Privacy Policy

 

 

ENDORPHIN values your privacy and is dedicated to safeguarding your personal data. This means protecting the information you provide to us, whether you’re browsing our website or making a purchase. We want you to feel confident not only in the quality of our products, but also in the integrity of our service.

Our privacy practices are designed to give you transparency, control, and peace of mind. We’ll always inform you how we handle your personal data, your rights, and the measures we take to ensure your information remains secure.

At ENDORPHIN, wellbeing isn’t just about the products you use—it’s about the entire experience. That’s why we hold ourselves to the highest standards of care, quality, and trust.

If you’d like to learn more or have any questions, our Wellness Support team is here to support you at hello@endorphin.ae.

We may amend these Terms & Conditions from time to time. These terms were last updated on September 20, 2025.

ENDORPHIN FOOD SUPPLEMENTS TRADING L.L.C (“Endorphin”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose your personal data when you visit our website (endorphin.ae), purchase our products, subscribe to our services, or otherwise interact with us.
By using our Website, Services, or providing your personal data to us, you agree to the practices described in this Privacy Policy.

Important Information 

Purpose of This Privacy Notice
This Privacy Notice explains how ENDORPHIN FOOD SUPPLEMENTS TRADING L.L.C (trading as ENDORPHIN) collects, processes, and protects your personal data when you use our website, purchase our products or services, subscribe to our communications, or use other services.
This notice supplements any other privacy or fair processing notices we provide and does not override them. Our products and services are not intended for children under 13, and we do not knowingly collect personal data from children.

How We Collect Your Personal Data: We may collect and process your personal data when you:

• Purchase our products or services;
• Subscribe to our newsletter, marketing communications, or publications;
• Use our subscription services;
• Participate in consultations, promotions, competitions, or surveys; or
• Interact with our website, including providing feedback or creating an account.

Controller: ENDORPHIN FOOD SUPPLEMENTS TRADING L.L.C, a UAE-registered company, is the data controller responsible for the processing of your personal data under UAE law. References to “ENDORPHIN”, “we”, “us”, or “our” in this notice refer to the controller.

Data Privacy Contact: For questions or to exercise your legal rights regarding your personal data, please contact our Data Privacy Manager at:
Email: hello@endorphin.ae
You also have the right to lodge a complaint with the UAE Data Office or any other applicable regulatory authority if you believe your data protection rights have been violated.

Changes to This Privacy Notice: ENDORPHIN may update this Privacy Notice periodically to reflect changes in law, regulation, or our business practices. The “Last Updated” date at the top reflects the current version. We encourage you to review this notice regularly to ensure that your personal data remains accurate and up to date.

Third-Party Links: Our website may include links to third-party websites, plug-ins, or applications. Clicking on these links or enabling such connections may allow third parties to collect, use, or share your personal data. ENDORPHIN has no control over third-party websites or services and is not responsible for their content, terms, or privacy practices. Accessing such websites is at your own risk, and we strongly recommend reviewing their privacy policies before providing personal information or engaging with their services.

Keeping Your Information Up to Date: It is important that the personal data we hold about you is accurate and current. Please inform us promptly if your personal data changes during your relationship with ENDORPHIN.

 

Data we collect about you

Personal Data or personal information means any information that identifies you or can be linked to you. Anonymous data, from which you cannot be identified, is not considered personal data under UAE law.

We may collect, use, store, and transfer different categories of personal data about you, which include:

• Identity Data: First name, last name, username or similar identifiers, title, date of birth, gender, and marital status.
• Contact Data: Billing and delivery addresses, email address, and telephone numbers.
• Financial Data: Bank account, payment card, or other payment details.
• Transaction Data: Records of payments, products or services purchased, subscriptions, and order history.
• Technical Data: IP address, browser type and version, operating system, device identifiers, cookies, login data, time zone settings, and other technology used to access our website.
• Profile Data: Username, account credentials, preferences, survey responses, purchase history, and feedback.
• Health & Lifestyle Data: Data provided through questionnaires, assessments, consultations, or other services, including but not limited to height, weight, general health status, pre-existing health conditions, medication or supplement usage, wellbeing goals, and lifestyle habits.
• Test & Results Data: Data generated through the use of ENDORPHIN services, products, or third-party diagnostic tools, which may include projected outcomes as well as actual results.
• Usage Data: Information about your interactions with our website, products, or services.
• Marketing & Communications Data: Preferences regarding marketing communications, opt-in/opt-out records, and communication preferences.

