Privacy Policy

1. Controller and Contact

The data controller is easyDrink Middle East Trading L.L.C. (trading as "WELLQ®"), Block J P176 Commercial, Phase 2 Block A, Unit 6, Dubai Industrial City, 31436 Dubai, UAE. For data protection enquiries please write to contact@wellq.ae or call +971 58 294 1236.

2. Scope

This Privacy Policy applies to all personal data collected through the website wellq.ae, our product configurator, contact and booking forms, email correspondence, and any other communication channel operated by WELLQ®.

3. Data We Collect

We collect personal data that you provide directly: full name, email address, telephone number (optional), postal or installation address, product preferences selected in the configurator, free-text messages, and booking details. We also collect technical data automatically: IP address (anonymised after 30 days), browser type and version, device type, pages visited, referring URL, and timestamps. When you use our forms, a security token from Cloudflare Turnstile is processed to distinguish genuine visitors from automated bots; no personal data is stored by this process.

4. Purpose and Legal Basis

We process your data for the following purposes: to respond to enquiries and prepare quotes (contract performance / legitimate interest); to schedule and carry out installations and laboratory water tests (contract performance); to send order confirmations and service updates (contract performance); to improve our website, detect fraud, and ensure security (legitimate interest); to comply with UAE tax and commercial law (legal obligation); and to send marketing communications only where you have given explicit consent. Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, for visitors from the European Economic Area, the EU General Data Protection Regulation (GDPR), we process data only where we have a valid legal basis.

5. Cookies and Analytics

We use Google Tag Manager to manage tags. Google Analytics 4 collects anonymised usage statistics; IP anonymisation is enabled by default. A Meta Pixel may be loaded for advertising measurement. Both tools are loaded only after the page renders and set cookies classified as analytics or marketing. You can disable all non-essential cookies by adjusting your browser settings or by using the cookie preferences available on our site. Cloudflare Turnstile does not set tracking cookies.

6. Data Sharing

We share personal data only with: our accredited laboratory partner for scheduling and reporting independent water quality tests; our email service provider (Resend) to deliver transactional messages; our hosting provider (Vercel Inc., USA) which processes request data under Standard Contractual Clauses; and Cloudflare Inc. (USA) for DNS, security, and bot protection under Standard Contractual Clauses. We do not sell, rent, or trade your personal data.

7. International Transfers

Some service providers operate outside the UAE. Transfers to the USA are safeguarded by EU Standard Contractual Clauses and supplementary technical measures (encryption in transit and at rest). For UAE data subjects, transfers comply with the requirements of UAE Federal Decree-Law No. 45 of 2021.

8. Data Retention

We retain enquiry and quote data for 24 months after last contact unless a contract is formed, in which case we retain records for seven years as required by UAE Commercial Transactions Law. Analytics data is retained in anonymised form for 14 months.

9. Your Rights

Depending on your jurisdiction you may have the right to: access the personal data we hold about you; rectify inaccurate data; request erasure of your data; restrict or object to processing; receive your data in a portable format; and withdraw consent at any time without affecting the lawfulness of processing before withdrawal. To exercise any right, contact contact@wellq.ae. We will respond within 30 days.

10. Security

We protect personal data with HTTPS encryption, server-side input validation, Cloudflare Turnstile bot protection, rate limiting on form submissions, and disposable-email blocking. Access to personal data is restricted to authorised personnel.

11. Children

Our services are not directed at individuals under 18. We do not knowingly collect data from minors.

12. Changes

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted on the website.