Last updated: 28 September 2026
DealInBox ("we", "us", "our") is an online retail store operated by DEAL IN BOX GENERAL TRADING - L.L.C, a company registered in the United Arab Emirates under licence number CN-5489319, with its registered address at Abu Dhabi, United Arab Emirates.
This policy explains what personal data we collect when you use https://dealinbox.com, why we collect it, who we share it with, and what rights you have over it.
We are the data controller for the personal data described here. For any question about this policy, or to exercise any right in section 9, contact us at info@dealinbox.com.
Information you give us directly
Payment information. Card details are entered on a secure payment form hosted by our payment provider and are sent directly to them. We never receive or store your full card number. We receive only a payment confirmation, the last four digits and the card type, so we can identify the transaction and handle refunds.
Signing in with Google, Facebook or Microsoft. If you choose to sign in with one of these accounts, we receive your name and email address from that provider. For Google and Facebook sign-in we also receive your profile picture. We use this information only to create your DealInBox account and sign you in. We never receive your password, and we do not access any other information in your account.
Information collected automatically
Push notification subscriptions. If you allow browser notifications, we store the subscription endpoint your browser generates. It is tied to your browser, not to you personally, and you can revoke it in your browser settings.
| Purpose | What it covers | Basis |
|---|---|---|
| Fulfilling your order | Taking payment, arranging shipping, sending order updates | Performance of our contract with you |
| Customer service | Answering queries, handling returns and refunds | Performance of our contract with you |
| Fraud prevention and security | Detecting fraudulent orders and protecting the site | Our legitimate interests |
| Understanding how the site is used | Improving the product range and the site itself | Consent, through cookies |
| Marketing | Email about offers, and advertising shown to you elsewhere | Consent, withdrawable at any time |
| Legal and tax obligations | Keeping records we are required to keep | Legal obligation |
We do not sell your personal data.
We share personal data only with service providers that help us run the store, and only to the extent each one needs.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We may also disclose personal data where we are required to by law, by a competent authority, or to establish or defend a legal claim.
We use cookies and similar technologies for three purposes.
Strictly necessary. Keeping you signed in, remembering your cart and securing checkout. The site does not work without these.
Analytics. We use Google Analytics 4 to understand which pages and products people visit. Google may process this data outside the UAE. Google's own practices are described at https://policies.google.com/privacy.
Advertising. We use the Meta pixel and the TikTok pixel to measure how well our advertising works and to show relevant ads on those platforms. When you place an order, our server also sends details of the purchase directly to Meta, together with your email address and phone number in hashed form (converted into a code that cannot be read), and technical details such as your IP address, browser type and advertising cookie identifiers. This lets Meta match the purchase to an ad without us sharing your contact details in readable form. If you are signed in, the Meta pixel may also receive your email address in hashed form for the same purpose. Meta's practices are described at https://www.facebook.com/privacy/policy and TikTok's at https://www.tiktok.com/legal/page/row/privacy-policy/en.
You can refuse or delete cookies in your browser settings. Refusing analytics and advertising cookies does not affect your ability to shop.
DealInBox is operated from the UAE and the site is hosted in the UAE. However, some of the service providers described in section 4 are located outside the UAE, including in China, the United States and the European Union.
Where we transfer personal data outside the UAE, we do so because it is necessary to perform our contract with you — principally, to get your order delivered — or on the basis of the contractual protections our providers offer.
Payments are handled by our payment provider and are encrypted in transit. The site is served over HTTPS. Access to the order database is restricted to those who need it.
No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. If a breach affects your personal data and poses a risk to you, we will notify you and the relevant authority as required by law.
Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, you have the right to:
To exercise any of these, email info@dealinbox.com. We will respond within 30 days. We may ask you to confirm your identity before we act, to make sure we are not disclosing your data to someone else.
The site is not directed at children under 18 and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
We may update this policy. The date at the top always reflects the current version. Where a change materially affects your rights, we will tell you before it takes effect.
DEAL IN BOX GENERAL TRADING - L.L.C
Abu Dhabi, United Arab Emirates
Email: info@dealinbox.com