CPAP Store Dubai – Privacy Policy 

Effective Date: 1 June 2023
Last Updated: 24 July 2025

CPAP Store Dubai is committed to protecting your privacy and personal information in accordance with the UAE Federal Decree Law No. 45 of 2021 (Personal Data Protection Law – PDPL), applicable consumer protection regulations, and the guidelines of the Ministry of Health and Prevention (MOHAP) for medical equipment handling.

This policy outlines how we collect, use, disclose, and safeguard your data when you shop with us in-store or online.

1. Who We Are

CPAP Store Dubai is a registered medical equipment provider based in the UAE, offering CPAP and BiPAP machines, oxygen concentrators, and accessories to consumers and clinics.

If you have any privacy-related concerns, you may contact us at:
Email: info@cpapstoredubai.com
Address: CPAP Store Dubai B2b Tower, 1806 Marasi Street, Business Bay, Dubai UAE 97700

2. What Information We Collect

We may collect and process the following data:

  • Full name, phone number, email address, billing/delivery address

  • Optional health-related data such as prescription details or respiratory product preferences

  • Order and payment history

  • Device/browser details and IP address (for website visits)

3. How We Use Your Information

Your personal data may be used to:

  • Process and deliver your orders

  • Validate prescriptions or warranty requests

  • Respond to your questions or support requests

  • Communicate order updates, delivery notifications, or restocking alerts

  • Send promotional messages (only with your express consent)

  • Comply with UAE healthcare or tax-related obligations

4. Legal Basis for Processing

We only collect and process your data when:

  • You give clear, informed consent (e.g., newsletter signup, WhatsApp alert opt-in)

  • The data is necessary to fulfill your purchase contract

  • We are required to comply with MOHAP or other UAE legal obligations

5. Prescription & Medical Information

While we are not a healthcare provider, we are licensed to supply medical equipment and may request supporting prescription documents.
In accordance with MOHAP medical device guidelines, any personal health-related data you submit is used only to validate and fulfill your equipment request.

We do not store diagnostic reports, medical histories, or treatment plans.

6. Sharing & Disclosure

We may share your data only when necessary:

  • With licensed courier services to deliver your order

  • With payment providers (e.g., Stripe, PayTabs) to process transactions

  • With the UAE Ministry of Health if required by law (e.g., device tracking or recall)

We do not sell, rent, or disclose your data to any unauthorized third party.

7. Marketing Communications

You will only receive promotional emails, SMS, or WhatsApp messages if you have explicitly opted in. You can withdraw your consent at any time by:

  • Clicking “Unsubscribe” in the email

  • Replying “STOP” to any SMS or WhatsApp

  • Emailing us at info@cpapstoredubai.com

8. Your Rights Under UAE PDPL

Under UAE Federal Law No. 45/2021, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Withdraw consent for processing

  • Request deletion of your data (where not restricted by other obligations)

To make a request, please email info@cpapstoredubai.com with the subject “Privacy Request.”

9. Cookies & Website Analytics

Our website uses basic cookies to track visitor activity and enhance your browsing experience.
By using our website, you agree to the use of cookies in accordance with UAE digital marketing guidelines. You may clear or block cookies in your browser settings.

10. Data Retention

We retain your data only for as long as necessary:

  • Order and payment history: 7 years (for accounting and VAT purposes)

  • Prescription-related documents: 12 months (unless required for warranty validation)

  • Newsletter subscribers: until you unsubscribe or withdraw consent

11. Data Security

We implement administrative, technical, and physical safeguards to protect your personal information from unauthorized access, alteration, or loss.
Online payments are handled via PCI-DSS-compliant gateways.

12. Data Transfers Outside the UAE

In limited cases, data may be stored or processed by service providers outside the UAE.
Where applicable, we ensure secure transfer mechanisms are in place and compliant with UAE Central Bank and PDPL requirements.

13. Updates to This Policy

We may revise this privacy policy to reflect legal changes or business updates.
The most current version will always be available at www.cpapstoredubai.com. Material updates will be announced via email or on our site.

14. Contact Us

If you have questions or wish to exercise your data rights, please contact:

CPAP Store Dubai
Email: info@cpapstoredubai.com