Privacy policy
CPAP MEDICAL EQUIPMENT TRADING CO. LLC
Trading as CPAP Medical Trading
www.cpapmedtrade.com | Business Bay, Dubai, UAE
Effective Date: 1 June 2025 | Version 2.0 | Last Reviewed: June 2025
CPAP Medical Equipment Trading Co. LLC (trading as CPAP Medical Trading, hereinafter “the Company,” “we,” “us,” or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you interact with our website at www.cpapmedtrade.com, purchase products or services from us, or communicate with us through any channel.
This Policy is issued in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and its implementing regulations. It also reflects internationally recognised best practices in data privacy, including principles consistent with the General Data Protection Regulation (GDPR).
By using our Website or purchasing from us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of our Website and services.
1. INFORMATION WE COLLECT
We collect personal data only to the extent necessary to provide our products and services. The categories of personal information we may collect include:
1.1 Information You Provide Directly:
• Full name and title
• Email address and telephone number (including WhatsApp)
• Delivery address and billing address
• Payment information (processed securely via third-party payment gateways; we do not store card details on our servers)
• Prescription or therapy-related information where voluntarily provided (e.g., CPAP pressure settings prescribed by your physician)
• Communications you send us via email, contact forms, live chat, or support tickets
• Feedback, reviews, or survey responses
1.2 Information Collected Automatically:
• IP address and device identifiers
• Browser type, operating system, and language preferences
• Pages visited, time spent on pages, links clicked, and referring URLs
• Shopping cart activity and purchase history
• Cookie data and similar tracking technologies (see Section 5)
1.3 Information from Third Parties:
• Data from payment processors confirming transaction status
• Analytics data from providers such as Google Analytics
• Information from advertising platforms where you have interacted with our advertisements
2. LEGAL BASIS FOR PROCESSING
Under applicable UAE data protection law, we process your personal data on one or more of the following lawful bases:
2.1 Contractual Necessity – Processing is necessary to fulfil your order, arrange delivery, process payment, and provide after-sales support.
2.2 Legitimate Interests – We process certain data for our legitimate business interests, including improving our Website, preventing fraud, and communicating relevant product updates, provided such interests are not overridden by your rights.
2.3 Consent – Where we rely on your consent (e.g., for marketing emails or non-essential cookies), you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.
2.4 Legal Obligation – We may process or retain data where required by UAE law, including tax, accounting, or regulatory obligations.
3. HOW WE USE YOUR INFORMATION
We use the personal data we collect for the following purposes:
3.1 Order Processing – To receive, confirm, process, and fulfil your orders and arrange delivery of Equipment to your nominated address.
3.2 Customer Support – To respond to your enquiries, troubleshoot issues, process warranty and returns requests, and provide after-sales assistance.
3.3 Account Management – To create and maintain your customer account on our Website, where applicable.
3.4 Marketing Communications – To send you promotional emails, product updates, offers, or newsletters where you have provided consent or where permitted under applicable law. You may opt out at any time (see Section 8).
3.5 Website Improvement – To analyse how visitors use our Website, identify technical issues, and improve functionality, design, and user experience.
3.6 Fraud Prevention & Security – To detect, investigate, and prevent fraudulent transactions, unauthorised access, and other illegal activity.
3.7 Legal Compliance – To comply with applicable UAE laws and regulations, respond to lawful requests from competent authorities, and enforce our Terms and Conditions.
3.8 Reviews & Feedback – To invite you to leave a product review or complete a customer satisfaction survey. Participation is always voluntary.
4. DATA RETENTION
4.1 We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable UAE law. Typically, transaction and order records are retained for a minimum of five (5) years in compliance with UAE commercial and tax regulations.
4.2 Where you have provided consent for marketing communications, we will retain your contact details until you withdraw consent or unsubscribe.
4.3 Upon expiry of the relevant retention period, your personal data will be securely deleted or anonymised in accordance with our internal data retention procedures.
5. COOKIES & TRACKING TECHNOLOGIES
5.1 Our Website uses cookies and similar technologies (including web beacons and pixel tags) to enhance your browsing experience, remember your preferences, and collect analytics data.
5.2 The types of cookies we use include:
• Essential Cookies – Required for the Website to function correctly, including shopping cart functionality and secure login sessions.
• Analytical / Performance Cookies – Used to collect anonymised data about how visitors interact with our Website (e.g., Google Analytics). This helps us improve our content and performance.
• Functional Cookies – Used to remember your preferences such as language, currency, and region settings.
• Marketing / Targeting Cookies – Used to deliver relevant advertisements based on your browsing behaviour, including via Google Ads and social media platforms.
5.3 You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Website, including the ability to complete purchases.
5.4 We honour Do Not Track (DNT) signals transmitted by your browser. When DNT is enabled, we will not plant non-essential tracking cookies during your session.
