Privacy Policy

SLO Space Restaurant L.L.C.
License No. 1555370 | office@slo.space | 22nd St – Al Quoz Industrial Area 2 – Dubai, UAE

Last updated: August 30, 2026

1. Who we are

This Privacy Policy (the “Policy”) explains how SLO Space Restaurant L.L.C., license number 1555370, registered under the laws of Dubai, UAE, with its registered address at 22nd St – Al Quoz Industrial Area 2 – Dubai, UAE (the “Company”, “we”, “us”, or “our”) collects, uses, processes, stores, and protects personal data.

This Policy applies to personal data processed in connection with our Website, orders, customer communications, and other services and interactions described in this Policy.

We process personal data in accordance with applicable data protection legislation of the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 Regarding the Protection of Personal Data (the “PDPL”), to the extent applicable to our processing activities.

This Policy should be read together with our Cookie Policy, which explains how we use cookies and similar technologies, and with our Data Protection Notice, which sets out in full the purposes and legal bases of our processing, the recipients of personal data, our transfers outside the UAE, our retention periods and your rights under the PDPL. Where this Policy and the Data Protection Notice differ on a data protection matter, the Data Protection Notice prevails.

2. Scope of this Policy

This Policy applies to:

• visitors browsing the Website;
• users placing orders;
• individuals contacting us through any channel;
• individuals whose personal data is provided to us in connection with an order or service;
• representatives and contact persons of corporate customers;
• individuals interacting with us in connection with corporate orders, catering or events;
• participants in our loyalty or customer rewards programmes.

Depending on the purpose of processing, we rely on the applicable legal basis described in Section 5.

3. Personal data we collect

3.1 Information you provide to us

• First name and last name;
• Phone number;
• Delivery address;
• Email address;
• Payment information;
• Order details;
• Communications you send us (e.g. customer support enquiries).

3.2 Information collected automatically

• IP address;
• Device type and browser type;
• Pages visited and navigation behaviour;
• Date and time of page visits.

3.3 Cookies and similar technologies

We use cookies and similar technologies for analytics, Website functionality, and to enhance your user experience. You can manage your cookie preferences at any time – see Section 17 for details.

3.4 Information from third parties

We may receive personal data from service providers and platform partners (including Shopify, which provides the technical infrastructure for our Website) where necessary to deliver our services to you.

4. Purposes of processing

We process personal data for the following purposes:

• processing and fulfilling orders;
• arranging delivery;
• communicating with you regarding your orders, bookings or requests;
• providing customer support;
• processing reservations and bookings;
• managing corporate orders, catering and events;
• maintaining and administering customer accounts, where applicable;
• processing payments through payment service providers;
• maintaining the security and integrity of our Website and systems;
• preventing fraud and unauthorised activity;
• improving our Website, products and services;
• analysing Website performance and usage;
• sending marketing communications where the applicable legal requirements are satisfied;
• complying with legal, tax, accounting and regulatory obligations;
• establishing, exercising or defending legal claims; and
• responding to requests from competent authorities where legally required.

5. Legal bases for processing

We process personal data on one or more of the following legal bases, depending on the specific processing activity:

We do not rely on consent where another lawful basis is applicable and sufficient.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. Types of processing

6.1 We may carry out the following operations on your personal data:

• Collection – obtaining data directly from you or through your use of the Website;
• Recording and organisation – structuring and storing data in our systems;
• Storage - retaining data for the duration necessary to fulfil the purposes set out in this Policy;
• Use - processing data to provide our services, including order fulfilment, delivery, and customer support;
• Transmission - sharing data with authorised service providers;
• Restriction - limiting processing where required by law or upon your request;
• Deletion or anonymisation - removing or irreversibly anonymising data when it is no longer required.

6.2 All processing is carried out in accordance with applicable data protection laws.

7. Data sharing

7.1 Categories of recipients

We may share personal data with the following categories of recipients where necessary and permitted by applicable law:

• Shopify and related technology providers - Website and e-commerce infrastructure;
• payment service providers - payment processing and transaction verification;
• delivery and logistics providers - delivery and fulfilment of orders;
• IT, hosting and security providers - technical infrastructure and system security;
• analytics providers - Website performance and analytics;
• marketing service providers - where processing is permitted and the required consent has been obtained;
• professional advisers - legal, financial, tax, compliance and other professional advisers where necessary;
• competent authorities - where disclosure is required by applicable law, regulation, court order or other lawful request.

