Privacy Policy.

1. Who we are

Burnt Carbon, Dubai, United Arab Emirates, is the controller of the personal data described here. You can reach us about anything in this policy through our contact page (burnt-carbon.com/contact) or WhatsApp on +971 58 589 5996.

We follow the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

2. What we collect

• Orders: your name, email, mobile number, emirate, delivery address and delivery notes, and what you bought.
• Payments: Ziina processes your card or wallet payment. We receive the payment status and amount — never your full card number.
• Messages: what you send through the contact form, WhatsApp, Instagram or Facebook.
• First Cook Guide: the email address you give us (and grill size, if chosen).
• Warranty registration: your name, email, mobile number, grill size and glaze, order number and purchase date.
• Website use: pages visited, device and browser, approximate location and referring site, through Google Analytics (via Google Tag Manager).

3. Why we use it

• To take, deliver and support your order, answer your messages and handle warranty claims — because we need it to do what you asked (our contract with you).
• To keep order, payment and tax records — because UAE law requires it.
• To keep the website secure and understand how it’s used so we can improve it — our legitimate interest in running the shop.
• To send you the First Cook Guide and, only if you agree, other news — based on your consent, which you can withdraw at any time without affecting anything we did before.

We don’t sell your personal data, and we don’t make automated decisions about you.

4. Who we share it with, and where

We share personal data only with providers who help us run the shop, under their data processing terms:

• Ziina — payments (United Arab Emirates).
• Our delivery team or courier — your name, mobile number and address (United Arab Emirates).
• Vercel — website hosting (United States and other regions).
• Turso — our order and stock database (cloud data centres outside the UAE).
• Resend — order, warranty and First Cook Guide emails (United States).
• Google — website analytics through Google Tag Manager and Google Analytics (United States).
• Meta — if you contact us on WhatsApp, Instagram or Facebook, under Meta’s own privacy policy.

Some of these providers store or process data outside the UAE, including in the United States and the European Union, which may not be recognised by the UAE as providing an equivalent level of protection. We transfer data to them only as needed to provide our service to you, under contractual safeguards that require them to protect it.

We may also disclose personal data where the law requires it, for example to a court or government authority.

5. How long we keep it

• Order and payment records: as long as UAE commercial and tax record-keeping rules require — generally five years.
• Warranty registrations: for the life of the warranty.
• Contact messages: up to two years after our last conversation.
• First Cook Guide email: until you ask us to remove it.
• Analytics data: for a limited period set in Google Analytics.

6. Your rights

You can ask us to give you a copy of your personal data, correct it, delete it, restrict or stop how we use it, or send it to you in a portable format, and you can withdraw consent at any time. Some data we must keep by law (such as order records) even if you ask us to delete it.

To use any of these rights, contact us through our contact page (burnt-carbon.com/contact) or WhatsApp on +971 58 589 5996. We may ask you to confirm your identity, and we’ll reply within 30 days.

If you’re not happy with how we’ve handled your data, you can complain to the UAE Data Office.

7. Cookies

We use cookies to enhance your experience on our website. You can choose to disable cookies through your browser settings, though this may affect the functionality of the site.

Your cart is saved in your own browser (local storage) so it survives a page reload; it isn’t sent to us until you check out. Google Analytics sets cookies to count visits and see which pages are used; you can block them in your browser settings or with Google’s Analytics opt-out add-on.

8. Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. The site is served over HTTPS, payments are handled by a licensed payment provider, and access to order data is restricted to our team. If a breach puts your data at risk, we’ll tell you and the UAE authorities as the law requires.

9. Children

Our shop is for adults. We don’t knowingly collect personal data from anyone under 18.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page, with the date it was last updated.