Privacy policy


Last updated: 2025

This Privacy Policy applies to all users of mysaga.co, our mobile application(s), and any
other digital platforms owned and operated by SAGA STUDIO LLC FZ.

Compliant with: UAE Federal Decree-Law No. 45/2021 on Personal Data Protection (PDPL)
and UAE Federal Decree-Law No. 26/2025 on Child Digital Safety (in force 1 January 2026).

By using mysaga.co, you confirm that you have read, understood, and agreed to this Privacy Policy.

1. Information We Collect
SAGA STUDIO LLC FZ collects personal information only when it is necessary to provide our products, services, and SAGA Club experiences. We collect information in the following ways:

1.1 Information you provide directly

  • Full name
  • Email address
  • Phone number (including WhatsApp number where provided)
  • Shipping and billing address
  • Payment information (processed securely by our third-party payment provider — SAGA STUDIO LLC FZ does not store card details)
  • Username and password for your SAGA STUDIO LLC FZ account
  • Order history and purchase preferences
  • Your child’s name, age, and any relevant medical or allergy information provided for SAGA Club registration — collected from parents and guardians only
  • Communications you send to us via email, WhatsApp, or our website contact form

1.2 Information collected automatically
When you visit mysaga.co, our servers and analytics tools automatically collect certain technical information including:

  • IP address and approximate location
  • Browser type and version
  • Device type and operating system
  • Pages visited, time spent, and navigation patterns
  • Referring website or source
  • Cookie data — see Section 10 for full details

1.3 Information from third parties
We may receive limited information from third-party platforms where you interact with SAGA STUDIO LLC FZ, including social media platforms (if you tag or message us) and payment processors (confirmation of payment only, not card details).

2. Why We Collect Your Personal Information
We collect and use your personal information only for lawful, specific, and clearly defined purposes. The legal bases for processing under UAE PDPL are: your consent, the performance of a contract (your order or booking), compliance with a legal obligation, or our legitimate business interests.

  • Processing and fulfilling product orders
  • Confirming and managing SAGA Club session bookings
  • Communicating with you about your order or booking
  • Providing customer service and responding to enquiries
  • Sending transactional messages via email and WhatsApp
  • Sending marketing communications where you have given explicit opt-in consent
  • Ensuring the safety of your child during SAGA Club sessions (medical and allergy information only)
  • Complying with UAE legal and regulatory requirements
  • Improving our website, products, and services through analytics
  • Fraud prevention and security

SAGA STUDIO LLC FZ does not use personal data for automated decision-making or profiling. We do not use any data relating to children for targeted advertising or commercial profiling under any circumstances.

3. Personal Information You Provide to Us
We receive and store any information you knowingly provide to us through our website, email, WhatsApp, or in person at a SAGA Club session or event. This includes all categories of information listed in Section 1.1 above.

You are not required to provide personal information to browse mysaga.co. However, certain information is required to complete a purchase, make a SAGA Club booking, or receive customer service. Where information is required, this will be clearly indicated at the point of collection.

4. Consent and Legal Basis for Processing
All personal information we collect from you requires a lawful basis. For most data collected through mysaga.co, the legal basis is one of the following:

  •  — where you have actively opted in, for example to receive marketing emails or WhatsApp communicationsConsent
  •  — to fulfil your order or SAGA Club bookingContractual necessity
  •  — to comply with UAE law, including tax, consumer protection, and child safety requirementsLegal obligation
  •  — for fraud prevention, website analytics, and improving our services, where these interests do not override your privacy rightsLegitimate interests

You may withdraw consent at any time by contacting care@mysaga.co. Withdrawing consent will not affect the lawfulness of any processing carried out prior to withdrawal.

5. Retention of Your Personal Information
We retain personal information only for as long as necessary for the purpose for which it was collected, or as required by UAE law. Our retention periods are as follows:

 

Data Type

Retention Period

Order and transaction records

5 years from date of purchase (UAE tax and commercial law)

SAGA Club booking records

2 years from date of the session

Children’s medical and allergy information

Deleted within 30 days of the last session attended

Marketing consent records

Until consent withdrawn, plus 1 year thereafter

Customer service communications

2 years from date of resolution

Website analytics data

13 months on a rolling basis

 

When retention periods expire, personal information is securely deleted or anonymised. You may request early deletion of your data at any time — see Section 9 for your rights.