6. THIRD-PARTY DISCLOSURE & DATA SHARING
6.1 We do not sell, trade, or rent your personal information to any third party.
6.2 We may share your personal data with trusted third-party service providers who assist us in operating our Website, processing orders, and delivering services. These parties are contractually obligated to keep your data confidential and to use it only for the specific purpose for which it was shared. Such third parties may include:
• Payment gateway providers (for secure transaction processing)
• Delivery and courier partners (for order fulfilment)
• IT service providers and hosting partners (for Website operations and data storage)
• Email and marketing communication platforms
• Analytics providers (e.g., Google Analytics)
6.3 We may disclose your personal data to regulatory or governmental authorities where required to do so by applicable UAE law, court order, or lawful request from a competent authority.
6.4 In the event of a business merger, acquisition, or sale of assets, your personal data may be transferred to the relevant successor entity, subject to equivalent data protection obligations.
6.5 Aggregated, anonymised data that cannot be used to identify you may be used for marketing, research, or reporting purposes.
7. DATA SECURITY
7.1 We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
• SSL (Secure Socket Layer) encryption for all data transmitted via our Website
• Secure, access-controlled hosting environments
• Payment processing through PCI-DSS compliant third-party gateways; card details are never stored on our servers
• Regular security assessments and staff awareness procedures
7.2 While we take reasonable precautions to safeguard your data, no method of transmission over the internet or method of electronic storage is entirely secure. We cannot guarantee absolute security and encourage you to take your own precautions, such as using strong passwords and keeping your account credentials confidential.
7.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant UAE supervisory authority in accordance with the timelines and requirements prescribed under the PDPL and applicable regulations.
8. YOUR RIGHTS
Subject to applicable UAE law, you have the following rights with respect to your personal data held by us:
8.1 Right of Access – You have the right to request a copy of the personal data we hold about you.
8.2 Right to Rectification – You have the right to request correction of any inaccurate or incomplete personal data.
8.3 Right to Erasure – You have the right to request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to any legal retention obligations.
8.4 Right to Restriction – You have the right to request that we restrict the processing of your personal data in certain circumstances.
8.5 Right to Object – You have the right to object to the processing of your personal data for direct marketing purposes at any time.
8.6 Right to Withdraw Consent – Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of the above rights, please contact us using the details in Section 12. We will respond to all legitimate requests within a reasonable timeframe and in any event within thirty (30) days, unless an extension is required, in which case we will notify you.
9. MARKETING COMMUNICATIONS & OPT-OUT
9.1 Where you have provided consent or have an existing customer relationship with us, we may send you email communications about our products, promotions, new arrivals, or service updates.
9.2 You may opt out of receiving marketing emails at any time by:
• Clicking the “Unsubscribe” link included in the footer of any marketing email; or
• Contacting us directly at info@cpapmedtrade.com with your request to be removed from our mailing list.
9.3 Please allow up to ten (10) business days for your opt-out request to be processed. Note that even after opting out of marketing communications, you may still receive transactional emails relating to your orders or account (e.g., order confirmations, delivery notifications).
10. GOOGLE SERVICES & THIRD-PARTY ADVERTISING
10.1 We use Google Analytics to analyse Website traffic and user behaviour in an anonymised form. Google Analytics uses cookies to collect data such as pages visited, session duration, and device type. This data is aggregated and does not identify you personally. For more information, visit: https://policies.google.com/privacy
10.2 We may use Google Ads and similar advertising platforms to display targeted advertisements to users who have previously visited our Website (remarketing). These platforms use cookies to serve ads based on prior browsing activity.
10.3 You can manage your Google advertising preferences or opt out of personalised ads by visiting: https://adssettings.google.com
10.4 We do not have access to or control over the cookies or tracking technologies used by third-party advertisers. We recommend reviewing the privacy policies of any third-party platforms you interact with.
11. CHILDREN’S PRIVACY
11.1 Our Website and services are not directed at individuals under the age of eighteen (18). We do not knowingly collect personal data from minors. If you believe we have inadvertently collected information from a person under 18, please contact us immediately and we will take prompt steps to delete such data.
12. CHANGES TO THIS PRIVACY POLICY
12.1 We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal obligations, or regulatory requirements. The revised Policy will be published on the Website with an updated effective date.
12.2 We encourage you to review this Policy periodically. Your continued use of the Website following the posting of any changes constitutes your acceptance of the updated Policy.
13. CONTACT US & DATA ENQUIRIES
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please do not hesitate to contact us through any of the following channels:
CPAP Medical Equipment Trading Co. LLC
Trading as CPAP Medical Trading
Showroom Address: Tamani Arts Bldg 1739, Business Bay, Dubai, United Arab Emirates
Phone / WhatsApp: +971 565935931
Email: info@cpapmedtrade.com
Website: www.cpapmedtrade.com
Contact Form: www.cpapmedtrade.com/pages/contact
Business Hours: Monday – Friday: 9:00 AM – 5:00 PM Saturday 11:00 AM - 3:00 PM
For formal data subject requests or legal notices relating to this Privacy Policy, all correspondence must be submitted in writing and addressed to the Company’s registered business address, clearly marked “DATA PRIVACY REQUEST – FOR THE ATTENTION OF MANAGEMENT.”
© 2025 CPAP Medical Equipment Trading Co. LLC. All rights reserved.
This Privacy Policy is subject to periodic review. Please refer to the Website for the most current version.