PRIVACY POLICY
Last updated: 3 September 2026
Reformer Infinity - FZCO respects the privacy of customers and website visitors and is committed to protecting personal data.
This Privacy Policy explains how Reformer Infinity - FZCO collects, uses, stores, shares and protects personal data when visitors use the Reformer Infinity online store, purchase products, create an account, contact customer service, subscribe to marketing communications or otherwise interact with the website.
This Privacy Policy applies to customers and visitors in the markets served by Reformer Infinity, including the European Union and European Economic Area, the United Arab Emirates and the Kingdom of Saudi Arabia.
Where applicable local data-protection law provides additional or stronger rights, those mandatory rights remain unaffected.
1. Data Controller
The controller responsible for processing personal data is:
Reformer Infinity - FZCO
DSO-IFZA, IFZA Properties
Dubai Silicon Oasis
Dubai, United Arab Emirates
Authorized Representative: Beatrice Elena Zamfirescu Schipor
Phone: +971 58 274 1712
Email: contact@reformerinfinity.com
Tax Registration Number (TRN): 105240837200001
Trade License Number: 69012
Questions concerning this Privacy Policy or the processing of personal data may be sent to:
Email: contact@reformerinfinity.com
2. EU Representative
For matters relating to the General Data Protection Regulation (GDPR), Reformer Infinity - FZCO has designated the following representative in the European Union:
Beatrice Elena Zamfirescu Schipor
Timișoara, Romania
European Union
Email: contact@reformerinfinity.com
EU and EEA data subjects and supervisory authorities may contact the EU representative regarding the processing of personal data by Reformer Infinity - FZCO.
The designation of an EU representative does not affect the responsibility of Reformer Infinity - FZCO as data controller.
3. Ecommerce Platform – Shopify
The Reformer Infinity online store is operated using the Shopify ecommerce platform.
Shopify provides the technical infrastructure required to operate the online store, including storefront functionality, checkout, customer accounts, order management and related ecommerce services.
When visitors access the website or place an order, Shopify may process personal data on behalf of Reformer Infinity and, for certain Shopify services, may process information for its own purposes in accordance with its applicable privacy documentation.
Information processed through Shopify may include:
name;
billing and delivery addresses;
email address;
telephone number;
order information;
transaction information;
customer account information;
IP address;
browser information;
device information;
cookie and technical identifiers;
website interaction information.
Shopify and its service providers may process information in countries outside the customer's country of residence.
Appropriate safeguards are used for international transfers where required by applicable data-protection law.
4. Personal Data We Collect
The personal data collected depends on how a visitor interacts with the website.
Identity Information
This may include:
first name;
last name;
customer account name;
company name where applicable;
delivery recipient name.
Contact Information
This may include:
email address;
telephone number;
billing address;
delivery address;
country or region.
Order and Transaction Information
This may include:
products viewed or purchased;
order number;
order date;
order value;
currency;
discounts;
delivery method;
payment status;
transaction references;
order history;
return information;
refund information;
warranty claims.
Payment Information
Payments are processed using available third-party payment providers.
Reformer Infinity generally does not receive or store complete payment-card numbers or card security codes when payment information is entered directly into a payment provider's secure system.
Reformer Infinity may receive limited payment-related information, including:
payment method;
payment status;
transaction identifier;
billing details;
limited card information provided by the payment processor;
refund information.
Payment providers may process personal data in accordance with their own privacy policies and regulatory obligations.
Customer Account Information
Where customer accounts are available, information may include:
name;
email address;
saved addresses;
account identifier;
order history;
account preferences;
authentication information.
Customer Service and Communications
When contacting Reformer Infinity, personal data may include:
emails;
contact-form submissions;
messages;
telephone-related information;
order details;
complaints;
return requests;
warranty requests;
photographs;
videos;
evidence of product damage;
other information voluntarily provided.
Technical and Usage Information
When the website is accessed, information may be collected automatically, including:
IP address;
browser type;
device type;
operating system;
language settings;
approximate location derived from the IP address;
referring website;
pages viewed;
date and time of access;
website interactions;
session information;
cookie identifiers;
advertising identifiers;
diagnostic information;
security information.
