Legal
Privacy Policy
1. Who We Are
Rove Setups is a brand operated by PrimeVision Group L.L.C-FZ, a limited liability company in the Meydan Free Zone, Dubai ("Rove", "we", "us", "our"). We sell portable monitor setups through our online store at rovesetups.com (the "Store" or "Services").
Registered office:
PrimeVision Group L.L.C-FZ
Meydan Grandstand, 6th floor
Meydan Road, Nad Al Sheba
Dubai
United Arab Emirates
Legal form: Limited Liability Company, Free Zone (Meydan Free Zone)
Licence number: 2424418.01
Formation number: 2424418
Manager: Ruben Calabrese Pereira
Privacy contact: support@rovesetups.com
For the purposes of the EU and UK General Data Protection Regulation, PrimeVision Group L.L.C-FZ is the controller of your personal data.
2. What This Policy Covers
This policy explains what personal information we collect when you browse the Store, create an account, place an order, or subscribe to our emails; how we use it; who we share it with; and what rights you have.
It applies to rovesetups.com and all language versions of the Store. It does not apply to third-party websites we link to.
3. Information We Collect
3.1 Information you give us
Account information. If you create an account, we collect your email address and a password. Authentication is handled by Supabase; your password is stored as a salted hash and is never visible to us in plain text. You may also add a name, shipping addresses and order preferences to your account.
Order information. When you place an order, we collect your name, shipping address, billing address, email address, phone number (where you provide one for carrier notifications), the items ordered, and the order value.
Payment information. Card and wallet payments are processed by Stripe. Your full card number, CVC and expiry date are entered directly into Stripe's payment fields and are never transmitted to or stored on our servers. We receive from Stripe only a payment token, the last four digits of the card, the card brand, the billing country and postcode, and the outcome of the transaction. The same applies to Apple Pay and Google Pay.
Communications. When you email support@rovesetups.com or use a contact form, we collect your name, email address, the content of your message and any attachments, together with our replies.
Marketing subscriptions. If you subscribe to our newsletter, we collect your email address, the date and time of your consent, and the page you subscribed from. Before we add you to the list we ask Clearout to check that the address can receive mail.
Returns and warranty claims. If you request a return or make a warranty claim, we collect your order number, the reason for the return, any photographs or serial numbers you send us, and, where a refund is due, the details needed to process it.
3.2 Information collected automatically
When you visit the Store, our servers and our analytics tools record:
- IP address (truncated for analytics purposes, see section 3.3)
- Browser type, version and language
- Operating system and device type
- Screen resolution
- Pages viewed, time on page, referring URL, and exit page
- Date and time of access
- Approximate location derived from IP address (country and city level)
- Products viewed, added to cart, and abandoned at checkout
Some of this data is collected through cookies and similar technologies. See our Cookie Policy for the full list, including cookie names and durations.
3.3 Information from third parties
Stripe provides us with transaction outcomes, fraud risk scores, chargeback notifications and dispute correspondence.
Google Analytics 4 provides us with aggregated statistics about Store usage. IP anonymisation is enabled, meaning Google truncates IP addresses before storing them. Analytics cookies are only set after you consent through our cookie banner.
Shipping carriers and fulfilment partners provide us with tracking events, delivery confirmations and, where relevant, customs status.
4. How We Use Your Information
| Purpose | Data used | Legal basis (EEA/UK) |
|---|---|---|
| Processing and fulfilling your order | Order, contact, shipping, payment data | Performance of a contract |
| Creating and managing your account | Account credentials, profile data | Performance of a contract |
| Sending transactional emails (order confirmation, shipping, returns) | Contact and order data | Performance of a contract |
| Handling returns, refunds and warranty claims | Order, contact, return data | Performance of a contract / legal obligation |
| Preventing fraud and chargebacks | Payment, device, IP, order data | Legitimate interests (protecting against loss) |
| Complying with tax, customs and accounting law | Order and transaction records | Legal obligation |
| Understanding how the Store is used and improving it | Analytics data | Consent |
| Sending marketing emails about products and offers | Email address, purchase history | Consent |
| Responding to your enquiries | Contact data, message content | Legitimate interests / performance of a contract |
| Establishing, exercising or defending legal claims | As relevant to the claim | Legitimate interests |
We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes.
