Last Updated: September 19, 2026

Baanpaa LLC-FZ (“Baan Paa”, “we”, “us”, or “our”), registered in the Meydan Free Zone, Dubai, United Arab Emirates, is committed to safeguarding the privacy and security of your personal data. This Privacy Policy governs your use of baanpaa.com (the “Site”) and our related products, landscaping services, and retail operations (collectively, the “Services”).

This policy is structured in compliance with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (“UAE PDPL”) and international data protection standards where applicable.

1. Information We Collect

We collect only the personal information strictly necessary to fulfill your orders, provide quotes, communicate project updates, and improve your user experience:

• Identity and Contact Data: Full name, billing address, residential delivery address (including villa/apartment and community details in the UAE), contact telephone number, and email address.
• Transaction and Order Data: Records of products purchased (e.g., books, toys, merchandise), garden design/landscaping service consultations, bespoke quotes, and customer service requests.
• Payment Details: All digital payments are processed through secure, accredited third-party payment gateways (e.g., Stripe, Telr, or equivalent PCI-DSS compliant providers). Baan Paa does not store, log, or have access to your full credit/debit card numbers on its servers.
• Technical and Browsing Data: IP addresses, browser types and versions, device identifiers, general geographic location, and clickstream behavior gathered automatically when browsing our Site via standard server logs and analytical cookies.

2. Lawful Grounds and Purposes of Processing

In accordance with the UAE PDPL, we process your personal information under the following legal bases:

• Performance of a Contract: Fulfilling e-commerce purchases, arranging parcel delivery, conducting site visits for balcony or garden design installations, and processing billing.
• Consent: Delivering electronic marketing communications, newsletters, or promotional updates. You may revoke consent at any time via the unsubscribe link in any email.
• Legitimate Business Interests: Monitoring website performance, fraud prevention, inventory demand forecasting, and improving our brand offerings.
• Legal and Regulatory Compliance: Satisfying local accounting, tax, commercial licensing, and record-keeping mandates in the United Arab Emirates.

3. Data Sharing and Third-Party Disclosures

We do not sell, rent, or trade your personal data. We disclose information only to selected third-party service providers bound by strict confidentiality and data protection obligations:

• Logistics and Delivery Couriers: Local UAE courier networks and fulfillment agents responsible for delivering physical merchandise and plants to your designated address.
• International Production and Distribution Partners: Where an order involves dropship fulfillment or cross-border delivery from overseas partners (such as specialty outdoor art or custom fabrications from the United Kingdom), customer delivery details are securely shared solely to execute shipment and customs clearance.
• Payment Gateways & Technology Providers: Cloud hosting services, website infrastructure maintenance, and PCI-compliant financial processors.
• Legal and Regulatory Authorities: Government bodies, law enforcement, or regulatory agencies only when legally mandated by UAE federal or local decree.

4. International Data Transfers

When transferring data across international borders (e.g., cloud storage infrastructure or international fulfillment partners in the UK/EU), Baan Paa ensures that the recipient country provides an adequate level of personal data protection recognized under the UAE PDPL, or that standard contractual clauses and rigorous technical encryption safeguard the transmission.

5. Children’s Privacy and Commercial Purchases

• Purchaser Age Restriction: Baan Paa’s commercial checkout and contract services are available exclusively to individuals aged 18 years and older who can form legally binding agreements.
• Children's Content: While our literary and toy merchandise (such as Chang Chokdee books, plushes, and games) is created for children and families, we do not knowingly solicit, collect, or store personal information directly from children under the age of 18 online.
• Parental Inquiries: All child-focused merchandise must be purchased by a parent or legal guardian. If you suspect that a minor has submitted personal contact information through our web forms without parental consent, please notify us immediately for prompt deletion.

6. Data Security and Storage

We apply technical, physical, and administrative defenses—including SSL/TLS website encryption, restricted administrative access protocols, and firewall-protected databases—to prevent unauthorized access, loss, or misuse of your records. While no internet-connected system offers absolute invulnerability, we continually review and harden our digital security standards.

7. Data Retention

Your personal information is stored only for as long as needed to satisfy the primary commercial purpose for which it was gathered:

• Order and Invoicing Data: Retained for a minimum statutory period (typically 5 years) to satisfy UAE commercial accounting, corporate tax, and auditing regulations.
• Marketing Contact Lists: Retained until you actively opt out or unsubscribe.
• General Inquiries: Retained for up to 12 months before systematic deletion or anonymization.

8. Your Statutory Rights (UAE PDPL)

Under the UAE Data Protection Law, you hold specific rights regarding your personal records:

• Right to Access: Request a copy of the personal information we maintain concerning you.
• Right to Correction/Rectification: Request immediate correction of outdated, incomplete, or inaccurate records.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal records where continued storage is no longer legally necessary or justified.
• Right to Restriction and Objection: Restrict processing in cases of disputed accuracy or object to direct marketing activities.
• Right to Withdraw Consent: Revoke any previously granted processing permissions at any time without retroactive impact.

To exercise these rights, submit a written request to info@baanpaa.com. We will review and fulfill verified statutory requests within 30 calendar days.

9. Cookies and Analytical Trackers

Our Site uses session and persistent cookies:

• Essential Cookies: Mandatory for site navigation, basket management, and secure checkout sessions.
• Analytical/Performance Cookies: Anonymous metrics (e.g., aggregate visitor counts, page dwell times) via services such as Google Analytics to optimize page load speeds and site design.

You can modify cookie preferences or disable tracking cookies through your individual browser settings; however, disabling functional cookies may impair interactive store features.

10. Modifications to this Policy

We reserve the right to revise this Privacy Policy to reflect operational shifts, new product releases, or legislative updates in the UAE. Revisions become effective immediately upon posting to the Site with an updated revision date.

11. Contact and Data Controller Details

Legal Entity: Baanpaa LLC-FZ
Registration: Meydan Free Zone, Dubai, United Arab Emirates
Website: https://baanpaa.com
Privacy Inquiries & Data Rights Requests: info@baanpaa.com
General Customer Support: info@baanpaa.com