Marketing and Advertising Information
Where marketing and advertising services are used, information may include:
advertising identifiers;
cookie identifiers;
marketing consent;
newsletter subscription status;
advertising interactions;
campaign information;
conversion information;
pages viewed;
products viewed;
products added to the shopping cart;
checkout activity;
purchase activity;
campaign attribution information.
5. How Personal Data Is Collected
Personal data may be collected directly from customers when:
placing an order;
creating an account;
entering checkout information;
contacting customer service;
submitting a return request;
submitting a warranty request;
subscribing to marketing communications;
completing a contact form;
submitting a review.
Information may also be collected automatically through:
cookies;
pixels;
tags;
local storage;
server logs;
analytics technologies;
advertising technologies;
similar tracking technologies.
Information may also be received from service providers including:
Shopify;
payment processors;
banks;
delivery companies;
fulfilment providers;
Google;
Meta;
TikTok;
Pandectes;
fraud-prevention providers;
analytics providers;
marketing providers.
6. Purposes of Processing
Personal data is processed for purposes including:
processing and fulfilling orders;
taking and verifying payments;
shipping products;
communicating about orders;
customer service;
processing returns and refunds;
warranty management;
fraud prevention;
website security;
accounting;
taxation;
customs compliance;
legal compliance;
website analytics;
improving website performance;
measuring advertising performance;
conversion tracking;
remarketing where consent has been provided;
personalised advertising where permitted;
newsletters and promotional communications where permitted.
7. Legal Bases Under the GDPR
Where the GDPR applies, Reformer Infinity processes personal data using one or more of the following legal bases.
Performance of a Contract
Processing is necessary to:
accept orders;
process payments;
deliver products;
communicate about purchases;
process returns;
provide refunds;
manage warranties.
Legal Obligation
Processing may be required to comply with:
accounting obligations;
taxation requirements;
VAT requirements;
customs requirements;
consumer-protection legislation;
regulatory requirements;
legally binding requests.
Legitimate Interests
Processing may be necessary for legitimate interests including:
fraud prevention;
website security;
improving services;
maintaining business operations;
handling customer requests;
protecting legal rights.
Legitimate interests will only be relied upon where those interests are not overridden by the rights and freedoms of the individual.
Consent
Consent is used where required for activities including:
non-essential analytics cookies;
advertising cookies;
Meta Pixel;
TikTok Pixel;
Google advertising technologies;
personalised advertising;
remarketing;
non-essential tracking technologies;
certain marketing communications.
Consent may be withdrawn at any time.
8. Cookie Consent Management – Pandectes GDPR Compliance
Reformer Infinity uses Pandectes GDPR Compliance as its cookie consent and privacy-management platform.
Pandectes is used to:
display the cookie consent banner;
provide cookie preferences;
record and manage consent choices;
allow visitors to accept or reject categories of cookies;
communicate consent choices to supported website technologies;
manage privacy-related website functionality;
assist with customer data requests;
provide cookie information and declarations.
Consent choices may be communicated through Shopify's Customer Privacy functionality and supported third-party integrations.
Where required by applicable law, analytics, advertising and other non-essential tracking technologies are controlled according to the visitor's consent choices.
Visitors can change or withdraw their cookie preferences through the cookie settings available on the website.
Withdrawal of consent does not affect processing lawfully carried out before consent was withdrawn.
9. Cookie Categories
The website may use the following categories of cookies and similar technologies.
Strictly Necessary Cookies
These technologies are required for the website to function.
They may be used for:
shopping-cart functionality;
checkout;
account login;
website security;
fraud prevention;
maintaining sessions;
remembering privacy choices.
Strictly necessary cookies may be used without consent where permitted by applicable law.
Preference Cookies
These technologies may remember choices such as:
language;
country;
region;
currency;
website preferences.
Analytics Cookies
Analytics technologies are used to understand how visitors interact with the website and to improve website performance.
Reformer Infinity uses Google Analytics for this purpose.
Where consent is legally required, analytics cookies are activated only after the visitor has provided appropriate consent.
Marketing and Advertising Cookies
Marketing technologies are used for advertising measurement, conversion tracking, remarketing and personalised advertising where permitted.
