Privacy Policy

1. Who We Are

WHAT IF Wardrobe is a wardrobe rental service operated by WHAT IF Creative Studio FZ LLC, registered in the Fujairah Creative City Free Zone, United Arab Emirates. Our platform provides costume and garment rental services for film productions, commercials, and wardrobe styling professionals.

For any data-related inquiries, contact us at: [email protected]

2. Data We Collect

We collect the following personal data when you use our platform:

• Account information: Name, email address, and profile picture (when signing in via Google)
• Authentication data: Encrypted password (if using email/password sign-in)
• Order data: Rental dates, selected items, order history
• Wishlist data: Items you save for later
• Usage data: Pages visited, interactions (via Google Analytics)

3. How We Use Your Data

• To create and manage your account
• To process and track your rental orders
• To maintain your wishlist preferences
• To communicate with you about your orders
• To improve our platform and user experience (analytics)

We do not sell, share, or transfer your personal data to third parties for marketing purposes.

4. Legal Basis for Processing

We process your data based on:

• Consent: When you create an account or accept cookies
• Contractual necessity: To fulfil rental orders you place
• Legitimate interest: To improve our services and prevent fraud

5. Data Storage & Security

Your data is stored on a secure, privately-hosted server located in the UAE. We implement technical safeguards including encrypted passwords (bcrypt), HTTPS encryption (via Cloudflare), role-based access controls, and regular database backups.

We retain your data for as long as your account is active. You may request deletion at any time.

6. Cookies & Analytics

We use Google Analytics to understand how visitors use our site. Google Analytics uses cookies to collect anonymised usage data (pages visited, session duration, device type). No personally identifiable information is shared with Google for advertising purposes.

You can opt out of analytics tracking by declining cookies when prompted, or by using your browser's cookie settings.

7. Third-Party Services

• Google OAuth: If you sign in with Google, we receive your name, email, and profile picture from Google. We do not access any other Google account data.
• Cloudflare: Our site is served through Cloudflare for security and performance. Cloudflare may process IP addresses and request metadata.
• Google Analytics: Anonymised usage analytics as described above.

8. Your Rights

Under the UAE Personal Data Protection Law (PDPL), you have the right to:

• Access your personal data and obtain a copy
• Correct inaccurate or incomplete data
• Delete your data (right to erasure)
• Port your data in a machine-readable format
• Object to processing for direct marketing
• Withdraw consent at any time

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

9. Data Breach Notification

In the event of a data breach that poses a significant risk to your rights, we will notify the UAE Data Office and affected individuals as required by the PDPL.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the platform after changes constitutes acceptance.