Privacy Policy

Ice Bath Me ("we", "our", or "us") is committed to protecting your privacy in accordance with the UAE Federal Decree-Law No. 45/2021 on the Protection of Personal Data (PDPL) and other applicable Dubai laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website icebath.me or use our services.

1. Information We Collect

We collect personal data that you provide directly to us, including:

• Name
• Email address
• Phone number
• Address
• Username and password
• Any other information you choose to provide

We also automatically collect certain information when you visit our website, such as:

• IP address
• Browser type and version
• Operating system
• Language preferences
• Referring URLs
• Device information
• Usage data

2. How We Use Your Information

We use your personal data for the following purposes:

• To provide and maintain our services
• To notify you about changes to our services
• To allow you to participate in interactive features
• To provide customer support
• To gather analysis or valuable information to improve our services
• To monitor the usage of our services
• To detect, prevent, and address technical issues
• To comply with legal obligations

We process your personal data only with your explicit consent or when necessary for the performance of a contract, compliance with legal obligations, or our legitimate interests.

3. Data Subject Rights

Under the PDPL, you have the following rights:

• Right to access your personal data
• Right to rectify inaccurate personal data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right not to be subject to automated decision-making

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include firewalls, encryption, and secure server facilities. We conduct regular security audits and vulnerability assessments to ensure that our data security practices are effective.

4.1 Data Breach Notification

In the event of a data breach, we will notify affected users and the relevant authorities in accordance with the PDPL requirements. Notifications will include information about the breach, the data affected, and the measures we are taking to address it.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting requirements. When personal data is no longer needed, we securely delete or anonymize it.

6. International Data Transfers

We may transfer your personal data to countries outside the UAE that have been approved by the UAE Data Office as providing an adequate level of protection for personal data. For transfers to other countries, we implement appropriate safeguards in accordance with the PDPL.

7. Data Protection Officer

We have appointed a Data Protection Officer (DPO) responsible for overseeing questions regarding this Privacy Policy. If you have any questions or concerns about our privacy practices, please contact our DPO.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• By email: info@icebath.me

10. Data Protection Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) for processing activities that are likely to result in a high risk to the rights and freedoms of individuals. These assessments evaluate the impact of our processing activities on personal data and help mitigate any potential risks.

11. Records of Processing Activities

We maintain records of our processing activities as required by the PDPL. These records include information on the types of personal data we process, the purposes of processing, and the duration for which data is retained.

12. How to Reach the Data Protection Officer

If you have any questions or concerns regarding our Privacy Policy or our data practices, please contact our Data Protection Officer (DPO) at:

• Email: dpo@icebath.me

13. Filing Complaints

If you believe that we are not complying with your data protection rights or have any complaints regarding our practices, you can contact the DPO as provided above. You also have the right to lodge a complaint with the UAE Data Office.