Reformer Infinity uses:
Google Ads;
Meta Pixel;
TikTok Pixel.
Where applicable law requires consent, these technologies are used for marketing purposes only after appropriate consent has been provided.
A current description of cookies and tracking technologies may also be made available through the website's cookie declaration managed through Pandectes.
10. Google Analytics
Reformer Infinity uses Google Analytics, an analytics service provided by Google.
Google Analytics helps understand how visitors interact with the website.
Depending on the configuration and consent provided, information processed by Google Analytics may include:
IP-related information;
approximate geographical location;
browser information;
device information;
operating system information;
language;
pages viewed;
session information;
visit duration;
website interactions;
traffic source;
referring website;
cookie and client identifiers;
ecommerce events.
Google Analytics may use first-party cookies and similar technologies to distinguish visitors and sessions.
The information is used to:
measure website traffic;
understand website usage;
analyse customer journeys;
identify technical or usability issues;
measure ecommerce performance;
improve the online store.
Google Analytics is used on the basis of consent where consent is required by applicable law.
Visitors can refuse or withdraw analytics consent through the website's Pandectes cookie settings.
11. Google Ads
Reformer Infinity uses Google Ads to advertise products and measure the effectiveness of advertising campaigns.
Google Ads technologies may be used for:
conversion tracking;
campaign attribution;
advertising measurement;
remarketing;
audience measurement;
advertising optimisation;
personalised advertising where consent has been provided.
Depending on configuration and consent, information may include:
advertising identifiers;
cookie identifiers;
ad interactions;
pages visited;
products viewed;
cart activity;
checkout events;
purchases;
transaction value;
currency;
conversion events;
technical device and browser information.
Conversion tracking helps determine whether an interaction with a Google advertisement resulted in an action such as a purchase.
Where applicable law requires consent, Google advertising technologies will only be used for advertising storage, advertising personalisation and related tracking after appropriate consent has been obtained.
12. Google Consent Mode
Consent information collected through the website's consent-management system may be communicated to Google services using Google's consent mechanisms.
Consent signals may include preferences relating to:
analytics storage;
advertising storage;
advertising user data;
advertising personalisation.
These signals are intended to help Google services operate according to the choices made through the website's cookie consent system.
Visitors may change these choices through the Pandectes cookie settings.
13. Meta Pixel
Reformer Infinity uses the Meta Pixel, a business and advertising technology provided by Meta.
The Meta Pixel helps measure interactions with the Reformer Infinity website after visitors interact with advertisements on Facebook, Instagram or other Meta services.
Depending on configuration and consent, events may include:
website visits;
product views;
searches;
add-to-cart actions;
checkout activity;
purchases;
transaction values;
other ecommerce interactions.
Technical information may also be processed, such as:
IP-related information;
browser information;
device information;
cookie identifiers;
advertising identifiers;
referring information.
Meta may use information received through its business tools for advertising measurement, attribution and other purposes in accordance with applicable Meta terms and privacy documentation.
The Meta Pixel may also be used to:
measure advertising performance;
create advertising audiences;
perform remarketing;
optimise advertising delivery;
understand conversions.
Where Advanced Matching or similar functionality is enabled, information such as an email address or telephone number may be transmitted to Meta in hashed form to improve matching between website activity and Meta accounts.
Such functionality is used only where legally permitted and subject to applicable consent requirements.
For visitors where prior consent is required, Meta Pixel marketing functionality is activated only according to the visitor's consent choice.
Consent can be changed or withdrawn through the Pandectes cookie settings.
14. TikTok Pixel
Reformer Infinity uses the TikTok Pixel for advertising measurement and optimisation.
The TikTok Pixel allows website events to be shared with TikTok for purposes including:
measuring website traffic;
measuring advertising performance;
conversion tracking;
campaign attribution;
advertising optimisation;
remarketing;
creating advertising audiences where permitted.
Depending on configuration and consent, information may include:
pages viewed;
products viewed;
add-to-cart events;
checkout events;
purchases;
order value;
currency;
advertising interactions;
timestamps;
browser information;
device information;
IP-related information;
cookie or advertising identifiers.
