Manisha Bakery & Swe (“we”, “us”, or “our”), the operator of manishasonline.com (the “Site”), collects, uses, discloses, and protects personal data when you visit the Site, place an order, contact us, or otherwise interact with our business, including through WhatsApp Business.

By using the Site or placing an order with us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Site.

2. Who we are

Manisha Bakery and Sweets LLC is a food manufacturing business operating under trade licence number 75872, issued in the emirate of Ajman, with its registered address at:

Warehouse No. 12, Opposite Woodtec Company, Near China Mall, Al Jurf 1, Ajman, UAE

For the purposes of the PDPL, Manisha Bakery and Sweets LLC acts as the data controller for personal data collected through the Site.

3. Personal data we collect

We collect the following categories of personal data:

Identity and contact data: name, email address, phone number, delivery address, and billing address.
Order data: products purchased, order value, order history, delivery instructions, and any notes you provide (for example, allergy or dietary notes).
Payment-related data: payment method used and transaction status. Full card details are processed directly by our payment gateway provider and are not stored on our servers.
Communications data: messages you send us through WhatsApp Business, email, the site’s contact forms, or social media, and our replies to you.
Technical data: IP address, browser type and version, device information, and pages visited on the site, collected automatically through cookies and similar technologies.
Marketing preferences: whether you have opted in or out of marketing communications.

4. How we collect personal data

Directly from you, when you create an account, place an order, contact us, subscribe to updates, or message us on WhatsApp.
Automatically, through cookies and similar technologies when you browse the site (see our Cookie Policy).
From third parties, such as our payment gateway or delivery partners, to the extent necessary to fulfil your order.

5. Purposes and legal basis for processing

We process your personal data for the following purposes and on the following legal bases under Article 4 of the PDPL:

To process and fulfil your orders, arrange delivery or pickup, and provide customer service — which is necessary for the performance of a contract with you.
To respond to enquiries sent via WhatsApp, email, or the Site — necessary for the performance of a contract or based on our legitimate interest in responding to customers.
To send you order confirmations, delivery updates, and service-related communications — necessary for the performance of a contract.
To send you marketing communications about products, promotions, and offers – based on your consent, which you may withdraw at any time.
To improve the Site, understand customer preferences, and run advertising campaigns (including on Meta/Facebook and Instagram) — based on your consent to non-essential cookies and tracking technologies.
To comply with our legal obligations, including under UAE consumer protection, tax, and commercial legislation, and to prevent fraud — necessary for compliance with a legal obligation.

6. Who we share your data with

We share personal data only where necessary, with the following:

Delivery and courier partners to fulfil and deliver your order.
Payment gateway and banking partners to process payments securely.
IT, hosting, and website service providers who support the operation of the Site (for example, our hosting and e-commerce platform providers).
Meta Platforms, Inc. (Facebook, Instagram, WhatsApp Business), where you interact with us through those channels or where we run advertising that uses tracking tools such as the Meta Pixel.
Professional advisors (accountants and lawyers) and government or regulatory authorities, where required by law or to protect our legal rights.

We do not sell your personal data to third parties.

7. International transfers

Some of our service providers (including cloud hosting, payment, and advertising platforms) may process personal data on servers located outside the UAE. Where this occurs, we take reasonable steps to ensure such transfers are made only to jurisdictions or organisations that provide an adequate level of protection, or subject to appropriate contractual safeguards, consistent with the PDPL’s rules on cross-border data transfer.

8. Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including to satisfy accounting, tax, and legal record-keeping obligations under UAE law. Order and transaction records are generally retained for the period required by applicable commercial and tax legislation, after which they are securely deleted or anonymised.

9. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration, consistent with our obligations as a data controller under Article 7 of the PDPL. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Subject to the conditions set out in the PDPL, you have the right to:

Request access to the personal data we hold about you.
Request correction of inaccurate or incomplete personal data.
Request deletion of your personal data, where applicable.
Withdraw consent to processing based on consent (such as marketing) at any time, without affecting the lawfulness of processing carried out before withdrawal.
Object to processing carried out for direct marketing purposes.
Request restriction of, or object to, certain processing, including automated decision-making that significantly affects you.
Request a copy of your personal data in a portable format, where technically feasible.
Lodge a complaint with the UAE Data Office if you believe your data protection rights have been infringed.

To exercise any of these rights, contact us using the details in Section 13 below.

11. Marketing communications

We will only send you marketing messages by email, SMS, or WhatsApp where you have consented to receive them, in line with UAE telemarketing regulations. You may opt out at any time by using the unsubscribe link in our emails, replying “STOP” to messages, or contacting us directly.

12. Children’s privacy

The Site is intended for use by adults capable of entering into a binding contract under UAE law. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

Email: [email protected]
WhatsApp: +971 52 716 7676
Address: Warehouse No. 12, Opposite Woodtec Company, Near China Mall, Al Jurf 1, Ajman, UAE

Cart