Privacy policy

Privacy Policy

STEPORA — UAE Last updated: April 2026

Who We Are

STEPORA is a UAE-based brand selling orthopedic insoles designed for people who spend long hours on their feet. We take your privacy seriously and we're committed to being transparent about how we handle your personal information.

If you have any questions about this policy, contact us directly:

Email: getstepora@gmail.com

What Information We Collect

Information you give us directly

When you place an order, we collect:

Full name
Delivery address (emirate, area, building, apartment)
Phone number
Email address
Payment information (processed securely — we never store card details)

When you contact us via WhatsApp or email, we collect:

Your name and contact details
The content of your message

When you subscribe to our email list, we collect:

Your email address

Information collected automatically

When you visit our website, we automatically collect:

Device type and browser
Pages visited and time spent
Referring website or ad that brought you to us
General location (country/emirate level — not your exact address)

This is collected through cookies and standard analytics tools including Shopify Analytics, Google Analytics, and Meta Pixel.

Why We Collect Your Information

We use your information only for the following purposes:

Purpose	Information Used
Processing and delivering your order	Name, address, phone number
Sending order confirmations and updates	Email, phone number
Processing refunds and handling returns	Name, order details, bank details if COD
Responding to your messages and support requests	Contact details, message content
Improving our website and understanding what works	Analytics data
Sending marketing emails (only if you opted in)	Email address
Running targeted ads on Meta and TikTok	Pixel data, general location

We do not sell your personal information to anyone. Ever.

Cookies

Our website uses cookies — small files stored on your device that help us understand how visitors use our site.

Types of cookies we use:

Essential cookies — required for the website to function. Cannot be disabled.

Analytics cookies — help us understand which pages perform well and how visitors navigate the site. We use Google Analytics for this.

Marketing cookies — used to show you relevant ads on platforms like Meta (Facebook/Instagram) and TikTok after you visit our site. These are placed by Meta Pixel and TikTok Pixel.

You can control cookies through your browser settings at any time. Disabling marketing cookies means you may see less relevant ads but it will not affect your ability to use our website or place an order.

Who We Share Your Information With

We share your information only with the services that help us run our business:

Shopify — our e-commerce platform that processes orders and stores customer data securely
Delivery partners — your name, address, and phone number are shared with our courier so they can deliver your order
Meta (Facebook/Instagram) — pixel data for advertising purposes
TikTok — pixel data for advertising purposes
Google — analytics data to understand website performance
Email marketing platform — if you subscribed to our emails

All third-party services we use are required to handle your data in accordance with applicable privacy laws.

We do not share your information with any other third parties without your explicit consent.

Cash on Delivery Orders

For COD orders, your delivery details are shared with our courier partner so they can complete delivery and collect payment. If you request a refund on a COD order, we will ask for your bank account details solely for the purpose of processing your refund. These details are not stored after the transfer is complete.

How Long We Keep Your Information

Information	How long we keep it
Order details	5 years (required for UAE tax and accounting purposes)
Customer account information	Until you request deletion
Marketing email list	Until you unsubscribe
Analytics data	26 months
Support messages	2 years

Your Rights

You have the right to:

Access your data — request a copy of the personal information we hold about you

Correct your data — ask us to update any information that is inaccurate

Delete your data — request that we delete your personal information, subject to any legal obligations we have to retain it

Unsubscribe — opt out of marketing emails at any time using the unsubscribe link in any email we send, or by messaging us directly

Object to marketing — ask us to stop using your data for marketing purposes at any time

To exercise any of these rights, contact us by email and we will respond within 5 business days.

Data Security

We take reasonable steps to protect your personal information from unauthorised access, loss, or misuse. Our website runs on Shopify which is certified PCI DSS compliant — meaning your payment information is handled to the highest security standards in the industry.

We never store your full card details on our servers.

Children's Privacy

Our products and website are not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it immediately.

Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.

If we make significant changes that affect how we use your personal information, we will notify you by email or by placing a notice on our website.

Contact Us

If you have any questions about this privacy policy or how we handle your personal information, please reach out directly — we're happy to explain anything in plain language.