Where TikTok Advanced Matching or similar matching functionality is enabled, identifiers such as email addresses or telephone numbers may be transmitted in hashed form where legally permitted.
Where server-side TikTok Events API functionality is enabled, certain website and conversion events may also be transmitted to TikTok through a server-to-server connection.
For visitors where prior consent is required, TikTok advertising and tracking technologies are used according to the visitor's consent choices.
Consent may be changed or withdrawn through the Pandectes cookie settings.
15. Marketing and Remarketing
With appropriate consent where required, information collected through Google Ads, Meta Pixel and TikTok Pixel may be used for remarketing.
Remarketing may allow advertisements for Reformer Infinity products to be displayed to people who previously:
visited the website;
viewed a product;
added a product to the cart;
started checkout;
completed a purchase;
interacted with an advertising campaign.
Advertising providers may combine information collected through their services with other information available to them in accordance with their own privacy policies and user settings.
Visitors may refuse marketing cookies through the cookie banner or later withdraw consent through the cookie settings.
16. Email Marketing
Where legally permitted, Reformer Infinity may send:
newsletters;
promotional offers;
product announcements;
new-product information;
restock notifications;
promotional campaigns.
Where consent is required, marketing communications are sent only after appropriate consent has been obtained.
Marketing consent can be withdrawn at any time.
Customers may unsubscribe using the unsubscribe link contained in marketing communications or by contacting:
contact@reformerinfinity.com
Unsubscribing from promotional emails does not prevent necessary transactional communications concerning:
orders;
payments;
deliveries;
returns;
refunds;
warranties;
customer-service matters;
safety information.
17. Payment Providers
Payments may be processed by third-party payment service providers available during checkout.
These providers may process information for:
payment authorisation;
transaction processing;
authentication;
fraud prevention;
refunds;
regulatory compliance;
dispute management.
Payment providers may act as independent controllers for certain processing activities.
Customers should review the privacy information provided by the payment method selected during checkout.
18. Shipping and Logistics Providers
Personal data necessary to deliver orders may be provided to:
couriers;
freight companies;
warehouses;
fulfilment providers;
customs agents;
logistics providers.
Information may include:
recipient name;
delivery address;
telephone number;
email address;
shipment information;
order reference;
customs-related information where required.
19. Sharing Personal Data
Personal data may be shared with service providers and recipients where necessary for legitimate business or legal purposes.
These may include:
Shopify;
Pandectes;
Google;
Meta;
TikTok;
payment processors;
banks;
fraud-prevention services;
warehouses;
freight carriers;
courier companies;
customs providers;
customer-service providers;
hosting and cloud providers;
IT providers;
accountants;
auditors;
insurers;
professional advisers;
legal advisers;
tax authorities;
regulatory authorities;
courts;
law-enforcement authorities where legally required.
Only information reasonably necessary for the relevant purpose will be shared.
Where third parties process personal data on behalf of Reformer Infinity, appropriate contractual and organisational safeguards are used where required.
20. International Transfers of Personal Data
Reformer Infinity - FZCO is established in Dubai, United Arab Emirates and operates internationally.
Personal data may therefore be processed, transferred, accessed or stored outside the customer's country of residence.
Depending on the service used, data may be processed in:
the United Arab Emirates;
the European Union or European Economic Area;
Saudi Arabia;
the United States;
other countries in which Shopify, Google, Meta, TikTok, Pandectes or other service providers operate.
International transfers are carried out in accordance with applicable data-protection law.
21. EU/EEA International Data Transfers
Where personal data protected by the GDPR is transferred outside the European Economic Area to a country that is not covered by an applicable European Commission adequacy decision, appropriate safeguards will be used where required.
Depending on the recipient, safeguards may include:
European Commission Standard Contractual Clauses;
approved transfer frameworks where applicable;
contractual data-protection obligations;
supplementary technical and organisational safeguards;
another legally permitted transfer mechanism.
Further information regarding applicable safeguards may be requested at:
contact@reformerinfinity.com
22. Saudi Arabia International Data Transfers
Personal data relating to customers in Saudi Arabia may be transferred outside the Kingdom of Saudi Arabia, including to the United Arab Emirates and locations where ecommerce, analytics, advertising, payment, technology and logistics providers operate.
