Privacy Policy

1. Overview of data protection

Effective date: 30 September 2026.

This policy provides an overview of what happens to personal data when you visit this website or contact No Boring Shops. Personal data is information that can identify you directly or indirectly.

We receive information that you provide, for example through the Preview form or by email. Technical information may also be processed automatically when you access the website, including browser, operating-system, IP-address, referrer and access-time information required to deliver and secure the site.

We use data to provide the website, respond to requests, perform or prepare contracts, improve service quality and, where you have consented, understand website use or measure marketing activity.

2. Controller

The controller responsible for processing personal data on this website is:

NO BORING SHOPS L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.

Email: hello@noboringshops.com. Phone: +971 58 512 3191.

3. Applicable law, legal bases and storage duration

As a company established in the United Arab Emirates, we process personal data in accordance with applicable UAE data-protection law. The EU GDPR or UK GDPR may also apply where our activities fall within their territorial scope.

Where the EU GDPR or UK GDPR applies, consent-based processing relies on Art. 6(1)(a), processing required to perform a contract or take pre-contractual steps relies on Art. 6(1)(b), processing required by law relies on Art. 6(1)(c), and processing necessary for legitimate interests relies on Art. 6(1)(f), unless your interests override those interests.

Personal data is retained until the purpose for processing no longer applies. Data will be deleted when you make a justified request or withdraw consent, unless legal retention requirements or another lawful basis require continued storage.

4. Hosting and server logs

The hosting provider may process server log information required to deliver and secure this website. This can include browser type and version, operating system, referrer URL, hostname, request time and IP address.

Server-log processing is based on our legitimate interest in technically reliable, secure and optimized website delivery under Art. 6(1)(f) GDPR. Where required, we enter into an appropriate data-processing agreement with the hosting provider.

5. Contact, Preview requests and business outreach

When you submit a Preview request, contact us by email or telephone, or otherwise send an inquiry, we process the information you provide to respond, clarify follow-up questions and take requested pre-contractual steps.

Processing is based on Art. 6(1)(b) GDPR where the inquiry relates to a contract or pre-contractual measures. Otherwise it is based on our legitimate interest in effective inquiry handling under Art. 6(1)(f) GDPR or on consent under Art. 6(1)(a) GDPR where requested.

We may use professional contact details obtained directly from you, through referrals, professional networks or publicly available business sources to contact businesses that may have a relevant interest in our services. Where permitted by applicable law, this is based on our legitimate interest in developing our business. You may object to direct marketing at any time by replying to the message or contacting hello@noboringshops.com. We will then stop using your information for that purpose.

Inquiry data is retained until you request deletion, withdraw consent or the purpose no longer applies, subject to mandatory statutory retention periods.

6. Cookies and consent storage

This website uses essential browser storage to remember your privacy choice and provide requested functions. The preference is saved under marketready-cookie-consent in local storage and in the first-party mr_cookie_consent cookie for up to 180 days. These items do not create an advertising profile.

Optional analytics or marketing technologies must remain disabled until you choose “Accept all.” Where such technology is enabled, processing is based on your consent under Art. 6(1)(a) GDPR and the applicable rules governing access to information on your device. Consent can be withdrawn at any time with effect for the future.

7. Analytics and marketing services

No analytics or advertising provider is hard-coded into the current static MarketReady website. If services such as Google Analytics, Google Ads or LinkedIn Insight are added, they may be activated only after the relevant consent and this policy must be updated with the provider, purpose, data, retention and international-transfer information.

Where third-country transfers occur, we use an appropriate transfer mechanism where required, such as an adequacy decision or Standard Contractual Clauses. Some countries may not provide a level of protection equivalent to the European Union.

8. International transfers, recipients and processors

NO BORING SHOPS L.L.C-FZ is established in the United Arab Emirates. Information submitted through this website or sent to us may therefore be processed in the UAE and in other countries where our service providers operate.

Where EU or UK data-transfer restrictions apply, we use an appropriate transfer mechanism where required, such as the European Commission Standard Contractual Clauses, the UK International Data Transfer Agreement or the UK Addendum, together with any required transfer assessment.

We disclose personal data only where necessary to provide the website and services, fulfill a contract, comply with law, protect legitimate interests or act on your consent. Providers acting on our instructions are contractually required to process personal data only for the agreed purpose and to protect it appropriately.

9. Your rights

Subject to the law that applies to your information, you may request access to your personal data, rectification, deletion, restriction of processing or data portability. You may withdraw consent at any time with effect for future processing.

Where processing is based on Art. 6(1)(e) or (f) GDPR, you may object on grounds relating to your particular situation. You may object to processing for direct marketing at any time. You also have the right to lodge a complaint with a competent data-protection supervisory authority.

To exercise your rights or ask a privacy question, contact hello@noboringshops.com.

10. Security and policy changes

We use appropriate technical and organisational measures to protect personal data. Internet transmission, including email, can nevertheless contain security risks and cannot be guaranteed to be completely secure.

We may update this policy when the website, services, providers or legal requirements change. The version published on this page is the current version.