Privacy Policy

We collect the following categories of data:

• Account data: name, email, password hash, role (customer / creator / merchant), and any profile details you provide.
• Order data: shipping address, billing details, items purchased, and order history.
• Device & usage data: IP address, browser, pages visited, and product interactions.
• Merchant data: Shopify store details, product catalog, and inventory snapshots, only for merchants who connect a store.
• Creator data: storefront content, payout bank account (encrypted), and earnings history.

We use your data to:

• Operate the platform and process your orders
• Calculate and pay out creator commissions
• Sync products and inventory between merchants and Elevate
• Send transactional emails (order updates, payout notices)
• Detect fraud and protect platform security
• Improve features and personalise recommendations

We do not sell your personal data. We do not use your data to train third-party advertising models.

We share only the minimum data needed with carefully selected partners:

• Merchants: when you place an order, the relevant merchant receives the data needed to fulfill it (your name, shipping address, items, contact details).
• Shopify: for connected stores, order data is pushed to the merchant's Shopify so they can fulfill from their existing workflow.
• Payment processors: card details are handled by PCI-DSS compliant providers; we never store full card numbers.
• Shipping carriers: shipping address and contact for delivery and tracking.
• SendGrid: we use SendGrid to deliver transactional emails.

We use a small set of essential cookies for authentication and cart functionality. Optional functional and analytics cookies are described in our Cookie Policy.

Under the UAE Personal Data Protection Law (PDPL), and where applicable the EU General Data Protection Regulation (GDPR), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion (subject to legal retention requirements)
• Object to or restrict certain processing
• Request your data in a portable format
• Withdraw consent for optional processing at any time

Email privacy@wannaelevate.com to exercise any of these rights. We aim to respond within 30 days.

We keep account data for as long as your account is active and for up to 7 years after closure to meet tax, fraud-prevention, and regulatory obligations. Anonymised analytics may be kept indefinitely.

We protect your data with industry-standard measures: encryption in transit (TLS) and at rest for sensitive fields (e.g. bank account numbers), httpOnly authentication cookies, short-lived access tokens, and access controls on our infrastructure. No system is perfectly secure — please report any suspected vulnerabilities to security@wannaelevate.com.

Elevate is not directed at users under 18. We do not knowingly collect data from minors. If you believe we have, please contact us so we can remove it.

Our infrastructure is hosted in the UAE region where possible, but some service providers (e.g. SendGrid) may process data outside the UAE. Where transfers occur, we rely on contractual safeguards with the receiving party.

We may update this policy as our practices evolve. Material changes will be communicated at least 14 days in advance via email or platform notice.

If you connect a Shopify store or otherwise use Elevate to process your customers' data, our Data Processing Agreement governs the controller/processor relationship in addition to this policy.

Privacy questions: privacy@wannaelevate.com. For everything else, use our contact form.