1. Who We Are
AIWA Group is a multi-brand retail and lifestyle company headquartered in the United Arab Emirates. The AIWA Rewards loyalty program operates across all AIWA Group subsidiaries and partner brands. For the purposes of data protection law, AIWA Group is the data controller responsible for your personal information.
2. Data We Collect
We collect the following categories of personal information:
2.1 Information You Provide
- Account Registration: Full name, email address, phone number, date of birth, and password.
- Profile Information: Preferred brands, communication preferences, and delivery addresses.
- Purchase Transactions: Products purchased, amounts spent, stores visited, and reward points earned or redeemed.
- Customer Support: Communications, complaints, and feedback you share with our team.
2.2 Information Collected Automatically
- Device & Browser Data: IP address, browser type, operating system, and device identifiers.
- Usage Data: Pages visited, time spent on pages, links clicked, and navigation patterns on our platform.
- Location Data: General location inferred from your IP address (we do not collect precise GPS location without explicit consent).
- Cookies & Similar Technologies: See Section 6 for full details.
2.3 Information from Partner Brands
When you shop at Al Ameen, GVT, or Fathoumi stores, those partners share transaction data with us (amount, product category, store location) so we can credit your points. They do not share sensitive financial data such as full card numbers.
3. How We Use Your Data
We use your personal information for the following purposes:
4. Data Sharing
We do not sell your personal data. We share it only in the following limited circumstances:
4.1 AIWA Partner Brands
Transaction data is shared with Al Ameen, GVT, and Fathoumi only to the extent needed to operate the loyalty program (e.g., verifying purchases and crediting points). Each partner brand is contractually bound to protect your data in accordance with this policy.
4.2 Service Providers
We use trusted third-party service providers for hosting, email delivery, analytics, customer support, and payment processing. These providers act as our data processors and may only use your data to provide services to us.
4.3 Legal Requirements
We may disclose your data if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of AIWA, our members, or the public.
4.4 Business Transfers
In the event of a merger, acquisition, or asset sale, your personal data may be transferred as part of the transaction. We will notify you and give you the opportunity to exercise your rights before any such transfer occurs.
5. Data Retention
We retain your personal data for as long as your account is active, plus a reasonable period thereafter to comply with legal obligations and resolve disputes.
7. Your Rights
Under applicable UAE data protection law and international standards, you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Correct inaccurate or incomplete data at any time via your account settings.
- Right to Erasure: Request deletion of your personal data. See Section 12 for the account deletion process.
- Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing for direct marketing purposes at any time.
- Right to Withdraw Consent: Withdraw consent for any processing activity based on consent, without affecting the lawfulness of prior processing.
To exercise any of these rights, email privacy@aiwarewards.com with your name, registered email address, and the specific right you wish to exercise. We will respond within 30 calendar days.
8. Data Security
We implement industry-standard technical and organisational measures to protect your personal data, including:
- TLS/SSL encryption for all data in transit
- AES-256 encryption for data at rest
- Multi-factor authentication for account access
- Regular penetration testing and security audits
- Role-based access controls limiting staff access to personal data
- Incident response procedures with 72-hour breach notification capability
While we take every reasonable precaution, no system is completely secure. If you suspect unauthorised access to your account, please contact us immediately at security@aiwarewards.com.
9. Children's Privacy
AIWA Rewards is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a child under 18 has provided personal information, we will promptly delete it. If you believe a child has registered an account, please contact us at privacy@aiwarewards.com.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by:
- Sending an email to your registered address
- Displaying a prominent notice on our website and app
- Updating the "Last updated" date at the top of this page
Continued use of AIWA Rewards after the effective date of any update constitutes acceptance of the revised policy.
11. Contact Us
For any questions, concerns, or rights requests related to this Privacy Policy, please contact our Data Protection team:
12. Delete My Account
What happens when you delete your account
- All reward points are permanently forfeited and cannot be recovered.
- Your tier status (Silver, Gold, or Platinum) and associated perks are cancelled immediately.
- Pending reward redemptions in transit may be cancelled. Contact support before deleting if you have an active redemption.
- Your personal data will be deleted within 30 days, except where we are legally required to retain certain transaction records (see Section 5).
- You will be unsubscribed from all AIWA Rewards marketing communications.
- You will lose access to member-only pricing, early access, and exclusive events.
Before you delete
Consider these alternatives if you have a specific concern:
Stop marketing emails without losing your points
Suspend activity while keeping your points safe
We may be able to resolve your concern another way
How to delete your account
To request account deletion, use one of the methods below. We will confirm receipt within 48 hours and complete the deletion within 30 calendar days.
Sign in to your account, go to Account Settings → Privacy → Delete Account, and follow the confirmation steps.
Send a deletion request from your registered email address to privacy@aiwarewards.com with subject line: "Account Deletion Request — [your full name]".
Write to: Data Protection Officer, AIWA Group LLC, Dubai, UAE. Include your full name, registered email, and a signed request.
Request Account Deletion
Fill in the form below to submit a deletion request. We will send a confirmation email before proceeding.