Privacy Policy

Last updated: 20 October 2026

This policy explains which personal data we process when you visit everparent.ae, ask Teddy a question or order from us, why we do it, and what rights you have.

Controller

DANBIA LLC, Shams Business Center, Sharjah Media City (Shams) Free Zone, Al Messaned, Sharjah, United Arab Emirates, represented by its manager Bianca Nistor. Email: info@everparent.ae.

Legal basis

We process personal data in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and the other laws of the United Arab Emirates. We process data:

  • to conclude and perform the contract with you, or at your request before a contract, for example to show you the website, answer your questions and deliver your order;
  • to meet legal obligations, for example tax records and the protection of your data;
  • with your consent, where we ask for it. You can withdraw your consent at any time with effect for the future, for example by email.

We do not sell your data and do not create advertising profiles. We do not use advertising services. We only use Google Analytics if you agree in the cookie banner (see “Google Analytics”).

Hosting and server logs

Our shop runs on WordPress and WooCommerce on servers of our hosting provider Tasjeel in Dubai, United Arab Emirates. When you open a page, the server processes technically necessary data such as IP address, date and time, the page requested, browser and operating system (server log files). We need this to show you the website you request and to protect it and your data against faults and attacks. Server log files are deleted after 14 days at the latest, unless we need an entry to investigate an attack.

The plugin LiteSpeed Cache stores ready-made pages on our server so that they load faster. It does not create user profiles.

To protect the login against attacks, the plugin Loginizer stores the IP address and time of failed login attempts and blocks an address for a limited time after too many attempts. These entries are deleted automatically.

Contact by email or form

If you write to us by email or through the contact form, we process your name, email address and message to answer you. Messages from the contact form are stored in our shop’s database. We delete inquiries six months after they are closed, unless they belong to an order or we must keep them by law.

Emails from the shop, such as order confirmations, are sent from our own mailbox via the plugin GoSMTP.

AI assistant “Teddy”

On our website you can ask our AI assistant “Teddy” questions about products, delivery, payment and returns. If you give your order number and email address, Teddy tells you the status of your order. The answers are generated by AI and may contain mistakes. The information on the product page and in your order confirmation is binding. Using Teddy is voluntary; you can always write to us by email or through the contact form instead.

To answer, we send your messages, the conversation so far and information about the page you are viewing (for example which product you are looking at) to our AI provider Anthropic, PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA. Anthropic acts as our processor. If you ask about your order, Anthropic also receives the status, date and items of the order, but no address and no payment data. We do not pass on your IP address. According to Anthropic, inputs and outputs are deleted within 30 days (longer only in case of violations of its usage policies) and are not used to train AI models. Please do not enter sensitive data, such as health information, in the chat.

We store the conversation on our server only for the duration of the chat; it is deleted automatically no later than 30 minutes after the last message. To prevent misuse, we count requests per visitor. For this we do not store your IP address but a check value that changes daily, cannot be traced back and is deleted after 24 hours at the latest.

The chat sets no cookies. It uses your browser’s session storage (sessionStorage) for the visible conversation, a short-lived session token and a note that the hint “Any questions?” has already been shown. Everything is deleted when you close the tab.

If you would like to talk to a person, you can agree in the chat to forward your request, or use the form “Message to Bianca & Daniel”. We then send your request and email address to our mailbox in order to answer you. The chat history is included only if you check the box for it.

Orders

For your order we process your name, billing and delivery address, email address, phone number (for delivery), the products ordered, your personalization and the payment status. Without these details we cannot conclude or perform the contract. If you create a customer account, we store your details until you delete the account; you can ask us to delete it at any time.

Names, drawings and texts for your products

For the baby book you enter the name on the product page. It is printed on the cover and title page and stored as part of your order.

For the kids art book and the Little Gallery, after your order we send you a personal link by email. There you upload photos of your child’s drawings. You do not need a customer account. We process the photos and the details you add (for example title and date of a drawing, what your child said about it, a dedication, the headline of your poster, for the kids art book the first name of your child and, if you provide them, the month and year of birth so that we can add the age to the drawings). We use them to design your product, show you a preview, have it printed after your approval and handle the order. If drawings or your approval are still missing, we remind you by email.

We do not need photos of your child. Please make sure that no names or addresses can be read on the photos of the drawings. Enter the first name for the kids art book in the name field.

Your browser reduces the size of the photos before upload and removes additional data such as location and camera details. The files are stored on our shop’s server in Dubai in a protected folder that is not publicly accessible. Only you, through your personal link, and we have access. So that the link does not stay in your browser’s address bar, we store the access key on the first visit in a technically necessary cookie (“epkk_t”, valid for 30 days, only for these pages). The upload and approval pages run no analytics or marketing services. For the design we download the drawings and your details, but not your address, to our own computer and delete them there at the latest together with the files on the server.

When you upload, you confirm that you are entitled to use the drawings and that they do not infringe the rights of others. You allow us to process the drawings and texts for the preview, printing and delivery of your order. We use them for nothing else. We show your finished product in the shop or on our social media profiles only if you give your separate, express consent when uploading (see below).

Retention of drawings and print files

  • Uploaded photos, preview and print file: deleted 30 days after delivery, for a canceled order 30 days after the cancellation.
  • If an order is never shipped, for example because no drawings or no approval arrive: deleted no later than 12 months after payment.
  • Optional checkbox “Keep for 12 months for reorders”: we keep the files for 12 months after delivery instead, so that you can order another copy without uploading everything again.
  • Optional checkbox for showing your product: you allow us to show the finished product without names in our shop and on our profiles on Facebook and Instagram.
  • Print file of the baby book: deleted 30 days after delivery. The name remains part of your order data.