Aggregated Data: ENDORPHIN may collect, use, and share aggregated or anonymised data, such as statistical or demographic information, for research, analysis, business development, and other lawful purposes. Aggregated Data may be derived from your personal data, but under applicable UAE law it is not considered personal data, as it does not directly or indirectly reveal your identity. For example, we may aggregate website usage data to calculate the percentage of users who access a particular feature. However, if we combine or connect Aggregated Data with your personal data in a manner that could directly or indirectly identify you, we will treat the combined data as personal data, and it will be processed strictly in accordance with this Privacy Notice.

Failure to Provide Data: In certain situations, ENDORPHIN may be legally required to collect specific personal data, or such data may be necessary for us to perform our contractual obligations with you. If you fail to provide the required personal data when requested, we may not be able to provide the goods or services you have ordered. In such circumstances, ENDORPHIN reserves the right to cancel or suspend the relevant product or service, and we will notify you if this applies to your order. ENDORPHIN shall not be held liable for any delay, cancellation, or inability to perform obligations resulting from your failure to provide accurate or complete personal data when required.

How we collect your data

ENDORPHIN collects personal data in multiple ways, including:
Direct Interactions: You may provide personal data such as identity, contact, financial, health, or lifestyle information when you:

• Apply for ENDORPHIN products or services;
• Create an account on our website;
• Subscribe to our services, newsletters, or publications;
• Request marketing communications;
• Enter competitions, promotions, or surveys;
• Provide feedback or contact us for support; or
• Undertake a consultation with one of our approved nutritionists, wellness specialists, or other professionals provided through ENDORPHIN.

Automated Interactions: When you interact with our website or use our services, we may automatically collect technical data about your device, browsing actions, and usage patterns. This data is collected using cookies, server logs, and other similar technologies to improve your experience, ensure optimal website performance, and maintain security.

Third Parties and Public Sources: ENDORPHIN may receive personal data from trusted third-party providers or public sources, including:

• Technical Data from analytics providers, such as Google, for performance and usage analysis;
  
• Health, lifestyle, and test information generated by authorised third-party laboratories, healthcare providers, nutritionists, or wellness specialists engaged by ENDORPHIN to process test kits, assessments, or other services, enabling us to provide results and personalised wellbeing solutions.
  

All third parties are required to process your data in accordance with UAE data protection laws, and ENDORPHIN ensures that appropriate safeguards are in place to protect your personal data at all times.

Legal bases and purposes of processing your personal data

ENDORPHIN processes your personal data only when we have a lawful basis under UAE law. The primary legal bases we rely on include:

• Performance of a Contract: When processing your data is necessary to perform a contract with you, such as delivering products, services, or subscriptions.
  
• Legitimate Interests: Where processing is necessary for our legitimate business purposes, such as improving services, preventing fraud, or providing the best customer experience. We always balance our interests against your rights and freedoms.
• Legal Obligation: When processing is required to comply with UAE laws, regulations, or other statutory obligations.
• Consent: Where you have actively agreed to a specific purpose, such as subscribing to newsletters or receiving marketing communications.

Purpose / Activity	Types of Data	Legal Basis for Processing
Registering you as a customer	Identity, Contact	Performance of a contract
Processing and delivering orders, including managing payments, fees, or debt recovery	Identity, Contact, Financial, Transaction	Performance of a contract; Legitimate interests (debt recovery)
Providing other services, including consultations, test kits, assessments, or personalised recommendations	Identity, Contact, Profile, Health & Lifestyle Data, Test & Results Data, Usage Data, Aggregated Data	Performance of a contract; Consent (provided during registration or checkout); Legitimate interests (service improvement)
Managing our relationship with you, including notifying about terms updates or requesting reviews	Identity, Contact, Profile, Marketing & Communications Data	Performance of a contract; Legal obligation; Legitimate interests (record-keeping and service improvement)
Administering prize draws, competitions, or surveys	Identity, Contact, Profile, Usage, Marketing & Communications Data	Performance of a contract; Legitimate interests (business development and research)
Administering, securing, and maintaining our website and services, including troubleshooting, testing, and reporting	Identity, Contact, Technical Data	Legitimate interests (security, IT, business operations); Legal obligation
Delivering relevant content, advertising, or product recommendations	Identity, Contact, Profile, Usage, Marketing & Communications, Technical Data	Legitimate interests (marketing, service improvement, customer experience)
Using analytics to improve website, services, marketing, and customer experience	Technical, Usage, Profile Data	Legitimate interests (business improvement and research)

 

Marketing communications

Direct Marketing: With your consent, ENDORPHIN may send you promotional offers, updates, or newsletters.

