Privacy Policy

Effective Date: March 2026

Wellness First ("Wellness First", "we", "us", or "our") is committed to protecting the privacy and security of personal data. This Privacy Policy is designed in accordance with applicable data protection regulations across the Gulf Cooperation Council (GCC), including the United Arab Emirates, Kingdom of Saudi Arabia, Qatar, Bahrain, Oman, and Kuwait, with primary compliance aligned with the UAE Federal Decree-Law No. 45 of 2021 Regarding the Protection of Personal Data.

Wellness First acts as the data controller for personal data collected through www.wellnessfirst.com and any related services. This Privacy Policy explains how personal data is collected, used, processed, stored, and protected when you access or use our website or related services. By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Data We Collect

We may collect personal data directly from you when you:

  • Create an account
  • Place an order
  • Subscribe to communications
  • Contact us
  • Interact with our website

The personal data collected may include:

  • Full name
  • Email address
  • Mailing address
  • Phone number (if provided)
  • Order history and transaction information
  • Account login credentials
  • Website usage data and preferences

Payment card details are processed through secure third-party payment providers and are not stored on Wellness First servers.

2. Legal Basis for Processing

In accordance with applicable GCC data protection regulations and, where relevant, UAE personal data protection law, Wellness First processes personal data under one or more of the following lawful bases:

  1. Consent: where you provide permission for specific processing activities, such as marketing communications
  2. Contractual necessity: to fulfill orders, deliver services, or manage customer accounts
  3. Legal obligation: where required to comply with applicable laws and regulatory requirements
  4. Legitimate business interests: including improving services, fraud prevention, and website security

3. How We Use Your Personal Data

Order Processing and Service Delivery

To process purchases, confirm orders, and deliver products or services requested.

Customer Support

To respond to inquiries, complaints, or technical support requests.

Personalization

To tailor website content, product recommendations, and services based on your preferences.

Marketing Communications

With your consent, we may send promotional messages, offers, or updates about products and services.

Website Functionality and Security

To maintain the operation, security, and integrity of our website and digital services.

You may withdraw consent or unsubscribe from marketing communications at any time by using the unsubscribe link in our emails or by contacting us.

4. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve functionality and enhance user experience.

Cookies may be used to:

  • Remember items in your shopping cart
  • Store website preferences
  • Analyze website usage
  • Improve website performance

You may manage cookie preferences through your browser settings. Disabling cookies may limit certain website features.

5. Sharing and Disclosure of Personal Data

Wellness First does not sell or rent personal data to third parties.

However, personal data may be shared with trusted service providers who support our business operations, including:

  • Payment processors
  • Logistics and delivery providers
  • IT and website service providers
  • Marketing and communication platforms

These service providers are contractually obligated to process personal data only for the purposes specified and to maintain appropriate confidentiality and security measures.

We may also disclose personal data when required by law, regulatory authorities, or to protect the rights, safety, or property of Wellness First or others.

6. Cross-Border Data Transfers

Personal data may be transferred to and processed in countries outside your country of residence where Wellness First or its service providers operate.

When personal data is transferred outside the GCC, Wellness First will implement appropriate contractual, technical, and organizational safeguards to maintain a level of protection that is consistent with applicable data protection laws.

7. Data Security

Wellness First implements appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

These safeguards may include:

  • Secure server infrastructure
  • Encryption and secure payment processing
  • Access controls and authentication systems
  • Regular security monitoring and system updates

8. Data Retention

Personal data is retained only for as long as necessary to:

  • Fulfill the purposes outlined in this Privacy Policy
  • Comply with legal or regulatory obligations
  • Resolve disputes and enforce agreements

Once personal data is no longer required, it will be securely deleted or anonymized.

9. Your Rights Under GCC Data Protection Laws

Depending on applicable law, individuals may have the following rights regarding their personal data:

  • Right to access personal data held about you
  • Right to request correction of inaccurate or incomplete data
  • Right to request deletion of personal data where applicable
  • Right to restrict or object to processing
  • Right to withdraw consent at any time for consent-based processing
  • Right to request a copy of your personal data

Requests related to personal data rights may be submitted through the contact information provided below.

10. Children's Privacy

Wellness First does not knowingly collect personal data from children under the age of 13 without parental or guardian consent.

If we become aware that personal data relating to a child under 13 has been collected without appropriate consent, we will take reasonable steps to delete or anonymize such data as soon as practicable.

Parents or guardians who believe that a child has provided personal data may contact us using the details provided below.

11. Third-Party Websites

Our website may contain links to third-party websites or services. These websites operate independently and have their own privacy policies.

Wellness First is not responsible for the privacy practices or content of third-party websites.

12. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in legal requirements, technology, or business practices.

Updated versions will be published on www.wellnessfirst.com, and significant changes may be communicated through email or website notifications.

13. Contact Us

If you have questions about this Privacy Policy, your personal data, or your rights under applicable data protection laws, please contact us:

Wellness First

Website: www.wellnessfirst.com

Privacy and data protection inquiries: privacy@wellnessfirst.com