Privacy Policy

We collect the following categories of personal data:

Order & Account Data

When you place an order or create an account, we collect your name, email address, delivery address, phone number, and order history. This data is required to fulfil your order and manage your account.

Usage & Analytics Data

We use third-party analytics tools (including but not limited to Google Analytics and Meta Pixel) to understand how visitors interact with our website. This may include your IP address, browser type, pages visited, time on site, and referring URLs. This data is used in aggregated, anonymised form for market analysis and to improve our marketing campaigns.

Communications Data

If you contact us via email or any support channel, we retain those communications to resolve your query and improve our service.

Cookie Data

We use cookies to maintain your session, remember cart contents, and enable analytics tracking. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

• To process and fulfil your orders
• To communicate order status, shipping updates, and account activity
• To send marketing communications (only with your consent)
• To analyse purchase behaviour and improve our product range
• To run targeted marketing campaigns on platforms such as Meta and Google
• To comply with our legal obligations under UAE law

We do not sell your personal data to third parties.

We take the security of your data seriously. Personal data stored in our database is protected through a combination of encryption and hashing. Access to our systems is restricted to authorised personnel only. While no system is completely immune to breach, we maintain industry-standard protections and will notify affected users promptly in the event of any security incident.

We use the following third-party services that may process your data under their own privacy policies:

• Stripe — payment processing. No card data passes through our servers.
• Google Analytics — website usage analytics.
• Meta (Facebook/Instagram) — marketing analytics and ad targeting.
• WooCommerce / WordPress — e-commerce and content management platform.
• Shipping carriers — your delivery address is shared with our courier partner to fulfil your order.

We recommend reviewing the privacy policies of these providers independently.

We retain your order and account data for a minimum of five years to comply with UAE commercial recordkeeping requirements. Analytics data is retained according to the policies of each analytics provider. You may request deletion of your personal data at any time, subject to our legal obligations.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Opt out of marketing communications at any time via the unsubscribe link in any email
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at support@pumpkinduke.com. We will respond within 14 business days.

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. Continued use of our website after changes constitutes acceptance of the revised policy.