Third-Party Marketing: We will obtain your explicit consent before sharing your data with third parties for their own marketing purposes.

Opt-Out: You may unsubscribe from marketing communications at any time via links in emails or through your account settings. Essential service-related communications, such as order confirmations or account updates, will continue as necessary.

Change of Purpose: We will only use your personal data for the purposes for which it was collected, unless we reasonably determine another purpose is compatible. If we intend to use your personal data for unrelated purposes, we will notify you and explain the legal basis for processing.

Disclosure and sharing of your personal data

ENDORPHIN may disclose and share your personal data with carefully selected third parties strictly for the purposes outlined in the section “Legal Bases and Purposes for Processing Your Personal Data.” Such disclosures are limited to what is necessary, lawful, and in compliance with applicable UAE laws, including the Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

External Third Parties may include:

• Service Providers (Data Processors): Third-party providers who deliver payment processing, IT infrastructure, website hosting, analytics, biomarker testing, and other system administration services necessary for the operation of ENDORPHIN’s business.
• Specialist Service Providers for Wellbeing Solutions: This may include, but is not limited to, laboratories, health practitioners, and wellness professionals involved in producing, processing, and analysing test results or providing associated services.
• Professional Advisers: Lawyers, auditors, consultants, insurers, and bankers who act as processors or independent controllers, assisting ENDORPHIN in fulfilling its professional, legal, and financial obligations.
• Regulatory, Supervisory, and Governmental Authorities: Tax authorities, regulators, and other official bodies who may require reporting of processing activities under UAE law, or where disclosure is required to comply with legal or regulatory obligations.
• Corporate Transactions: Third parties to whom ENDORPHIN may sell, transfer, or merge parts of its business or assets, or businesses we may acquire or merge with. Where such a transaction occurs, the new owner will be legally bound to use your personal data in a manner consistent with this Privacy Notice.
  

Safeguards for Third-Party Disclosures: ENDORPHIN requires all third-party recipients to maintain the confidentiality, security, and lawful handling of your personal data. These parties are strictly prohibited from using your personal data for their own purposes and are only authorised to process it for specific, documented purposes in accordance with ENDORPHIN’s lawful instructions and the applicable UAE data protection laws.

Liability Disclaimer: ENDORPHIN is not liable for any breaches or misuse of your personal data by third parties where we have taken all reasonable and legally required measures to ensure their compliance with applicable data protection laws and contractual obligations.

International transfers

ENDORPHIN may transfer your personal data outside the UAE only where necessary to provide our products or services. Any international transfer will be carried out in compliance with UAE data protection law to ensure an equivalent level of protection for your personal data. We take appropriate measures, including contractual or other safeguards, to ensure that recipients of your personal data abroad process it in a manner consistent with UAE law.

We will only transfer your personal data to jurisdictions where adequate safeguards exist or where such transfers are otherwise permitted under UAE law. In all cases, we require that third parties maintain confidentiality, implement security measures, and process your data solely for the purposes for which it was shared.

If you wish to obtain further information regarding the specific mechanisms used by ENDORPHIN to lawfully transfer personal data internationally, please contact us at hello@endorphin.ae.

Data security

ENDORPHIN implements robust technical, administrative, and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, disclosure, or misuse. Access to personal data is restricted to employees, contractors, agents, or other authorised third parties who have a legitimate business need to process such data. These parties are bound by confidentiality obligations and may only process your personal data in accordance with ENDORPHIN’s instructions and applicable law.

ENDORPHIN maintains procedures to detect, report, and investigate personal data breaches. In the event of a suspected or confirmed breach, we will take prompt action to contain and mitigate the impact. Where required under UAE law, we will notify you and the relevant regulator of the breach in accordance with legal obligations.

Data retention

ENDORPHIN will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with applicable legal, regulatory, tax, accounting, or reporting obligations. Retention periods may be extended where required for the resolution of disputes, investigations, or litigation.

