Privacy Policy

Flippy ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform and services. Data Controller: Flippy, a registered UAE company, is the data controller of your personal information. This policy is designed to comply with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), as well as applicable international standards including GDPR where relevant. Contact for Privacy Matters: privacy@flippy.ae

Account Information: Name, email address, phone number, delivery address, and profile details provided during registration. Family Profiles: Information about your children (names, date of birth, developmental interests) that you voluntarily provide to personalise your experience. This is optional. Payment Data: We do not store your full card details. Payment processing is handled by Stripe, our PCI-DSS compliant payment processor. We retain only the last 4 digits of your card and billing information. Order & Rental Data: Order history, items rented, return records, tokens used, and order statuses. Communication Data: Messages, inquiries, and feedback submitted through our platform or contact forms. Usage Data: IP address, browser type, pages visited, and interaction data collected via cookies and analytics tools. Device Data: Device type, operating system, and app version if you access Flippy via mobile.

Service Delivery: To process orders, arrange deliveries and collections, manage memberships, and provide customer support. Account Management: To manage your membership, tokens, rental records, and account preferences. Communication: To send order confirmations, delivery updates, return notifications, and membership-related communications. Personalisation: To recommend products based on your children's profiles and rental history. Payment Processing: To charge membership fees and process damage fee payments through Stripe. Platform Improvement: To analyse usage patterns and improve our website, app, and services. Legal Compliance: To comply with UAE law, respond to lawful requests, and enforce our Terms of Use. We do not sell your personal data to third parties. We do not use your data for unsolicited marketing without your consent.

Contract Performance: We process your data to fulfil our membership agreement and deliver the Services you've requested. Legitimate Interests: We process certain data (such as usage analytics) for our legitimate business interests, provided these do not override your rights. Legal Obligation: We may process data to comply with UAE laws and regulations. Consent: For marketing communications and optional personalisation features, we rely on your explicit consent, which you may withdraw at any time.

We share data only as necessary to operate our Services: Stripe: Payment processing. Stripe processes payment data under its own privacy policy and PCI-DSS compliance framework. Delivery Partners: Delivery address and contact information is shared with our logistics partners to fulfil deliveries and collections. Communication Services: Brevo (email notifications) — we share your email and name to send transactional communications. Analytics: Anonymised usage data may be processed by analytics providers to help us improve the platform. We require all third-party processors to maintain appropriate security measures and to process data only in accordance with our instructions. We do not transfer your personal data outside the UAE without appropriate safeguards.

Account Data: Retained for the duration of your membership and for 3 years after cancellation to comply with legal and financial record-keeping requirements. Order & Transaction Records: Retained for 5 years as required by UAE commercial law. Communication Records: Retained for 2 years. Inspection Videos: Videos taken during the rental delivery process are deleted by the admin after the return is confirmed and approved. Videos taken during return inspection are automatically deleted after 30 days. You may request earlier deletion of your data (see Your Rights below), subject to legal retention requirements.

Under the UAE PDPL and applicable law, you have the following rights: Access: Request a copy of the personal data we hold about you. Correction: Request correction of inaccurate or incomplete data. Deletion: Request deletion of your personal data, subject to legal retention obligations. Restriction: Request that we limit the processing of your data in certain circumstances. Portability: Receive your personal data in a structured, machine-readable format. Objection: Object to processing based on legitimate interests. Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing. To exercise any of these rights, contact: privacy@flippy.ae. We will respond within 30 days.

We use essential cookies to ensure the platform functions correctly (session management, authentication). We use analytics cookies to understand how users interact with our platform. These are anonymised and not linked to your identity. We do not use advertising or tracking cookies for third-party advertising purposes. You may control cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

Flippy's Services are intended for use by parents and guardians, not directly by children. We do not knowingly collect personal data directly from children under the age of 18. Information about children (such as names and ages provided in family profiles) is collected from parents/guardians and used solely to personalise product recommendations. If you believe we have inadvertently collected personal data from a child, please contact us immediately at support@flippyworld.com.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. This includes: Encryption of data in transit (HTTPS) and at rest. Access controls limiting data access to authorised personnel only. Regular security reviews and updates. Payment data processed exclusively through Stripe's PCI-DSS compliant infrastructure. While we take every reasonable precaution, no system is completely secure. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant authorities as required by law.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our platform. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of Flippy's Services after changes are posted constitutes acceptance of the updated policy.

For privacy-related questions or to exercise your rights:  Email: support@flippyworld.com Website: flippyworld.com Social: @flippy.world   Last updated: March 2026