Neither checkbox is checked by default; both are voluntary and are not needed for your order. You can withdraw either consent at any time, for example by email to info@everparent.ae. If you withdraw the storage consent, we delete the files once the 30 days after delivery have passed, or immediately if they have already passed. If you withdraw the permission to show your product, we remove the posts from the shop and our profiles.

Printing and delivery by Gelato

Our print partner Gelato (Gelato AS, Dronning Eufemias gate 8, 0191 Oslo, Norway) has your product printed by a print partner in the United Arab Emirates and delivered by a delivery service there. For this, Gelato receives your name, delivery address, phone number (for delivery) and the finished print file with your personalization (for example the name on the book and, for kids art books and posters, the drawings as they are printed). Gelato downloads the print file via its own link, which expires after 14 days. Gelato does not receive your uploaded photos, your email address or your other details. Gelato processes this data on our behalf.

Payment via Stripe

Payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe receives the data needed for the payment, such as name, email address, billing address, amount and card details. This also applies to Apple Pay, Google Pay and Link, which run via Stripe. Stripe uses cookies at checkout to prevent fraud. We do not store card details in our shop. Stripe may also process data in the USA and other countries. More information is in Stripe’s privacy policy at stripe.com/privacy.

Invoices and records

We create tax invoices with the plugin Germanized in our shop. We keep order and invoice data for as long as UAE tax and commercial law requires, currently seven years after the end of the tax period, and then delete it.

Cookie consent

On your first visit, a banner asks whether we may set analytics cookies. The banner runs with the CookieAdmin plugin on our server. We store your choice in the cookie “cookieadmin_consent” (1 year) so that we do not ask again on every visit. As proof, we log your consent in our shop’s database with a random ID, your choice, the time, the country where available and a shortened IP address. We delete these entries after 12 months. You can change or withdraw your choice at any time with the cookie icon at the bottom of the page.

Google Analytics

If you agree, we use Google Analytics 4 by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, integrated via the Site Kit by Google plugin. Google Analytics shows us how our shop is used, for example which pages are viewed, how visitors find us and which devices they use. For this, Google sets cookies and processes a random ID, information about your device, browser and approximate location, and the pages you view and your actions in the shop. According to Google, Google Analytics 4 does not store IP addresses. Google may also process the data in the USA. We keep analytics data for 14 months, and Google Signals is turned off.

Without your consent, Google Analytics does not load. You can withdraw your consent at any time with the cookie icon. More in Google’s privacy policy at policies.google.com/privacy.

Cookies and local storage

We set technically necessary cookies without consent:

  • WooCommerce (for example “woocommerce_cart_hash”, “woocommerce_items_in_cart”, “wp_woocommerce_session_…”): cart, checkout and customer account; deleted at the end of the session or after 48 hours at the latest, login cookies at the latest after 14 days.
  • “eps_lang”: remembers the language you chose so that the start page opens in this language; 1 year. It contains only the language code.
  • “epkk_t”: access key for the upload and approval pages (see above); 30 days.
  • LiteSpeed Cache (“_lscache_vary”): ensures that you see the correct page version with a filled cart or when logged in; end of the session.
  • Stripe (for example “__stripe_mid”, “__stripe_sid”): fraud prevention at checkout; up to 1 year.
  • “cookieadmin_consent”: stores your choice in the cookie banner; 1 year.

Only with your consent in the cookie banner (analytics):

  • Google Analytics (“_ga”, “_ga_…”): distinguishes visits and sessions; up to 2 years.
  • WooCommerce order attribution (“sbjs_…”): remembers how you found us, for example via Google search, and saves this with an order; a few seconds up to 30 minutes.

You can delete cookies at any time in your browser. Without the necessary cookies, the cart and checkout will not work.

Transfers outside the United Arab Emirates

Our shop and its data are hosted in the United Arab Emirates. Some service providers are located abroad: Gelato in Norway, Stripe in Ireland (with processing also in the USA), Anthropic in the USA and, only with your consent, Google in the USA. We transfer only the data these providers need for their task, and only where the PDPL permits it: because the transfer is necessary to perform the contract with you or to provide the service you request, for example the chat with Teddy, because you have consented (Google Analytics), and on the basis of contracts with the providers that oblige them to protect your data.

Children

Our shop is aimed at adults. Only adults may place orders. We process data about children, such as a first name, a month of birth or drawings, only because you as a parent or guardian provide it for the product, and only for that order.

Security

We protect your data with technical and organizational measures, such as encrypted connections (HTTPS), restricted access and regular updates. If there is a data breach that puts your rights at risk, we inform you and the competent authority as required by law.

Your rights

Under the PDPL you have the right to:

  • receive information about the data we hold about you, and a copy of it;
  • have incorrect data corrected and incomplete data completed;
  • have your data deleted, unless we must keep it by law;
  • have the processing restricted;
  • object to processing and have it stopped where the law allows;
  • receive your data in a structured, machine-readable format and have it transferred;
  • withdraw your consent at any time with effect for the future.

To exercise your rights, write to info@everparent.ae. We may ask you to confirm your identity, for example from the email address used for the order. We answer within 30 days.

If you believe that we are not handling your data correctly, please contact us first. You also have the right to lodge a complaint with the UAE Data Office.

Changes to this policy

We update this policy when our shop or the law changes. The date at the top shows the current version.

Language versions

This privacy policy is available in Arabic, English, Russian and German. If the versions differ, the Arabic version prevails.