7.2 Service providers and processors

Where a third party processes personal data on our behalf, we require appropriate contractual safeguards governing the processing of personal data.

We share personal data only where necessary for the purposes described in this Policy and where permitted by applicable law.

8. International transfers

Personal data may be transferred outside the UAE. Where such transfers occur, we implement appropriate safeguards to ensure your data is protected in accordance with applicable data protection law. The grounds on which we may transfer personal data outside the UAE, and the safeguards we apply to those transfers, are set out in full in Section 5 of our Data Protection Notice.

9. Data retention

We retain your personal data only for as long as necessary to:

• Fulfil the purposes described in this Policy;
• Comply with legal and regulatory requirements;
• Resolve disputes and enforce agreements.

When data is no longer required, we delete or anonymise it securely.

Our retention periods for each category of records are set out in the retention table in Section 6 of our Data Protection Notice.

10. Your rights

Subject to applicable law and any applicable conditions or limitations, you may have the right to:

• Access - request access to personal data held about you;
• Correction - request correction of inaccurate or incomplete personal data;
• Deletion - request deletion of personal data where applicable;
• Restriction - request restriction of processing in circumstances permitted by law;
• Objection - object to certain processing, including processing based on legitimate interests where applicable;
• Portability - request your personal data in a structured and machine-readable format where applicable;
• Withdraw consent - withdraw consent where processing is based on consent;
• Complain - raise a complaint with us and, where applicable, with the UAE Data Office through the channels it designates.

The exercise of these rights is subject to applicable legal requirements and limitations.

11. Marketing

We may send you marketing communications about our products, services, events and initiatives where we have obtained the consent required by applicable law or where another lawful basis permits such communications.

Where consent is required, marketing communications will be sent only after the relevant affirmative consent has been obtained.

You may withdraw your consent or opt out of marketing communications at any time by:

• using the unsubscribe mechanism included in the relevant communication; or
• contacting us at office@slo.space.

If you opt out of marketing communications, we may continue to send you non-promotional communications that are necessary in connection with your orders, transactions, account or other services.

12. Data security

We implement appropriate secure technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. While we take all reasonable steps to safeguard your data, transmission of information over the internet is never fully secure and we cannot guarantee absolute security.

13. Third-party links

The Website may contain links to third-party websites or services.

We are not responsible for the privacy practices, security or content of third-party websites or services. We encourage you to review the privacy policies applicable to those third-party services before providing personal data.

14. Children

The Website and our services are not intentionally directed to individuals under the age of 18.

We do not knowingly collect personal data from minors except where such processing is permitted by applicable law and any required consent or authorisation has been obtained.

If we become aware that personal data relating to a minor has been collected in circumstances where it should not have been, we will take reasonable steps to delete or otherwise appropriately handle such data in accordance with applicable law.

If you believe that a minor has provided us with personal data inappropriately, please contact us at office@slo.space.

15. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or applicable law. The amended Policy will be effective immediately upon posting on the Website. We encourage you to review this Policy periodically.

16. Contact details

For privacy-related enquiries, requests concerning your personal data, or complaints, please contact us:

SLO Space Restaurant L.L.C.
License No. 1555370
22nd St – Al Quoz Industrial Area 2 – Dubai, UAE
Email: office@slo.space
Phone: +971 56 878 1188

Please use the above contact details for requests relating to access, correction, deletion, restriction, objection, portability or withdrawal of consent.

17. Cookie consent and similar technologies

We use cookies and similar technologies to collect information for analytics, to improve our content, and to tailor your experience on the Website. You can accept, reject, or customise your cookie preferences at any time. Please note that disabling all cookies may affect the proper functioning of the Website. Full details of the cookies and similar technologies we use, the categories they fall into, how long they remain on your device and how to give or withdraw your consent are set out in our Cookie Policy.

SLO Space Restaurant L.L.C. | License No. 1555370