Privacy Policy

1. Overview of data protection

This policy provides an overview of what happens to personal data when you visit this website or contact No Boring Shops. Personal data is information that can identify you directly or indirectly.

We receive information that you provide, for example through the Preview form or by email. Technical information may also be processed automatically when you access the website, including browser, operating-system, IP-address, referrer and access-time information required to deliver and secure the site.

We use data to provide the website, respond to requests, perform or prepare contracts, improve service quality and—where you have consented—understand website use or measure marketing activity.

2. Controller

The controller responsible for processing personal data on this website is:

NO BORING SHOPS L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.

Email: hello@noboringshops.com. No data protection officer has been appointed.

3. Legal bases and storage duration

Where you consent to processing, the legal basis is Art. 6(1)(a) GDPR and, where applicable, Art. 9(2)(a) GDPR. Processing required to perform a contract or take pre-contractual steps is based on Art. 6(1)(b) GDPR. Processing required by law is based on Art. 6(1)(c) GDPR. Processing necessary for legitimate interests, including secure and dependable website operation and effective handling of inquiries, is based on Art. 6(1)(f) GDPR unless your interests override those interests.

Personal data is retained until the purpose for processing no longer applies. Data will be deleted when you make a justified request or withdraw consent, unless legal retention requirements or another lawful basis require continued storage.

4. Hosting and server logs

The hosting provider may process server log information required to deliver and secure this website. This can include browser type and version, operating system, referrer URL, hostname, request time and IP address.

Server-log processing is based on our legitimate interest in technically reliable, secure and optimised website delivery under Art. 6(1)(f) GDPR. Where required, we enter into an appropriate data-processing agreement with the hosting provider.

5. Contact and Preview requests

When you submit a Preview request, contact us by email or telephone, or otherwise send an inquiry, we process the information you provide to respond, clarify follow-up questions and take requested pre-contractual steps.

Processing is based on Art. 6(1)(b) GDPR where the inquiry relates to a contract or pre-contractual measures. Otherwise it is based on our legitimate interest in effective inquiry handling under Art. 6(1)(f) GDPR or on consent under Art. 6(1)(a) GDPR where requested.

Inquiry data is retained until you request deletion, withdraw consent or the purpose no longer applies, subject to mandatory statutory retention periods.

6. Cookies and consent storage

This website uses essential browser storage to remember your privacy choice and provide requested functions. The preference is saved under marketready-cookie-consent in local storage and in the first-party mr_cookie_consent cookie for up to 180 days. These items do not create an advertising profile.

Optional analytics or marketing technologies must remain disabled until you choose “Accept all.” Where such technology is enabled, processing is based on your consent under Art. 6(1)(a) GDPR and the applicable rules governing access to information on your device. Consent can be withdrawn at any time with effect for the future.

7. Analytics and marketing services

No analytics or advertising provider is hard-coded into the current static MarketReady website. If services such as Google Analytics, Google Ads or LinkedIn Insight are added, they may be activated only after the relevant consent and this policy must be updated with the provider, purpose, data, retention and international-transfer information.

Where third-country transfers occur, we use an appropriate transfer mechanism where required, such as an adequacy decision or Standard Contractual Clauses. Some countries may not provide a level of protection equivalent to the European Union.

8. Recipients and processors

We disclose personal data only where necessary to provide the website and services, fulfil a contract, comply with law, protect legitimate interests or act on your consent. Providers acting on our instructions are contractually required to process personal data only for the agreed purpose and to protect it appropriately.

9. Your rights

Subject to the statutory requirements, you may request information about your stored personal data, rectification, deletion, restriction of processing and data portability. You may withdraw consent at any time with effect for future processing.

Where processing is based on Art. 6(1)(e) or (f) GDPR, you may object on grounds relating to your particular situation. You may object to processing for direct marketing at any time. You also have the right to lodge a complaint with a competent data-protection supervisory authority.

To exercise your rights or ask a privacy question, contact hello@noboringshops.com.

10. Security and policy changes

We use appropriate technical and organisational measures to protect personal data. Internet transmission, including email, can nevertheless contain security risks and cannot be guaranteed to be completely secure.

We may update this policy when the website, services, providers or legal requirements change. The version published on this page is the current version.