Privacy policy

Copper Wood Trading Co. L.L.C

Last updated: 7 September 2026

1. Who we are

Copper Wood Trading Co. L.L.C ("Copperwood", "we", "us") operates copperwood-x.com and sells single-origin Yemeni coffee, Royal Osaimi Sidr honey and Ceylon cinnamon.

Registered office: Office 279-201, Leader Real Estate LLC, Deira - Al Souq Al Kabeer, Dubai, United Arab Emirates

Trade licence number: 1133021

Contact for privacy matters: info@copperwood-x.com

We are the data controller for personal data collected through this website.

2. Scope

This policy explains how we collect, use, share and protect personal data. It applies to this website and to any orders, enquiries or accounts created through it. It is issued having regard to UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and, where our processing falls within its scope, the EU General Data Protection Regulation.

3. What we collect

You give us directly:

Name, email address, telephone number
Billing address and delivery address
Account credentials, if you register an account
Order history and communications with us
Business details submitted through our B2B and wholesale enquiry form

Collected automatically:

IP address, browser type, device type, operating system
Pages visited, referring URL, session duration
Cookie and similar identifiers

We do not collect or store your full payment card details. Card payments are processed by Stripe, which receives your card data directly. We receive only a transaction reference and the last four digits of the card.

4. Why we use it, and our lawful basis

Purpose	Basis
Processing and delivering your order	Performance of a contract
Payment processing and fraud prevention	Contract and legitimate interests
Customer service and responding to enquiries	Contract and legitimate interests
Account management	Contract
Marketing emails and updates	Consent, withdrawable at any time
Site analytics and improvement	Legitimate interests, or consent where required
Tax, customs, accounting and regulatory records	Legal obligation

5. Who we share it with

We share personal data only as necessary, with:

Shopify Inc., our ecommerce platform and hosting provider
Stripe, our payment processor
Shipping and logistics providers, to fulfil delivery, including customs authorities where required for international shipments
Analytics and email service providers, acting on our instructions
Professional advisers, auditors and regulators, where legally required

We do not sell personal data. We do not share it with third parties for their own marketing.

6. International transfers

We operate across the UAE, Yemen, Switzerland and the United States, and our service providers operate globally. Where personal data is transferred outside the UAE, we take steps to ensure an adequate level of protection, including contractual safeguards with our processors.

7. How long we keep it

Order and transaction records: retained as required by UAE tax and commercial law, currently 5 years
Account data: for as long as your account is active, plus 12 months
Marketing contact data: until you unsubscribe, plus a suppression record so we do not contact you again
Website analytics data: 26 months

8. Your rights

Subject to applicable law, you may:

Request access to the personal data we hold about you
Request correction of inaccurate or incomplete data
Request deletion of your data
Object to or request restriction of certain processing
Request a portable copy of data you provided to us
Withdraw consent at any time, without affecting processing already carried out
Unsubscribe from marketing using the link in any marketing email

To exercise any of these, contact info@copperwood-x.com. We will respond within 30 days. You may also request deletion through our Data Deletion page.

9. Cookies

We use cookies that are strictly necessary for the site to function, plus analytics and, where you consent, marketing cookies. You can manage cookies through your browser settings. Disabling strictly necessary cookies may prevent checkout from working.

10. Security

We use encryption in transit (TLS), access controls, and vetted processors. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children

This site is not directed at children under 18. We do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

12. Changes

We may update this policy. The current version is always posted here with the date it took effect. Material changes will be notified by email where we hold your address.

13. Contact