Privacy Policy

The data controller is SpatiumForma, Dubai, United Arab Emirates. Questions about this policy or your data go to hello@spatiumforma.com.

We only collect what each feature needs:

• Orders: your name, phone number, delivery address, the items and amounts, and the payment reference returned by our payment provider. We never see or store card numbers.
• Contact form: your name, email address, subject and message.
• Sell on Spatium applications: company name, contact person, email, phone, website, product types and any notes you add.
• Technical data: your IP address and request details are processed briefly by our hosting provider, Cloudflare, to protect the site from abuse (for example, limiting how often a form can be submitted). They are not linked to your orders.
• Analytics: if enabled, Cloudflare Web Analytics counts page views without cookies and without identifying you.

Your cart and your light/dark theme choice are kept in your browser's local storage so they survive a reload. This data stays on your device, is not sent to us until you check out, and can be cleared at any time through your browser settings. We do not use advertising or tracking cookies.

Payments are processed by Ziina, a UAE-licensed payment provider. When you pay, you are taken to Ziina's secure page and your card details are entered there, under Ziina's privacy policy. Ziina tells us only whether the payment succeeded and its reference number.

• To take payment, deliver your order and handle returns.
• To reply to your messages and evaluate applications to sell on the marketplace.
• To keep the site secure and prevent fraud or abuse.
• To meet legal obligations such as accounting and tax record-keeping.

We share personal data only with providers who help us run the store, and only what they need:

• Ziina for payments.
• Supabase, which hosts our order, message and application database.
• Cloudflare, which hosts the site, protects it and (if enabled) provides analytics.
• Delivery partners, who receive your name, phone number and address to deliver your order.
• Independent makers whose pieces you buy, where they fulfil the order directly.
• Authorities, when the law requires it.

We do not sell personal data.

Our providers may store data on servers outside the UAE. Where that happens we rely on their contractual safeguards and security certifications to protect it to the standard required by UAE law.

• Orders: for at least five years after the purchase, as UAE commercial and tax law requires.
• Contact messages: up to 12 months after we last correspond with you.
• Seller applications: up to 12 months after a decision, or for the life of the seller relationship if accepted.
• Security logs: a few days.

Under the UAE Personal Data Protection Law you can ask to see the data we hold about you, correct it, delete it where we no longer need it, or object to how we use it. Email hello@spatiumforma.com and we will respond within 30 days. You can also complain to the UAE Data Office.

The store is for adults. We do not knowingly collect data from anyone under 18.

We will update this page when our practices change and show the new date at the top. Material changes to how we use existing data will be announced on the site. See also our Terms of Sale.