This policy explains what personal data Savoy Drugstore collects through savoydrugstore.ae, why we collect it, who processes it on our behalf, and how long we keep it. It is written for the business contacts who enquire with us. We do not sell personal data.
1 · Who we are
Savoy Drugstore is the trading name of SAVOY DRUG STORE L.L.C., licensed by the Emirates Drug Establishment (EDE, previously MOHAP) under License No. 61109. Registered address: Abdulla Jaber Building (IC2), Retail Shop 2, Warsan Fourth, Dubai, United Arab Emirates.
For any privacy question or request, write to hello@savoydrugstore.ae. We are the controller of the personal data described below.
2 · What we collect and when
Business inquiry form (homepage)
Company name, contact name, email address, phone number (optional) and your message.
Contact form
Company name, contact name, email address, phone number (optional), inquiry type and your message.
Market readiness assessment form
Product category, first and last name, email address, phone or WhatsApp number, company name, job title, country and an optional message. Submitting this form also enrols your email address in our regulatory follow-up email sequence, which you can leave at any time using the unsubscribe link in every message.
Checklist download form
Full name, work email address and company name (optional), in exchange for the registration readiness checklist.
Technical data collected automatically
When you submit a form we also record a first-party visitor identifier, a non-invasive technical hash of your browser settings, your IP address and your browser's user agent, used only to recognise repeat enquiries from the same person in our lead system. The technical hash is derived from your browser language, screen size, time zone, platform and processor count. It does not identify you on other websites and we do not use canvas, audio or font probing.
Staff sign-in
Our internal lead dashboard is restricted to authorised Savoy Drugstore staff, who sign in with an email address and password. It is not open to the public and there is no customer account area on this site.
There are no file uploads, no live chat widget, no newsletter sign-up separate from the forms above, and no payments taken on this site. Clicking the WhatsApp button opens a conversation in WhatsApp itself, which is governed by WhatsApp's own privacy terms.
3 · Why we use it and on what basis
We process personal data under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), on the following bases:
To respond to your enquiry — to answer you, assess your regulatory requirement and take steps at your request before entering into a service agreement. Where we send follow-up regulatory emails after an assessment request, we do so on the basis of the consent you give by submitting that form, and you may withdraw it at any time.
Security and abuse prevention — to detect duplicate, automated or abusive submissions and to keep the site and our systems secure. This is a legitimate interest of the business and is limited to the technical data described above.
Legal obligations — to meet record-keeping, licensing and regulatory obligations that apply to us as a licensed UAE establishment.
4 · Who we share it with
We share personal data only with the service providers that operate this site and our enquiry handling. We do not sell personal data and we do not share it for third-party advertising beyond the measurement tools named below.
Hosting and database — Lovable Cloud, built on Supabase, which hosts this site and stores enquiry records.
Transactional email — Resend, which delivers our enquiry notifications, checklist delivery and follow-up emails.
Group lead management — our group lead-management system, which receives a copy of each enquiry so it can be worked and de-duplicated centrally.
Analytics and advertising measurement — Google Analytics 4 and the LinkedIn Insight Tag, which measure page views, form completions and WhatsApp clicks.
Some of these providers operate outside the UAE, so your data may be transferred abroad and processed under contractual terms that require it to be protected.
We may also disclose personal data where we are required to do so by law or by a competent authority.
5 · How long we keep it
Enquiries are kept for as long as we need them to handle the enquiry and the relationship that follows, and then for up to 24 months. Technical logs and the technical data described in section 2 are kept for up to 12 months.
6 · Cookies
This site does not show a cookie banner. The cookies below are the ones actually set when you use it.
lh_vid — First-party visitor identifier. Lets us recognise repeat enquiries from the same browser. 1 year · set by us.
_ga, _ga_T2PFPG7LM1 — Google Analytics 4. Distinguishes visitors and sessions for aggregate traffic measurement. Up to 2 years · set by Google.
bcookie, lidc, UserMatchHistory, li_sugr, AnalyticsSyncHistory — LinkedIn Insight Tag. Measures campaign performance and conversions from LinkedIn. Up to 1 year, some session-only · set by LinkedIn.
Our staff dashboard holds its sign-in session in browser storage rather than a cookie, and only on the devices of signed-in staff. You can block or delete cookies in your browser settings; blocking the first-party identifier does not stop you from using any form on this site.
7 · Your rights
You can ask us to give you access to the personal data we hold about you, correct it, delete it, or stop using it for a particular purpose, and you can object to processing based on our legitimate interests. Where processing rests on consent, you can withdraw that consent at any time.
To exercise any of these, email hello@savoydrugstore.ae. We answer within a reasonable period and may ask you to confirm your identity first. If you are not satisfied with our response, you may complain to the UAE Data Office, the supervisory authority under the UAE Personal Data Protection Law.
8 · Security
All traffic to this site and to our backend services is encrypted in transit over HTTPS. Enquiry records are written server-side and are not readable from the browser; access to them is restricted to the Savoy Drugstore staff who need it to handle enquiries, each with their own authenticated account.
9 · Children
This site is a business-to-business service. It is not directed at anyone under 18 and we do not knowingly collect personal data from children. If you believe a child has given us personal data, write to us and we will delete it.
10 · Changes to this policy
We update this policy when our data practices change. The current version always appears on this page, with its date. Last updated: 3 September 2026.