Privacy policy

Modest Educational Suppliers LLC (“MES”, “we”, “us”) runs modestedu.com. We decide how the personal information collected through the website is used, so we are responsible for it.

This policy explains what we collect, why, who we share it with, how long we keep it and your rights. It follows UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

Questions about this policy can be sent to info@modestedu.com.

We collect only what we need to supply you.

• Account: your name, email address, phone number, password and saved addresses, and a profile photo if you add one. Passwords are stored as a one-way hash, never as readable text.
• School and organisation accounts:the organisation’s name and type, your job title, phone number, emirate, address and tax registration number (TRN).
• Orders: the products you buy, delivery and billing addresses, contact details, order history and payment status.
• Payments:you enter card details on Stripe’s secure page. We do not receive or store your full card number.
• Enquiries: your name, email, phone number, organisation, message, and the products and quantities you ask about.
• Newsletter: your email address, if you subscribe.
• Cart and wishlist: the products you save.
• Security information: your IP address, browser type and sign-in times. We use these to protect accounts and stop misuse.
• Messages: what you send us by email, phone or WhatsApp.

Schools: please do not send us pupils’ personal information. We do not need it to supply products or quotes.

We share personal information only with those who help us supply you:

• Stripe, which processes card payments.
• Delivery companies, which receive your name, address and phone number to deliver your order.
• DigitalOcean, which hosts our website and database.
• Our email provider, which sends order, enquiry and account emails.
• Professional advisers, such as our accountants and auditors.
• Authorities, when the law requires us to.

Each provider may use the information only to provide its service to us. We do not sell personal information, and we do not share it for other companies’ marketing.

Our website and database are hosted on DigitalOcean servers in Frankfurt, Germany.

Stripe and our other providers may also process information outside the UAE.

We transfer personal information only where UAE law allows it, to countries or providers that protect it to a standard comparable with UAE law.

• Orders, invoices and payment records: 5 years after the end of the tax period, as UAE VAT law requires.
• Accounts: while your account is open. When you ask us to close it, we delete or anonymise its information, except records the law requires us to keep.
• Enquiries and quotes: up to 3 years after our last contact with you.
• Newsletter: until you unsubscribe.
• Security logs: up to 24 months.

We use only the cookies the website needs to work:

Your enquiry list is saved in your browser’s own storage until you send it or clear it.

We do not use analytics or advertising cookies. If we add them, we will update this policy and ask for your consent first where the law requires it.

Stripe sets its own cookies on its payment page to prevent fraud. Stripe’s privacy policy applies to them.

If you block cookies in your browser, signing in and the cart will not work.

Under UAE data protection law you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that is wrong or incomplete;
• delete your information, unless the law requires us to keep it;
• restrict or stop using your information;
• send your information to you or another provider in a usable format;
• stop sending you marketing, at any time.

You can update your name, phone number and addresses yourself in your account.

For anything else, email info@modestedu.com. We may ask you to confirm your identity first. We reply within 30 days.

If you are not satisfied with our answer, you can complain to the UAE Data Office.

We send our newsletter only to people who subscribe. Buying from us or sending an enquiry does not subscribe you.

To unsubscribe, email info@modestedu.com and we remove you from the list.

We still send emails you need about your account, orders and enquiries, even if you unsubscribe.

The website is for parents, teachers, schools and other adult buyers. You must be at least 18 to create an account or buy.

We do not knowingly collect personal information from children.

If you think a child has given us personal information, contact us and we will delete it.

The website uses HTTPS encryption.

Passwords are stored as one-way hashes.

Only staff who need personal information can see it, and staff access is logged.

Card payments are handled by Stripe, which is certified to PCI DSS Level 1, the highest level for payment security.

No system is completely secure. If a breach puts your information at risk, we will tell you and the UAE Data Office as the law requires.

We may update this policy. The date at the top shows when it last changed. If we make an important change, we will tell account holders by email or with a notice on the website.

• Email: info@modestedu.com
• Phone: +971 4 227 1132
• Office: Office #1301, Mai Tower, Amman Street, Al Nahda 1, P.O. Box 97303, Dubai, U.A.E.