Privacy Policy

This policy explains what TEREA 365 collects when you use terea365.com, why we collect it, who else can see it, and how to have it removed. It describes this website as it actually works — nothing here is boilerplate.

Last updated: 5 September 2026. We are TEREA 365, an independent retailer selling in the United Arab Emirates. For anything in this policy, write to info@terea365.com or message +971 56 165 2004.

What we collect, and when

When you place an order

The order form asks for your name, phone number, emirate and delivery address, and optionally an email address and a note for the driver. We keep the items you ordered, the total, and which payment method you chose. We need all of it to bring the order to your door and to speak to you about it afterwards.

We never see or store card numbers. Nothing is charged online: you pay the driver in cash, by card on their machine, or by bank transfer, and that transaction happens between you and the payment terminal or your bank.

When you use the chat assistant

Messages you send to the assistant are stored so we can see what customers ask and improve the answers. If you place an order through the chat, the details you give it are saved as an order in the same way as the form. Do not type payment card details into the chat; we will never ask for them there.

When you simply browse

Every page view is counted on our own server. We record the page, the referring site, your country, whether the device is a phone or a desktop, and a visitor code. That code is a one-way hash of your IP address and browser, mixed with the date, and it changes every day — it lets us count how many people visited without being able to identify or follow any of them. Your IP address itself is not stored against it.

Google Analytics also runs on the public pages (property G-5MY8K80TQB) and sets its own cookies under Google's terms. If you block it, our own counting still works and nothing on the site breaks.

What we store in your browser

• Your cart — kept in your browser's local storage so it survives a page change. It never leaves your device until you place an order.
• Your chat — kept for the current tab only, so the conversation is not lost when you move between pages.
• Where you arrived from — kept for the current tab, so an order can be credited to the right channel.
• Admin sign-in — a session cookie, set only for staff signing into the admin panel. Ordinary visitors never receive it.
• Google Analytics cookies — set by Google, not by us.

We set no advertising cookies and run no retargeting pixels.

Who else can see your data

• Cloudflare hosts the site and its database, and routes the order emails. Your data sits on their infrastructure.
• Cloudflare Workers AI processes chat messages to generate the assistant's replies.
• Google Analytics receives page-view data as described above.
• Our delivery riders receive your name, phone and address, and nothing else.

We do not sell your data, rent it, or share it with advertisers or data brokers.

How long we keep it

• Orders: kept as our record of the sale and for warranty and replacement claims.
• Chat transcripts: kept while they are useful for improving the service.
• Page-view records: kept for about a year, then deleted automatically.
• Admin sessions: expire after seven days.

Your rights

Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data you may ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Email info@terea365.com from the address on your order, or message the WhatsApp number above from the phone number you ordered with, so we can be sure it is you. We will respond within 30 days.

Deleting an order record is not always possible straight away where we are required to keep a record of a completed sale. If that applies, we will tell you.

Age

This site sells nicotine products to adults of legal smoking age in the UAE only. We do not knowingly collect data from anyone under 18. The rider checks Emirates ID before handing an order over. If you believe a minor has given us data, tell us and we will delete it.

Security

The site is served over HTTPS only. The admin panel is password-protected, its sessions are stored as one-way hashes so a stolen cookie can be revoked, and it is excluded from search engines. Order prices are always taken from our own database rather than from the browser, so an order cannot be altered in transit.

Changes

If this policy changes we will update the date at the top. Material changes to how we use order data will also be mentioned on the site.