Such processing may be necessary to:
operate the ecommerce store;
process orders;
accept payments;
provide customer service;
arrange delivery;
provide cloud and technology services;
measure website and advertising performance;
comply with legal obligations.
Where Saudi Personal Data Protection Law applies, international transfers will be handled in accordance with applicable Saudi requirements.
Appropriate safeguards and transfer mechanisms will be used where required.
23. Saudi Arabia – Basis for Processing
Where Saudi Personal Data Protection Law applies, personal data is processed on the basis of consent or another lawful basis available under applicable Saudi law.
Personal data is collected for specific and lawful purposes and limited to what is reasonably necessary for those purposes.
Where consent is relied upon, consent may be withdrawn in accordance with applicable law.
Withdrawal does not affect processing lawfully performed before consent was withdrawn.
24. UAE Data Protection
As a company established in the United Arab Emirates, Reformer Infinity processes personal data in accordance with applicable UAE data-protection requirements, including Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data where applicable.
25. Data Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected or for periods required or permitted by applicable law.
Retention periods depend on:
the nature of the information;
the purpose of processing;
warranty periods;
accounting requirements;
tax requirements;
customs obligations;
consumer claims;
contractual obligations;
fraud-prevention requirements;
legal limitation periods;
regulatory obligations.
Order, invoice, payment and transaction records may be retained for the period required by applicable accounting and taxation laws.
Customer-service, return and warranty information may be retained for as long as reasonably necessary to manage the relevant issue and potential legal claims.
Marketing information may generally be retained until consent is withdrawn, the individual unsubscribes or the information is no longer required.
Consent records may be retained where necessary to demonstrate compliance with privacy and cookie-consent obligations.
26. Deletion and Destruction of Personal Data
When personal data is no longer required, reasonable measures are taken to delete, destroy or anonymise it.
This may include:
deletion from active databases;
secure electronic deletion;
deletion according to backup cycles;
destruction of physical records;
irreversible anonymisation.
Information contained in backups may remain temporarily until the relevant backup is overwritten or deleted according to established retention procedures.
27. Data Security
Reformer Infinity uses appropriate technical and organisational measures designed to protect personal data against:
unauthorised access;
unauthorised disclosure;
alteration;
accidental loss;
misuse;
unlawful processing;
destruction.
Measures may include:
access controls;
authentication measures;
encrypted communications;
restricted access;
secure payment systems;
monitoring;
software updates;
processor controls;
security procedures.
No electronic system can be guaranteed to be completely secure.
Suspected unauthorised activity may be reported to:
contact@reformerinfinity.com
28. Personal Data Breaches
If a personal-data breach occurs, Reformer Infinity will investigate and take appropriate measures to contain and address the incident.
Where required by applicable law, the relevant supervisory authority and affected individuals will be notified within the applicable legal time limits.
29. Children's Privacy
The online store is intended for persons legally capable of entering into purchase contracts.
Reformer Infinity does not intentionally collect children's personal data for independent advertising or marketing purposes.
Where personal data relating to a child is identified and parental or guardian authorisation is legally required, appropriate action will be taken in accordance with applicable law.
30. EU and EEA Data Protection Rights
Where the GDPR applies, individuals may have the following rights subject to applicable conditions and exceptions:
Right of Access
The right to obtain information about whether personal data is being processed and to request access to that data.
Right to Rectification
The right to request correction of inaccurate data and completion of incomplete data.
Right to Erasure
The right to request deletion of personal data where the legal conditions are satisfied.
Right to Restriction
The right to request restriction of processing in circumstances specified by law.
Right to Data Portability
Where applicable, the right to receive certain personal data in a structured, commonly used and machine-readable format.
Right to Object
The right to object to certain processing based on legitimate interests.
Right to Object to Direct Marketing
Individuals may object at any time to the use of their personal data for direct marketing.
Right to Withdraw Consent
Where processing is based on consent, consent may be withdrawn at any time.
Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Automated Decision-Making Rights
Where applicable, individuals may have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.
31. EU and EEA Complaints
Individuals in the European Union or European Economic Area have the right to lodge a complaint with a competent data-protection supervisory authority.
