Legal
Privacy notice
We collect as little as a maison can and use it only for the matter you raised. This notice explains what, why, for how long, and how to exercise your rights.
Version 1.1 · 1 November 2026
1. Who is responsible
The controller of your personal data is Pet Dentist L.L.C-FZ, trading as Maison Royal & Paw, Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates. For people in the United Kingdom, UK GDPR and the Data Protection Act 2018 apply. For people in the United Arab Emirates, Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data applies. Contact details are in section 11.
2. What we collect
- When you join a list or write to us: your name, email address, and anything you tell us, such as your companion's name, species and breed, your city and your interest. When you tick a box asking to hear from us, we also keep the exact wording you agreed to, the time, the page, and the moment you confirmed your address from the email we send; this is the record the law asks us to be able to show.
- When you give a gift: the recipient's name and, if you give it, their email address or delivery address, which we use only to deliver the gift and to serve it afterwards. We do not add a recipient to any list.
- When you request an appointment or a gift: the above plus a telephone or WhatsApp number if you give one, and the details of what you have in mind.
- When you buy or join Le Cercle: delivery and billing addresses, order and membership history, and your companion's profile (name, species, breed, measurements, birthday). Payment card details are taken by our payment processor and never reach us.
- When a venue applies to Royal & Paw Approved: the business details and the applicant's name, role and business contact details.
- When you browse: only what the site needs to work (section 4 of the cookie notice). Visit measurement runs only if you accept it.
3. Why, and on what basis
| Purpose | Lawful basis |
|---|---|
| Answering your message, appointment or gifting request | Taking steps at your request before a contract; our legitimate interest in running a concierge |
| Processing orders, deliveries, returns and bespoke commissions | Performance of a contract; legal obligation (tax and consumer law records) |
| Running Le Cercle, including reminders before renewal | Performance of a contract; legal obligation |
| Sending news about the Maison by email | Your consent, which you may withdraw at any time |
| Verifying and listing Royal & Paw Approved venues | Performance of a contract with the venue; legitimate interest in an accurate directory |
| Measuring visits to improve the site | Your consent, given through the cookie banner |
| Preventing fraud and keeping the site secure | Legitimate interest; legal obligation |
4. Marketing
We send marketing email only to people who have ticked a box asking for it and then confirmed their address by opening the link we email them, or, in the United Kingdom, to existing customers about similar products with a clear opportunity to refuse at the time and in every message. An address that is never confirmed is not written to again and is deleted with the enquiry. Every email carries an unsubscribe link that works in one click. We do not send marketing by SMS or WhatsApp unless you have asked us to in writing, and we never sell or rent your details.
5. Who we share it with
Only with providers who act on our instructions and under contract: the service that receives the site's forms and stores the consent record, email delivery, payment processing, order fulfilment and carriers, appointment scheduling, the directory platform for Royal & Paw Approved, and, if you consent, visit measurement. We share with professional advisers and authorities where the law requires. Where a Journal guide or the directory passes an enquiry to a partner (for example a licensed property agent), we tell you before we do and the partner's own notice then applies.
6. International transfers
The Maison operates between Dubai and London, so data moves between the United Arab Emirates and the United Kingdom, and some providers process data in the European Economic Area or the United States. For transfers out of the United Kingdom we rely on adequacy regulations or the UK International Data Transfer Agreement. For transfers out of the United Arab Emirates we rely on the safeguards the PDPL permits, including contractual clauses and your consent where needed. You may ask for a copy of the safeguards in place.
7. How long we keep it
- Messages and enquiries: 24 months after our last contact, then deleted.
- Founding list and marketing consent: until you unsubscribe, then your address is kept only on a suppression list so we do not write again. The consent record (wording, time, confirmation) is kept for as long as you are on the list and for 24 months after.
- Gift recipients' details: until the gift is delivered and served, then as part of the order record below.
- Orders, memberships and invoices: 7 years, for tax and consumer law.
- Companion profiles: for as long as you have an account, and deleted with it.
- Venue applications: for the life of the listing and 24 months after.
8. Your rights
You may ask for a copy of your data, have it corrected or deleted, restrict or object to its use, receive it in a portable form, and withdraw consent at any time without affecting what was done before. Where we rely on legitimate interest you may object and we will stop unless we have compelling grounds. We answer within one month. Write to the concierge (section 11); we may ask you to confirm your identity.
9. Children
The Maison sells to adults. We do not knowingly collect data from anyone under 18, and we delete it if we learn we have.
10. Security
The site is served over TLS. Payment is handled by a PCI DSS certified processor with strong customer authentication. Access to customer data is limited to the people who need it, under confidentiality obligations. If a breach ever puts your rights at risk we will tell you and the regulator as the law requires.
11. Contact and complaints
Concierge: WhatsApp and telephone +971 55 293 1121, telephone +44 7429 524205, email privacy@royalandpaw.com, or post to the address in section 1. If you are unhappy with our answer, in the United Kingdom you may complain to the Information Commissioner's Office (ico.org.uk); in the United Arab Emirates, to the UAE Data Office.