6. How We Manage and Protect Your Personal Information
SAGA STUDIO LLC FZ takes the security of your personal information seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

  • SSL/TLS encryption for all data transmitted through mysaga.co
  • Secure payment processing through a PCI-DSS compliant third-party provider— SAGA STUDIO LLC FZ does not store, process, or transmit card details on our own servers
  • Access controls limiting staff access to personal data on a need-to-know basis
  • Regular review of our data security practices

While we use industry-standard practices to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant UAE authorities promptly in accordance with our legal obligations.

7. How We Share Your Personal Information
SAGA STUDIO LLC FZ does not sell, rent, or trade your personal information to any third party. We share personal information only in the following limited circumstances:

7.1 Service providers
We share necessary information with trusted third-party service providers who assist us in operating our business. These include:

  • Payment processors — to complete your transaction securely
  • Shipping and logistics providers — to deliver your order
  • Email service providers — to send order confirmations and communications
  • Website hosting and e-commerce platform (Shopify) — to operate mysaga.co
  • Analytics providers — for anonymised website usage data

All third-party service providers are contractually required to process your personal information only as instructed by SAGA STUDIO LLC FZ, to implement adequate security measures, and not to use your data for their own purposes.

7.2 Legal disclosure
We may disclose personal information to government authorities, law enforcement, or regulatory bodies where required by UAE law, a court order, or formal legal process. We will notify you of any such disclosure where we are legally permitted to do so.

7.3 Business transfers
In the event of a merger, acquisition, or sale of SAGA STUDIO LLC FZ or its assets, your personal information may be transferred to the acquiring entity. You will be notified of any such transfer and your rights will be maintained.

8. Child Data Protection and Parental Consent

This section is compliant with UAE Federal Decree-Law No. 26/2025 on Child Digital Safety (in force 1 January 2026) and UAE Federal Decree-Law No. 45/2021 (PDPL). SAGA STUDIO LLC FZ takes the protection of children’s personal data with the utmost seriousness.

8.1 Data collection relating to children
SAGA STUDIO LLC FZ does not knowingly collect personal data directly from children under the age of 13. Where personal data relating to a child is collected — for example, a child’s name and age for SAGA Club registration — it is collected from the parent or guardian only, with their explicit and documented consent.

8.2 Parental consent
Before collecting any personal data relating to a child, SAGA STUDIO LLC FZ will obtain explicit, documented consent from the parent or guardian. This consent clearly explains: what data is being collected, why it is being collected, how it will be stored, who it will be shared with, and how long it will be kept. Consent may be withdrawn at any time by contacting care@mysaga.co.

8.3 How we use data relating to children
Personal data relating to children is used exclusively for the purposes for which it was collected — primarily SAGA Club registration, health and safety, and safeguarding. SAGA STUDIO LLC FZ does not use any data relating to children for targeted advertising, commercial profiling, or any purpose beyond the direct delivery of our services.

8.4 Default privacy settings
Our website operates with high-privacy default settings. Parents and guardians are not automatically enrolled into marketing communications at the point of booking or purchase. Separate, explicit opt-in consent is required before any marketing communications are sent.

8.5 Photography and filming of children
No photographs or videos of identifiable children will be taken, used, or published without the prior written consent of their parent or guardian. A separate Photography and Filming Consent Form is provided to every parent or guardian prior to their child’s first SAGA Club session. Parents may opt their child out of photography while still permitting participation. Consent may be withdrawn at any time by emailing care@mysaga.co.

9. Your Privacy Rights
Under UAE Federal Decree-Law No. 45/2021 on Personal Data Protection (PDPL), you have the following rights in relation to your personal data:

  •  — you may request a copy of the personal data we hold about youRight of access
  •  — you may request that inaccurate or incomplete data is correctedRight to rectification
  •  — you may request that your personal data is deleted, subject to our legal retention obligationsRight to erasure
  •  — where processing is based on consent, you may withdraw it at any timeRight to withdraw consent
  •  — you may object to processing based on legitimate interestsRight to object
  •  — you may request that we limit how we use your data in certain circumstancesRight to restrict processing

To exercise any of these rights, please email care@mysaga.co with the subject line: Privacy Rights Request. We will acknowledge your request within 2 business days and respond fully within 15 business days. We may need to verify your identity before processing your request.