5. Automated Decision-Making
Stripe applies automated fraud screening (Stripe Radar) to every transaction. This may result in a payment being declined without a human reviewing it first. This processing is necessary for entering into and performing our contract with you and to prevent fraud.
If your payment is declined and you believe this is wrong, email support@rovesetups.com. We will review the decision manually, explain the outcome, and where appropriate offer an alternative way to complete your purchase. If you are in the EEA or UK, you have the right to obtain human intervention, to express your point of view, and to contest the decision.
We do not use your personal data for profiling that produces legal effects in any other context.
6. Who We Share Your Information With
We share personal data with the following service providers, who act as our processors and may only use the data to provide services to us:
| Provider | Purpose | Data shared | Location | Privacy policy |
|---|---|---|---|---|
| Stripe, Inc. | Payment processing, fraud prevention | Name, email, billing address, payment data, device/IP data | USA, Ireland | stripe.com/privacy |
| Clearout | Email address verification on newsletter signup | Email address | USA | clearout.io/privacy |
| Supabase, Inc. | Account authentication and database hosting | Email, password hash, account and order records | USA / EU region | supabase.com/privacy |
| Vercel, Inc. | Website hosting and content delivery | IP address, request logs, user agent | USA, global edge network | vercel.com/legal/privacy-policy |
| Resend, Inc. | Transactional and marketing email delivery | Email address, name, email content, open and click events | USA | resend.com/legal/privacy-policy |
| Google LLC (Google Analytics 4 via gtag.js) | Website analytics | Truncated IP, device data, usage events, cookie identifiers | USA, EU | policies.google.com/privacy |
| Fulfilment centres and shipping carriers | Picking, packing, delivery, customs clearance | Name, shipping address, phone number, email, order contents | Varies by destination | Provided on request |
We may also disclose personal data:
- To professional advisers (accountants, auditors, lawyers) where necessary and under a duty of confidentiality.
- To authorities where required by law, court order, subpoena, or to establish, exercise or defend legal claims.
- In a business transfer. If we are involved in a merger, acquisition, financing or sale of assets, personal data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
Our fulfilment partners change from time to time as we optimise delivery times. The current list of countries we ship from is available on request at support@rovesetups.com.
7. International Transfers
We are based in the United Arab Emirates. If you are in the EEA, the UK or Switzerland, your personal data is transferred to and processed in the United Arab Emirates, and in other countries where our service providers and fulfilment partners operate, including the United States.
The United Arab Emirates is not covered by an adequacy decision of the European Commission. The EU-US Data Privacy Framework does not apply to a company established in the United Arab Emirates.
Where we transfer personal data out of the EEA, the UK or Switzerland, we rely on:
- the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), under Article 46(2)(c) of the GDPR;
- for the UK, the International Data Transfer Addendum to those clauses, or the International Data Transfer Agreement;
- for Switzerland, those clauses as recognised by the Federal Data Protection and Information Commissioner; and
- supplementary technical measures, including encryption in transit and at rest.
You can request a copy of the safeguards we use by emailing support@rovesetups.com.
8. How Long We Keep Your Data
| Data | Retention period | Reason |
|---|---|---|
| Account data | Until you delete your account, then 30 days | Service provision; recovery window |
| Order and transaction records | 7 years from the end of the tax year | US and EU tax, customs and accounting law |
| Warranty records | Duration of the warranty plus 2 years | Handling claims and disputes |
| Support correspondence | 3 years from last contact | Dispute resolution, service quality |
| Marketing consent records | Until you unsubscribe, plus 3 years | Proof of consent |
| Web server logs | 30 days | Security, debugging |
| Analytics data | 14 months | Trend analysis |
| Fraud and chargeback records | 5 years | Defending disputes, preventing repeat fraud |
When a retention period ends we delete the data or irreversibly anonymise it. Note that deleting your account does not delete order records we are legally required to keep.
9. Security
We protect your data using:
- TLS encryption for all traffic to and from the Store
- Encryption at rest for our database
- Row-level security and role-based access controls in Supabase
- No storage of full payment card data on our systems, because this is isolated at Stripe
- Multi-factor authentication on administrative accounts
- Access to customer data restricted to personnel who need it
No system is completely secure. If you believe your account has been compromised, or if you discover a security vulnerability in our Store, contact us immediately at support@rovesetups.com. We will not pursue legal action against researchers who report vulnerabilities to us in good faith and give us reasonable time to fix them.
