For PAIR RESTAURANTS MANAGEMENT L.L.C.
Effective Date: May 28, 2025
This Privacy Policy explains how PAIR RESTAURANTS MANAGEMENT L.L.C. ("we," "our," "us," or the "Company") collects, uses, discloses, and protects your personal information when you visit our website, make a reservation, or use our services. We are committed to protecting your privacy in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE DP Law).
We are a mainland company operating in Dubai and are subject to the UAE DP Law.
We only collect data that is necessary to provide you with high-quality service. Depending on how you interact with us, we may process the following categories of personal data:
| Category of Data Subject | Types of Data Processed | Purpose of Processing | Legal Basis (UAE DP Law) |
|---|---|---|---|
| Guests | Name, phone number (UAE format), email address, date of birth, dining preferences, seating requests, special occasion notes. | Managing reservations, personalizing your experience, handling special requests. | Contractual Necessity (Art. 6.1(b)) |
| Loyalty Program Members (Loona) | Order history, accumulated points, redeemed rewards, favorite dishes, beverage preferences. | Administering the loyalty program, calculating rewards, sending personalized offers. | Explicit Consent (Art. 6.1(a)) |
| Visitors (CCTV) | Video footage, audio (in designated areas), timestamps. | Ensuring safety of guests and staff, preventing theft, investigating incidents. | Legitimate Interest (Art. 6.1(f)) |
| Payment Data | Transaction amount, date/time, last 4 digits of payment card, payment method (cash/card). We do NOT store full card numbers. | Financial reconciliation, VAT compliance (Federal Tax Authority), fraud prevention. | Legal Obligation (Art. 6.1(c)) |
| Inquirers / Website Visitors | IP address, browser type, cookies, pages visited, clickstream data, device information. | Website analytics, security monitoring, improving user experience. | Legitimate Interest (Art. 6.1(f)) / Consent (for cookies) |
| Communication (via Call/WhatsApp) | Phone number, message history, call logs. | Confirming reservations, responding to inquiries, customer support. | Contractual Necessity / Consent |
We use your name and contact details to confirm bookings and send updates. Your preferences (e.g., favorite table or dietary restrictions) help us tailor your dining experience. For marketing communications (promotions, events), we will only contact you if you have explicitly opted in.
For your safety and the security of our property, CCTV is in operation at all our locations, including entrances, dining areas, and exits. Signage is displayed at all entry points. Recordings are typically retained for 30 days unless required for an investigation.
If you join our loyalty program, we track your visits and spending to offer you relevant rewards. You can withdraw your consent at any time by contacting us.
We use Mindbox as our marketing automation and customer data platform to:
Mindbox processes your data on our behalf under a strict Data Processing Agreement (DPA) and in compliance with UAE DP Law.
We use various tracking technologies to understand how you interact with our website and marketing materials. This helps us improve your experience and measure the effectiveness of our campaigns.
| Technology | Purpose | Examples |
|---|---|---|
| Essential Cookies | Required for website functionality. | Session cookies, security tokens. |
| Analytics Cookies | Understand how visitors use our site (pages visited, time on site, bounce rate). | Google Analytics, Mindbox analytics. |
| Marketing/Advertising Pixels | Track conversions from our ads, build audiences for retargeting. | Meta Pixel (Facebook/Instagram), Google Ads. |
| SDKs (Software Development Kits) | Mobile app tracking (if applicable). | Mindbox SDK, Meta SDK. |
| UTM Tags | Track the effectiveness of specific marketing campaigns. | Campaign parameters in URLs. |
| Clickstream Data | Record user journeys on our website. | Pages viewed, buttons clicked, navigation path. |
We may use tracking technologies to recognize you across different devices (e.g., smartphone, tablet, laptop) to provide a seamless experience and ensure you receive relevant communications. This is done through hashed identifiers and is always subject to your consent where required.
To operate effectively, we work with trusted service providers who process data on our behalf. They are contractually bound to protect your data and comply with UAE law.
| System / Service | Purpose | Data Location | Safeguards |
|---|---|---|---|
| Servme | Online reservation system. | UAE | On-premise servers, strict NDA. |
| AmoCRM | Customer relationship management. | Russia/EU | Data encryption, Standard Contractual Clauses. |
| Mindbox | Marketing automation, CDP, analytics, personalization. | Russia/EU | Data Processing Agreement (DPA), encryption, data minimization. |
| Loona | Loyalty program management. | UAE / USA | Data Processing Agreement (DPA) in place. |
| Wazzup (WhatsApp) | Guest communication. | UAE / USA | End-to-end encryption. |
| 1C & POS | Sales and transaction records. | UAE | Role-based access, AES-256 encryption. |
| Meta Ads | Marketing analytics and advertising. | USA | Limited Data Use (LDU) mode enabled. |
| Google Analytics | Website analytics. | USA | IP anonymization, data retention controls. |
We do not sell your personal data to third parties.
We keep your data only as long as necessary for the purposes described above, or as required by UAE law.
| Data Type | Retention Period | Reason |
|---|---|---|
| Guest CRM Data | 3 years after last interaction. | Marketing analysis and re-engagement. |
| Loyalty Program Data | Until account closure + 3 years. | Program administration. |
| Mindbox Profiles | 3 years after last interaction. | Marketing automation and personalization. |
| CCTV Footage | 30 days. | Security and incident investigation. |
| Financial Records | 5 years. | UAE Tax Law (VAT) requirements. |
| Employee Records | 7 years post-termination. | UAE Labor Law compliance. |
| Tracking Data (Cookies, Pixels) | 13 months (typical) or as per consent duration. | Analytics and campaign measurement. |
After the retention period, your data is securely deleted or anonymized.
Under the UAE DP Law, you have the following rights regarding your personal data:
How to Exercise Your Rights:
Please send your request to info@pairstores.com with the subject line "Data Subject Request". We will respond within 14 business days as mandated by law. We may need to verify your identity before processing your request.
For Tracking-Specific Requests:
We take data security seriously and implement robust measures to protect your information, including:
When you visit our website, you will see a cookie consent banner that allows you to:
Categories of Cookies We Use:
You can change your cookie preferences at any time by clicking the "Cookie Settings" link in the website footer.
Some of our service providers (like AmoCRM, Mindbox, and Meta) may process data outside the UAE. We ensure such transfers are protected by appropriate safeguards, such as:
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
Data Protection Officer (DPO):
In accordance with Article 14 of the UAE DP Law, you may direct any privacy-related inquiries to our designated representative via the email above.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with the "Effective Date" revised. We encourage you to review this page periodically.
For significant changes, we may notify you via email or a prominent notice on our website.