When determining the appropriate retention period, we consider factors such as:

• The nature, sensitivity, and volume of the personal data;
• The risk of harm from unauthorised use or disclosure;
• The purposes for which we process the data and whether those purposes can be achieved by other means; and
• Applicable legal, regulatory, and contractual requirements.
  

In some circumstances, you may request deletion of your personal data in accordance with your legal rights under UAE law. Where deletion is not feasible, ENDORPHIN may anonymise personal data, removing any association with identifiable individuals. Anonymised data may be used indefinitely for research, statistical analysis, or business improvement without further notice.

For more information on retention periods for specific categories of personal data or to exercise your rights regarding deletion or anonymisation, please contact hello@endorphin.ae.

Your legal rights

Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), you have certain legal rights in relation to your personal data, subject to applicable limitations under law. These rights enable you to control how your personal data is collected, processed, and used by ENDORPHIN.

Your rights include:

• Right of Access: You may request access to the personal data we hold about you (“Data Subject Access Request”) to verify that we are processing it lawfully.
• Right to Rectification: You may request correction of any incomplete or inaccurate personal data we hold about you. ENDORPHIN may verify the accuracy of any new data you provide before processing.
• Right to Erasure: You may request deletion of your personal data where there is no lawful reason for ENDORPHIN to continue processing it. This includes situations where you successfully object to processing, where the data was processed unlawfully, or where retention is no longer required under law. Note that ENDORPHIN may be required to retain certain data to comply with legal or regulatory obligations, and in such cases, we will notify you.
• Right to Object: You may object to processing based on legitimate interests, including where such processing impacts your fundamental rights, or where your data is used for direct marketing. ENDORPHIN may continue processing where we demonstrate compelling legitimate grounds that override your rights.
• Right to Restrict Processing: You may request that ENDORPHIN suspend processing of your personal data in certain circumstances, such as to verify accuracy, if processing is unlawful but you do not want erasure, to retain data for legal claims, or to review overriding legitimate grounds.
• Right to Data Portability: You may request that ENDORPHIN provide your personal data in a structured, commonly used, machine-readable format. This right applies only to automated information provided by you or used to perform a contract.
• Right to Withdraw Consent: Where ENDORPHIN relies on consent to process personal data, you may withdraw it at any time. Withdrawal does not affect the lawfulness of prior processing, but may limit your access to certain products or services.

Exercising Your Rights: To exercise any of these rights, please contact hello@endorphin.ae.

• No Fee Usually Required: You will not be charged to exercise your rights. However, ENDORPHIN may charge a reasonable fee or refuse to comply where requests are manifestly unfounded, repetitive, or excessive.
• Verification Requirements: ENDORPHIN may request additional information to verify your identity and safeguard your personal data.
• Response Time: We aim to respond within 30 days of receipt of a legitimate request. For complex requests, we may extend this period and will notify you accordingly.

Account deactivation

You may request deactivation of your ENDORPHIN account by contacting hello@endorphin.ae or submitting a request via our contact form.
Deactivation will result in the closure of your account and restricted access to your data. However, ENDORPHIN may retain certain information where necessary for:

• Legal, regulatory, or tax compliance;
• Resolving disputes or enforcing agreements;
• Operational or business continuity purposes.

All retained data will continue to be handled in accordance with ENDORPHIN’s data protection policies and applicable UAE law.

Cookies and tracking

ENDORPHIN uses cookies and similar tracking technologies to enhance your browsing experience, analyze website usage, and deliver personalized services. These technologies may collect technical, usage, and preference information. You can manage or disable cookies via your browser settings, but please note that some website features may not function properly if cookies are disabled.

Third-party links

Our website may contain links to third-party websites, applications, or plug-ins. ENDORPHIN is not responsible for the privacy practices, data collection, or content of these external sites. We strongly encourage you to review the privacy policies of any third-party websites before providing your personal data.

Legal compliance

ENDORPHIN strictly complies with all applicable UAE laws, including but not limited to:

• Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL); and
  
• UAE E-Commerce and Consumer Protection Regulations.
  All processing, storage, and disclosure of personal data are conducted in accordance with these laws to ensure the highest standards of data protection, privacy, and consumer rights.

Contact

Subject: Data Privacy Manager
Email: hello@endorphin.ae