Privacy & Cookie Policy

Marshal Fitness LLC ("Marshal Fitness", "we", "our", "us") is a UAE-registered retailer of fitness equipment, operating from offices in Dubai with showrooms across the Emirates.

• Contact info — name, email, phone, shipping address (when you place an order or create an account)
• Order details — products purchased, payment method (we never see card numbers; those go directly to our payment gateway)
• Browsing data — pages visited, products viewed, search queries (used to improve recommendations)
• Device data — browser type, IP, OS (for fraud prevention and analytics)

• To process and deliver your orders
• To contact you about deliveries, returns, and support
• To send marketing emails / WhatsApp messages (only with your opt-in)
• To improve our products, site, and service
• To prevent fraud and abuse

We share only what's necessary, only with these categories:

• Payment processors (Telr, Tabby, Tamara, Network / Slice) — to charge your card or set up instalments
• Logistics partners — to deliver your order
• Analytics — Google Analytics, Meta, TikTok pixels via GTM — anonymised where possible
• Email / SMS / WhatsApp providers — Resend, Unifonic, 360dialog

✅ We never sell your data to third parties.

You can email [email protected] at any time to:

• Request a copy of all data we hold about you
• Correct any inaccuracies
• Delete your account and personal data
• Unsubscribe from marketing
• Opt out of non-essential cookies

We use four categories of cookies. You control everything except the essentials (which the site needs to function) via the cookie banner on first visit.

• Essential

  Login, cart, currency switcher, fraud checks. Always on.

• Analytics

  Google Analytics 4 + PostHog — aggregate usage data so we can improve flows.

• Marketing

  Meta, TikTok, Snap, Google Ads pixels via GTM — only if you opt in.

• Preferences

  Remembers locale, currency, recently-viewed products.

To manage your choices later, clear the "marshal-cookie-consent" cookie from your browser and the banner will reappear on next visit.

We use industry-standard encryption (TLS) in transit and at rest. Card details are never stored on our servers — they're tokenised by our PCI-DSS-compliant payment provider. Account passwords are hashed (bcrypt / argon2).

Questions about privacy? Email [email protected]. We respond within 48 business hours.