10. Your Rights
10.1 Everyone
Whatever your location, you can:
- Ask what personal data we hold about you and receive a copy
- Ask us to correct inaccurate data
- Ask us to delete your data, subject to our legal retention obligations
- Unsubscribe from marketing emails using the link in every message, or by emailing us
- Change your cookie preferences at any time through the cookie settings link in our footer
To exercise any of these, email support@rovesetups.com. We may need to verify your identity before acting on a request. We respond within 30 days.
10.2 EEA, UK and Switzerland (GDPR)
In addition to the above, you have the right to:
- Restrict processing while a dispute about accuracy or legitimate interests is resolved
- Data portability. Receive the data you gave us in a structured, machine-readable format, or have it transmitted to another controller
- Object to processing based on legitimate interests, including any profiling
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
- Lodge a complaint with your national supervisory authority. A list of EEA authorities is available at edpb.europa.eu/about-edpb/board/members_en. In the UK, this is the Information Commissioner's Office at ico.org.uk.
We do not charge for handling requests unless they are manifestly unfounded or excessive.
10.3 California residents (CCPA/CPRA)
In the past 12 months we have collected the following categories of personal information:
| Category | Collected | Source | Purpose | Disclosed to |
|---|---|---|---|---|
| Identifiers (name, email, IP, account ID) | Yes | You; automatically | Orders, accounts, security | Payment, hosting, email and fulfilment providers |
| Customer records (address, phone, payment info) | Yes | You | Orders, delivery, billing | Payment and fulfilment providers |
| Commercial information (purchase history) | Yes | You | Order fulfilment, support, warranty | Payment and fulfilment providers |
| Internet activity (browsing, interaction with the Store) | Yes | Automatically | Analytics, security, improving the Store | Analytics and hosting providers |
| Geolocation (approximate, from IP) | Yes | Automatically | Shipping estimates, tax, fraud prevention | Analytics and payment providers |
| Inferences (product preferences) | Yes | Derived | Recommending products | None |
We do not sell personal information and we do not share it for cross-context behavioural advertising as those terms are defined under the CPRA. We do not collect sensitive personal information beyond what is necessary to fulfil your order, and we do not use it for inferring characteristics.
Your rights: to know, to delete, to correct, to opt out of sale or sharing, to limit use of sensitive personal information, and not to be discriminated against for exercising them. Email support@rovesetups.com with "CCPA Request" in the subject line. You may use an authorised agent, in which case we will require written proof of authorisation.
We honour Global Privacy Control signals sent by your browser as a valid opt-out request.
10.4 Other US states
If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another state with a comprehensive privacy law, you have rights to access, correct, delete and port your personal data, and to opt out of targeted advertising, sale and profiling. Email support@rovesetups.com. If we deny your request, you may appeal by replying to our decision; we will respond to an appeal within 45 days and tell you how to contact your state Attorney General.
11. Marketing
We send marketing emails only to people who have subscribed. Every message contains a one-click unsubscribe link, and we honour unsubscribes within 10 business days at the latest, and in practice immediately.
We will send you transactional messages about orders you have placed (confirmations, shipping notifications, delivery problems, returns, warranty and recall notices) regardless of your marketing preferences. These are necessary to perform our contract with you and cannot be opted out of while an order is active.
12. Children
The Store is intended for adults. We do not knowingly collect personal information from anyone under 16. You must be at least 18, or the age of majority where you live, to place an order.
If you believe a child has given us personal information, contact support@rovesetups.com and we will delete it.
13. Third-Party Links
The Store may link to third-party websites, including manufacturer specification pages, review sites and social media. We do not control those sites and are not responsible for their privacy practices. Read their policies before providing personal information.
14. Changes to This Policy
We may update this policy. When we do, we will change the "Last updated" date at the top. If the change materially affects your rights, for example a new category of data sharing, we will notify registered customers by email at least 14 days before it takes effect.
Previous versions are available on request.
15. Contact
PrimeVision Group L.L.C-FZ (trading as Rove Setups)
Registered office: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates
Email: support@rovesetups.com
Please put "Privacy" in the subject line so your message reaches the right person quickly.