Privacy Policy
Last updated: March 2026
Compliant with UAE Personal Data Protection Law (PDPL) and India Digital Personal Data Protection Act (DPDP)
1. Data We Collect
We collect the following categories of personal data:
Identity Data
- Full name
- Email address
- Phone number
- Date of birth
- Profile photo (optional)
Transaction Data
- Payment information (processed securely via Juspay)
- Purchase history
- Benefit redemption history
- Booking details
Preference Data
- Interest categories
- City preferences
- Communication preferences
Usage Data
- Platform interaction logs
- Conversation history with Tanya AI
- Event attendance
2. How We Use Data
We process your personal data for the following purposes:
Service Delivery
To provide and manage your membership or pass, process bookings, and deliver benefits.
Personalization (Tanya AI)
To power our AI concierge Tanya, providing personalized recommendations, remembering your preferences, and offering proactive service.
Marketing (with consent)
To send you relevant offers, event invitations, and benefit reminders. You can opt out at any time.
Analytics
To understand how our services are used and improve the member experience.
4. Data Storage and Security
Your data is stored securely using industry-standard encryption and security measures:
- Database encryption at rest and in transit
- Regular security audits
- Access controls and authentication
- Data hosted on secure cloud infrastructure (Supabase/AWS)
5. Your Rights
UAE Users (PDPL Rights)
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data
- Objection: Object to certain processing activities
India Users (DPDP Rights)
- Access: Right to access your personal data
- Correction: Right to correction of inaccurate data
- Erasure: Right to erasure of data
- Nominate: Right to nominate someone to exercise rights on your behalf
- Grievance Redressal: Right to effective grievance redressal
To exercise your rights, contact our Data Protection Officer at dpo@stunningclub.com
7. WhatsApp Communications
Our AI concierge Tanya operates primarily via WhatsApp. By connecting your WhatsApp:
- You consent to receiving messages from Stunning Club
- Your conversation history is stored to provide personalized service
- Messages are processed by our AI system and may be reviewed for quality
You can disconnect WhatsApp at any time from your profile settings.
8. AI Processing (Tanya)
Tanya is our AI-powered concierge. Here's how AI processing works:
- Tanya uses your preferences and history to provide personalized recommendations
- Conversations are processed using large language models
- Your data helps train improvements but is anonymized when used for training
- You can request human assistance at any time during a conversation
AI processing is a core part of our service. If you do not wish to interact with AI, you may contact our human support team directly.
9. Cross-border Transfers
Your data may be transferred to and processed in countries outside your residence, including India and the UAE. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where applicable.
10. Data Retention
We retain your data for the following periods:
- Active members: Duration of membership + 3 years
- Stunning Pass holders: Pass validity + 2 years
- Transaction records: 7 years (legal requirement)
- Conversation logs: 2 years
- Marketing data: Until consent withdrawn
11. Contact Our DPO
For any privacy-related queries or to exercise your rights, contact our Data Protection Officer:
12. Policy Updates
We may update this policy from time to time. Material changes will be communicated via email or platform notification. Continued use of our services after changes constitutes acceptance of the updated policy.