10. Cookies
mysaga.co uses cookies and similar tracking technologies to improve your experience on our website. Cookies are small text files stored on your device when you visit a website.

Types of cookies we use

Cookie Type

Purpose

Can be disabled?

Essential cookies

Required for the website to function, including your shopping cart and login session

No

Analytics cookies

Help us understand how visitors use our site so we can improve it. All data is anonymised

Yes

Marketing cookies

Used to show you relevant advertising on other platforms. Only active with your consent

Yes

Preference cookies

Remember your settings and preferences for future visits

Yes

When you first visit mysaga.co, you will be presented with a cookie consent banner. You may accept all cookies, reject non-essential cookies, or manage your preferences individually. You may update your cookie preferences at any time using the cookie settings tool in the website footer.

11. Links to Third-Party Sites
mysaga.co may contain links to third-party websites, including social media platforms and partner organisations. SAGA STUDIO LLC FZ is not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of every website you visit before submitting personal information. Clicking a third-party link does not mean SAGA STUDIO LLC FZ endorses that site or its content.

12. User-Generated Content
Any personal information or image content you voluntarily share publicly — including product reviews, comments, or posts on SAGA STUDIO LLC FZ’s social media pages — becomes publicly visible and may be read, collected, or used by other users. SAGA STUDIO LLC FZ is not responsible for personal information you choose to disclose publicly.

Where you tag SAGA STUDIO LLC FZ in social media content featuring our products or SAGA Club sessions, we may seek permission to reshare that content. We will always credit the original creator. We will never reshare content featuring an identifiable child without the explicit written consent of the child’s parent or guardian.

13. WhatsApp Communications
SAGA STUDIO LLC FZ uses WhatsApp as a primary communication channel for transactional messages including order confirmations, dispatch notifications, and SAGA Club booking reminders. By providing a mobile number at the time of purchase or booking, you consent to receiving these transactional messages.

SAGA STUDIO LLC FZ will not send unsolicited marketing messages via WhatsApp without your separate, explicit opt-in consent. You may opt out of WhatsApp communications at any time by emailing care@mysaga.co or by replying STOP to any SAGA STUDIO LLC FZ WhatsApp message. Your mobile number is never shared with third parties for marketing purposes.

14. Marketing Communications
SAGA STUDIO LLC FZ will only send marketing communications — by email or WhatsApp — where you have given explicit opt-in consent. You may opt out of marketing communications at any time by:

  • Clicking the unsubscribe link in any SAGA STUDIO LLC FZ marketing email
  • Replying STOP to any SAGA STUDIO LLC FZ WhatsApp marketing message
  • Emailing care@mysaga.co with the subject line: Unsubscribe

Opting out of marketing communications does not affect transactional messages related to your orders or SAGA Club bookings.

15. Children Under 13
mysaga.co is not directed at children under the age of 13 as independent users. Children under 13 are not permitted to submit personal information to our site independently. SAGA STUDIO LLC FZ does not knowingly collect personal information directly from children under 13 without verified parental consent.

If we discover that we have inadvertently collected personal information from a child under 13 without parental consent, we will delete that information promptly. If you believe we may hold information about a child under 13 without consent, please contact care@mysaga.co immediately.

16. Changes to This Privacy Policy
SAGA STUDIO LLC FZ reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify you by email or by a prominent notice on mysaga.co before the changes take effect. The effective date at the top of this policy will be updated accordingly.

Your continued use of mysaga.co after the effective date of any updated Privacy Policy constitutes your acceptance of the updated terms. We recommend reviewing this policy periodically.

17. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of the United Arab Emirates, including UAE Federal Decree-Law No. 45/2021 on Personal Data Protection and UAE Federal Decree-Law No. 26/2025 on Child Digital Safety. Any disputes arising in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Dubai, United Arab Emirates.

18. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or how SAGA STUDIO LLC FZ handles your personal information, please contact us:

SAGA STUDIO LLC FZ — Privacy Team

Email: care@mysaga.co
Subject line for privacy requests: Privacy — [Your Name]
Response time: within 2 business days
Operating hours: Sunday to Thursday, 9 AM to 6 PM UAE time
Website: mysaga.co
Location: Dubai, United Arab Emirates

For data deletion requests: Privacy Rights Request — [Your Name]
For parental consent withdrawal: Consent Withdrawal — [Child’s Name]
For photography opt-out: Photography Opt-Out — [Child’s Name]