A complaint may generally be submitted to the supervisory authority in the country of:
habitual residence;
place of work; or
the alleged infringement.
Reformer Infinity welcomes the opportunity to investigate privacy concerns directly before a formal complaint is submitted.
32. Saudi Arabia Privacy Rights
Where Saudi Personal Data Protection Law applies, individuals have rights provided by applicable Saudi law, subject to relevant conditions and exceptions.
These may include:
Right to Be Informed
The right to receive information regarding the collection and processing of personal data.
Right of Access
The right to request access to personal data in accordance with applicable law.
Right to Obtain Personal Data
Where applicable, the right to obtain personal data in a readable and clear format.
Right to Correction
The right to request correction, completion or updating of inaccurate, incomplete or outdated information.
Right to Request Destruction
The right to request destruction of personal data where applicable legal requirements are satisfied.
Right to Withdraw Consent
Where processing is based on consent, consent may be withdrawn in accordance with applicable Saudi law.
Saudi privacy requests may be submitted to:
contact@reformerinfinity.com
Where applicable, individuals may also have the right to lodge a complaint with the competent Saudi data-protection authority.
33. UAE Privacy Rights
Where UAE data-protection legislation applies, individuals may have rights concerning:
access to personal data;
information regarding processing;
correction of inaccurate information;
updating personal information;
data portability where applicable;
restriction of processing;
objection to certain processing;
withdrawal of consent where applicable.
These rights are subject to applicable legal conditions and exceptions.
34. Exercising Privacy Rights
Privacy requests may be submitted to:
Reformer Infinity - FZCO
DSO-IFZA, IFZA Properties
Dubai Silicon Oasis
Dubai, United Arab Emirates
Authorized Representative: Beatrice Elena Zamfirescu Schipor
Phone: +971 58 274 1712
Email: contact@reformerinfinity.com
EU and EEA customers may also contact:
EU Representative
Beatrice Elena Zamfirescu Schipor
Timișoara, Romania
European Union
Email: contact@reformerinfinity.com
Requests should clearly identify the privacy right being exercised.
Reasonable information may be requested to verify the identity of the person making the request.
Requests will be processed within the period required by applicable law.
35. Managing and Withdrawing Cookie Consent
Visitors can manage cookie preferences using the cookie settings provided by Pandectes on the Reformer Infinity website.
Depending on the available settings, visitors may separately control:
preferences;
analytics;
marketing and advertising.
Consent can be changed or withdrawn at any time.
After withdrawal, the relevant non-essential technologies will no longer be used for future processing to the extent required by applicable law.
Cookies already stored on a device may remain until deleted or until their expiry period is reached.
36. Third-Party Privacy Policies
Shopify, Google, Meta, TikTok, Pandectes, payment providers and other independent third parties may process personal data according to their respective privacy policies and contractual terms.
Visitors are encouraged to review the privacy information provided by these services for additional information concerning their processing practices and privacy controls.
37. Sale of Personal Data
Reformer Infinity does not sell customer personal data in exchange for money.
Certain advertising technologies may involve disclosures or data sharing that could be treated as "sale", "sharing", targeted advertising or a similar concept under certain privacy laws.
Where such laws apply, the corresponding consent, objection or opt-out rights will be respected.
38. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect:
changes to the website;
changes to ecommerce services;
new technology providers;
new analytics or advertising services;
changes to processing activities;
changes to applicable laws;
regulatory guidance.
The current version will be published on the website with an updated "Last updated" date.
Where material changes require additional notice or consent, appropriate measures will be taken.
39. Contact
For privacy questions, data-protection requests or complaints:
Reformer Infinity - FZCO
DSO-IFZA, IFZA Properties
Dubai Silicon Oasis
Dubai, United Arab Emirates
Authorized Representative: Beatrice Elena Zamfirescu Schipor
Phone: +971 58 274 1712
Email: contact@reformerinfinity.com
Tax Registration Number (TRN): 105240837200001
Trade License Number: 69012
EU Representative
Beatrice Elena Zamfirescu Schipor
Timișoara, Romania
European Union
Email: contact@reformerinfinity.com