Waxy Taxy trades under Dubai trade licence 1647092 (waxytaxy Sports Wear Trading), issued by the Department of Economy and Tourism. The online store is not open yet: no products are for sale and no payments are being accepted through this website.
Who we are
Waxy Taxy ("we", "us") operates waxytaxy.com from Dubai, United Arab Emirates. We are the data controller for the personal data described in this policy.
We trade under the registered name waxytaxy Sports Wear Trading, Dubai trade licence number 1647092, issued by the Department of Economy and Tourism, Dubai. You can verify the licence at invest.dubai.ae.
We operate as a home-based licensed trader, so we do not publish a public street address. For anything relating to your personal data, contact privacy@waxytaxy.com.
The law we work to
We handle personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the PDPL) and its Executive Regulations, supervised by the UAE Data Office.
If you contact us from the EU or UK, we also apply GDPR-equivalent handling to your data. We do not treat a border as a reason to give you weaker protection.
What we collect, and why
| Data | Why we have it | Legal basis |
|---|---|---|
| Email address (mailing list) | To email you about new releases and early access. | Your consent, given by ticking the box on the form. |
| Product interest (clothing / snow / service / everything) | So what we send you is relevant instead of generic. | Your consent. |
| Name, email, mobile number (wax booking) | To confirm your slot, quote a price and arrange collection or drop-off. | Steps taken at your request before entering a contract. |
| Area in Dubai and booking notes | So collection actually reaches you and we service the right equipment. | Steps taken at your request. |
| Consent timestamp | To prove when and how you gave consent, as the PDPL requires. | Our legal obligation. |
| Short-lived security data (see below) | To stop bots and abuse of our forms. | Our legitimate interest in keeping the site working. |
What we deliberately do not collect
- No advertising or tracking cookies. No Meta Pixel, no TikTok Pixel, no Google Analytics.
- No cross-site tracking, no data brokers, no audience lists sold or shared for advertising.
- No payment card data. We do not take payments on this site at all, so there is nothing to store.
- No date of birth, no ID documents, no location tracking.
Security data
To stop automated abuse, our form endpoints derive a temporary, one-way hashed bucket from the connecting IP address. The raw IP is not written to a database and is not retained. The hashed bucket exists in server memory only and expires within one minute.
Our hosting provider keeps standard server request logs, which include IP addresses, for a short period as part of running the infrastructure. We do not use those logs for marketing or profiling.
Who we share it with
We use a small number of processors. We do not sell your personal data, and we do not share it for anyone else's marketing.
| Processor | Purpose | Where data is processed |
|---|---|---|
| Vercel Inc. | Website hosting and delivery. | Global edge network, including servers outside the UAE. |
| HubSpot, Inc. | Customer relationship management — storing your contact record and booking. | United States / European Union. |
| Careem and Uber | Courier collection and return of your equipment. Each booking passes only the collection or return address and a mobile number for that job — never your full record. | United Arab Emirates. Uber is a US company and may process some data outside the UAE. |
International transfers
Some of our processors handle data outside the UAE. Where that happens, we rely on contractual safeguards with those processors, including their standard data processing agreements, and we limit transfers to what the service actually requires.
If you would prefer your data not to leave the UAE, tell us before you submit a form and we will take your booking by phone or WhatsApp instead.
How long we keep it
| Record | Retention | Then what |
|---|---|---|
| Mailing list email | Until you unsubscribe, or 24 months after the last time you opened or clicked one of our emails — whichever comes first. | Permanently deleted from the CRM. |
| Booking enquiry that did not become a job | 12 months. | Permanently deleted. |
| Completed service job record | 5 years from the date of service, to meet UAE commercial record-keeping expectations and to handle any warranty or dispute. | Permanently deleted. |
| Consent records | 3 years after consent is withdrawn or expires. | Permanently deleted. |
| Server and security logs | Per our hosting provider's standard retention, currently measured in days, not months. | Automatically expires. |
Your rights
Under the PDPL you can ask us to do any of the following. Email privacy@waxytaxy.com and we will respond within 30 days. There is no charge.
- Access — get a copy of the personal data we hold about you.
- Correct — fix anything that is wrong or out of date.
- Delete — have your data erased, unless we are legally required to keep it.
- Restrict — tell us to stop processing while a dispute is resolved.
- Portability — receive your data in a structured, machine-readable format.
- Object — object to processing based on our legitimate interests.
- Withdraw consent — at any time, without giving a reason. Every marketing email carries a one-click unsubscribe link.
- Complain — raise a complaint with the UAE Data Office if you are not satisfied with how we handled your request.
Children and young people
Snow sport and streetwear both attract a young audience, and we take that seriously.
This website is not directed at children under 13, and we do not knowingly collect their personal data. If you are under 18, please ask a parent or guardian to submit any booking on your behalf — the booking form says so explicitly.
If you are a parent or guardian and believe we hold data about your child, email privacy@waxytaxy.com and we will delete it without asking you to justify the request.
Changes to this policy
When we start trading, this policy will change materially — payments, shipping and order data will enter the picture. We will update the date at the top and, if you are on the launch list, tell you by email before the change takes effect.
Contact
Privacy questions and rights requests: privacy@waxytaxy.com
Everything else: hello@waxytaxy.com