Legal
Privacy policy
Last updated: 2026-10-14
Who we are. New Common is run by Nine One Edition General Trading - FZCO, trading as NEW////COMMON, license no. 87746, Dubai Integrated Economic Zones Authority, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates. We are the controller of the data described here. Contact: naman@newcommon.com.
This policy covers shoppers on new-common.com. Brands using our Shopify app are covered by the brand privacy policy.
What we collect
New Common shows you pieces from independent brands. You buy from the brand's own store; the brand sells the item and handles payment, order, and delivery. We never take payment.
- Account and newsletter: your email, and if you create an account, your name, country, mobile number, and delivery address if you give them.
- Your saved pieces and followed brands.
- How you use the site: pages and pieces you view, searches, the site or campaign that brought you here, a rough device type, and your approximate location (country and region).
- Visits to brands: when you follow a link to a brand, a record of the click, and, if an order follows, the order facts the brand shares with us, never your name or contact details.
- Your cookie choices.
You don't have to give us anything, but without an email we can't create an account or send the newsletter. We do not collect payment details or government ID; we do not buy data about you, we do not sell it, and we do not use it to train AI models.
Why we use it
- To run your account and saved pieces, because you asked us to (contract).
- To run and secure the site and show prices in your currency (our legitimate interests).
- To send the newsletter, only if you sign up (consent).
- To understand how the site is used: with your consent where we ask first, otherwise our legitimate interests, which you can switch off.
- To measure the results of our partnerships with brands and keep our accounts (our legitimate interests).
- To keep a record of your cookie choices and meet our other legal duties (legal obligation).
You can object to any use based on legitimate interests. We make no decisions about you by automated means alone, and we do not profile you for advertising.
Brands using our Shopify app
See the brand privacy policy.
Who else sees it
- The brand you choose to visit, which runs its own store and checkout under its own policy.
- Service providers who host, run, maintain, and send email for New Common, acting only on our instructions and under contract. A list is available on request.
- Authorities or advisers where the law requires it or to establish or defend legal claims, and a buyer if our business is sold.
Where your data lives
We are based in the UAE, and we and our providers may process your data in other countries, including outside the UK and the EU. Where the law requires it, we protect transfers with the European Commission's standard contractual clauses and the UK Addendum. Email us for a copy.
How we protect it
We use encryption, access controls and logging appropriate to the data we hold. No system is perfectly secure; if a breach affects you, we will tell you where the law requires.
How long we keep it
- Usage data: 13 months.
- Account, saved pieces and newsletter: until you delete your account or unsubscribe.
- Sign-in requests: 30 days.
- Records of cookie choices: up to three years after they change or expire.
- Accounting records: as long as tax law requires (currently up to 7 years).
- Records needed for a possible legal claim: until the claim period ends.
Then we delete or anonymize it, including in backups, in the ordinary course.
Your rights
You can ask for a copy of your data, to correct or delete it, to restrict or object to its use, or to take it elsewhere, and you can withdraw consent at any time (from Cookie settings, or the unsubscribe link in any newsletter). Email naman@newcommon.com. We may confirm your identity first, using the email address we hold for you. We reply within 5 business days and complete requests within one month. We will not treat you differently for using your rights. You can also complain to us, or to your data protection authority. New Common is not meant for anyone under 18.
Where you live
- UK: the Information Commission (ico.org.uk).
- EU and EEA: your national data protection authority (edpb.europa.eu).
- India: write to naman@newcommon.com first; we answer complaints within one month; once the Digital Personal Data Protection Act's duties apply, you can complain to the Data Protection Board of India. You can nominate someone to act for you.
- California and other US states: in the last 12 months we collected identifiers, customer records, commercial information, internet activity and approximate location, from you, your device and the brands you visit, for the uses above. Your sign-in details are sensitive personal information, used only to sign you in. We disclose them only to the recipients above. We do not sell or share personal information for cross-context behavioral advertising, and we honor Global Privacy Control. You can ask to know, correct, or delete your data, directly or through an authorized agent.
- Elsewhere, including the UAE where we are based: the same rights apply, and you can complain to your local data protection authority.
Changes
If we make a significant change, we update the date above and, if you have an account, email you first.
Contact
naman@newcommon.com · Nine One Edition General Trading - FZCO, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates