Privacy notice

Who is responsible

SAKHAR ALRUKHAM RESTAURANT L.L.C operates PROTEINSTONE and is responsible for the personal information used to provide this service. Our business address is Flamingo Z2 Tower - EK Kitchen Center - Shop 4 - Al Barsa South - Dubai - UAE. Contact us through WhatsApp at +971 50 682 0992 for privacy requests.

Information we use

We use account and contact information, authentication records, delivery addresses, meal preferences and information you submit about dietary needs, bookings, subscriptions, credit balances, payment references, refunds and support messages. If applicable, we record the referring partner, location and referral code. We also process technical records needed to secure and operate the website.

Stripe processes card details on its payment interface. PROTEINSTONE does not ask you to send card numbers or security codes through chat, email or support forms. Do not send identity documents or medical records unless a specific, necessary and secure process has been agreed.

Why we use it

We use necessary information to provide and manage your account, fulfill orders, collect agreed payments, issue refunds, prevent fraud and meet legal obligations. Optional referral-link statistics and browser-based referral persistence use your privacy choice. Marketing communications require the applicable consent and provide a way to opt out. Withdrawing optional consent does not prevent ordinary sign-in and checkout.

Browser storage and referral choices

Necessary browser storage supports sign-in, security and checkout. If you allow referral tracking, the website stores a random browser identifier and referral information to measure qualifying link visits and remember the first referral. These identifiers are pseudonymous, not a guarantee of anonymity. Choose or change your preference using Privacy choices on the website. Declining clears the optional identifiers on that browser; previously established account attribution and financial records may still be retained where needed for the contract, fraud prevention or legal obligations.

Service providers and external links

We use Supabase for account and database services, Stripe for payments, Resend for service emails and hosting providers to operate the website. Relevant order information is shared with people and providers responsible for preparing and fulfilling your order. Access is limited to what is necessary. Partnership reporting is used for verified attribution and settlement, not to disclose unnecessary customer contact or payment details to trainers.

Providers may process information outside the UAE. Applicable transfer requirements and contractual safeguards must be observed. Clicking a WhatsApp link opens an external service governed by its own privacy terms; the contact button itself does not embed a WhatsApp tracking widget.

Retention, security and your rights

We retain information for the purposes described here and for applicable accounting, legal, dispute and security requirements. We restrict access and use technical safeguards, but no online service can promise absolute security.

Subject to applicable UAE law and its exceptions, you may request information about processing, access or correction of your information, deletion or restriction, and withdraw consent where processing depends on it. We may need proportionate verification of your identity before acting. Some records must be retained despite account closure; we will explain relevant restrictions when responding. Contact us to raise a concern or request assistance, and you may also contact the competent authority.

Updates

We update this notice when our processing changes and will communicate material changes where required. The date above identifies this version.