Privacy Policy

Effective Date: 29 April 2026

1. Introduction

1.1 NuroCore Labs LLC (“NuroCore”, “we”, “us”) is the data controller in respect of personal data collected through the Platform. This Privacy Policy explains how we collect, use, store, share, and protect personal data, in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and, where applicable, the EU General Data Protection Regulation (GDPR), the UK GDPR, and similar international frameworks.

2. Data We Collect

2.1 Identification and contact data: full name, billing and shipping address, email address, telephone number, date of birth (for age verification).

2.2 Transaction data: order history, products purchased, transaction amounts, payment method (last four digits and processor reference only; NuroCore does not store full card data).

2.3 Verification data: age verification confirmation, IP address at point of acceptance of these Terms, signed Research-Use-Only Acknowledgement.

2.4 Technical data: IP address, browser type and version, device identifiers, operating system, referring URL, time zone, pages visited, session duration.

2.5 Communications data: correspondence with our customer service, including email content and metadata.

3. Legal Bases for Processing

1. Performance of a contract (to fulfil orders and provide services);
2. Compliance with legal obligations (including tax, anti-money-laundering, sanctions screening, and regulatory record-keeping);
3. Legitimate interests (fraud prevention, network and information security, business analytics, direct marketing of our own products to existing customers);
4. Consent (for non-essential cookies and electronic marketing where required).

4. How We Use Data

1. To process orders, payments, shipments, and returns;
2. To verify age, identity, and jurisdictional eligibility;
3. To detect, prevent, and investigate fraud, abuse, and unlawful use;
4. To respond to enquiries and provide customer support;
5. To send transactional and, where lawful, marketing communications;
6. To comply with legal, regulatory, customs, and tax obligations;
7. To enforce our Terms and protect our legal rights;
8. To improve the Platform, products, and customer experience.

5. Sharing of Data

5.1 We share personal data only with:

1. Payment processors and acquiring banks (to process transactions);
2. Courier and logistics providers (to deliver shipments);
3. Cloud hosting, email, and analytics providers acting as data processors under written agreement;
4. Professional advisers (lawyers, accountants, auditors) under confidentiality obligations;
5. Regulatory authorities, courts, and law enforcement, where required by valid legal process;
6. Successor entities in connection with a merger, acquisition, or sale of business assets.

5.2 We do not sell personal data to third parties.

6. International Transfers

6.1 Personal data may be processed in jurisdictions outside the UAE, including jurisdictions whose data protection regimes may differ from those of the UAE. Where such transfers occur, NuroCore implements appropriate safeguards, including contractual data protection clauses with the recipient.

7. Data Retention

7.1 We retain personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy and to comply with our legal, regulatory, accounting, tax, and reporting obligations. Indicative retention periods:

• Order and transaction records: minimum seven (7) years from order date, in line with UAE tax and commercial record-keeping rules.
• Account and marketing data: until account deletion is requested or three (3) years of inactivity, whichever is sooner.
• Verification logs (age, RUO acknowledgement, IP, timestamp): minimum seven (7) years.

8. Your Rights

8.1 Subject to applicable law, you have the right to:

1. Access the personal data we hold about you;
2. Request rectification of inaccurate data;
3. Request erasure where processing is no longer necessary, subject to our overriding legal retention obligations;
4. Object to processing based on legitimate interests;
5. Withdraw consent where processing is consent-based;
6. Request restriction of processing in defined circumstances;
7. Request data portability;
8. Lodge a complaint with the UAE Data Office or your local data protection authority.

8.2 To exercise any right, contact [email protected]. We may require identity verification before responding.

9. Security

9.1 NuroCore implements technical and organisational measures designed to protect personal data, including encryption in transit (TLS), restricted access controls, and vendor due diligence. No system is impenetrable; you acknowledge that transmission of data over the internet carries inherent risk.

10. Cookies

10.1 The Platform uses cookies and similar technologies to operate the site, remember preferences, analyse traffic, and (where consent is given) deliver targeted communications. You may manage cookie preferences via your browser or our cookie banner where displayed.

11. Children

11.1 The Platform is not directed at, and we do not knowingly collect personal data from, anyone under twenty-one (21) years of age. If we become aware that we have collected such data, we will delete it promptly.

12. Changes to This Policy

12.1 We may update this Privacy Policy from time to time. The current version will always be posted on the Platform with an updated effective date.

13. Contact

NuroCore Labs LLC
Dubai, United Arab Emirates
Email: [email protected]

NuroCore is a registered trademark. All rights reserved.