Privacy policy

Privacy at a glance

Your Libroo account is controlled by you, not your child. We only ask for limited information about your child where it helps us recommend and curate suitable books or provide other reading-related features you request.

• We do not sell children’s information, use it for third-party targeted advertising or create advertising profiles about children.
• Payments are processed through Mamo, and Libroo does not store your complete card number or CVV.
• You can ask us to correct or delete information relating to you or your child and, where processing is based on consent, withdraw that consent at any time.

1. Who We Are

Libroo is operated by:

• LIBROO ARC FZC
• Free Zone Company – Limited Liability
• Trade Licence No. 55224
• Licensed in the United Arab Emirates

Registered Address: Premises No. B.C. 1308693, AFZ C1 Building, United Arab Emirates

Email: support.libroo@gmail.com

Libroo operates a children’s book borrowing, curation, delivery and collection service through www.libroo.ae.

2. Information We Collect

The information we collect depends on how you interact with Libroo.

A. Account and contact information — When you create an account, place an order or contact us, we may collect information such as:

• your name;
• email address;
• mobile number;
• delivery address;
• account login information;
• communication preferences; and
• information you provide when contacting customer support.

B. Information about your child — Libroo allows a parent or guardian to create a reading profile to help us recommend suitable books. Depending on the information you choose to provide, this may include:

• your child’s first name or nickname;
• date of birth or age;
• reading level;
• interests and preferences;
• subjects or themes they enjoy;
• books selected, borrowed or previously read;
• reading history; and
• information you voluntarily provide in connection with personalised book curation, whether requested by you and/or offered by Libroo.

We collect information about a child only to the extent reasonably necessary to provide the Libroo service requested by the parent or guardian, including book recommendations, personalised curation and relevant reading-related features.

We encourage parents and guardians to provide only the information needed for these purposes. Where a nickname, age or age band is sufficient, you do not need to provide more detailed identifying information.

We do not use identifiable child-profile information for behavioural advertising, third-party targeted advertising, sale to third parties, unrelated profiling or other purposes unrelated to providing and operating the Libroo service.

The Libroo service is designed to be operated by an adult parent or legal guardian. Children should not create accounts, manage child profiles or provide personal information directly to Libroo.

By creating a child profile, you confirm that you are the child’s parent or legal guardian, or otherwise have lawful authority to act on the child’s behalf. Where required by applicable law, you expressly consent to Libroo collecting and using the child-profile information you choose to provide for the purposes described in this Privacy Policy.

Where appropriate, Libroo may record information demonstrating when and how parental or guardian consent was provided, such as the date, time and version of the consent presented. We may also take reasonable steps to verify parental or guardian authority where required.

You may withdraw consent relating to your child’s profile at any time by contacting support.libroo@gmail.com or by using any relevant child-profile or privacy controls made available through your Libroo account. Withdrawal of consent may mean that we can no longer provide personalised recommendations or other features that depend on that information.

3. Orders, Rentals and Service Information

When you use Libroo, we may maintain records relating to:

• books selected and borrowed;
• delivery and collection dates;
• previous orders;
• subscription or borrowing plans;
• book returns;
• books purchased through the “Keep This Book” option;
• lost, damaged or overdue books;
• discounts, credits or promotions used; and
• customer service enquiries relating to your orders.

We use this information to administer your account, provide the service and maintain an accurate history of your Libroo activity.

4. Payment Information and Payment Security

Payments made through www.libroo.ae are processed through Mamo Pay (“Mamo”), our third-party payment service provider.

Mamo Limited is a company registered in the Dubai International Financial Centre (DIFC) and is regulated and licensed by the Dubai Financial Services Authority (DFSA) to provide regulated payment services.

Mamo operates under DFSA Reference No. F005922 and holds a Providing Money Services licence. As a regulated financial services provider, Mamo is required to maintain regulatory systems and controls relating to areas including safeguarding, compliance, security and financial operations.

Libroo selected Mamo as its payment partner in part because it operates within a regulated DIFC and UAE financial-services framework and publishes security standards relevant to payment processing.

Payment security — According to Mamo’s published security standards, its payment infrastructure includes:

• PCI DSS compliance, an international security standard for organisations that process payment card information;
• encryption of financial and customer data both in transit and at rest;
• secure SSL cryptographic protocols for network communications;
• transaction monitoring and fraud-detection systems designed to identify and flag suspicious activity;
• dedicated Risk and Compliance functions;
• regular vulnerability and security testing, including testing conducted with third-party security specialists; and
• verification controls for sensitive actions.

Mamo is registered as a Payment Facilitator with Visa and Mastercard and supports a range of payment methods, including Apple Pay and Google Pay.

These safeguards are designed to provide additional protection when customers make payments to Libroo.

What Libroo can see — Libroo does not store your complete payment card number, CVV or other full card credentials on its own servers. Sensitive card information is handled through Mamo’s payment infrastructure rather than being directly stored by Libroo.

Libroo may receive and retain limited information relating to a payment where necessary to administer your order, including:

• transaction reference;
• payment status;
• amount paid;
• payment date;
• refund status; and
• limited payment information made available by Mamo.

This allows us to confirm that an order has been paid, process refunds where appropriate, reconcile transactions and provide customer support without requiring Libroo to hold your complete payment card information.

Your payment information is processed by Mamo in accordance with its own privacy, security and regulatory obligations.

While Libroo carefully selects its payment service providers, no electronic payment or internet-based system can be guaranteed to be completely free from risk.

5. Website and Technical Information

When you visit www.libroo.ae, certain information may be collected automatically, including:

• IP address;
• browser and device type;
• operating system;
• pages visited;
• date and time of access;
• website interactions;
• referring pages; and
• cookie or similar technology information.

We use this information to operate the website, maintain security, understand how customers use Libroo, identify technical problems and improve the user experience.

Where information is collected through optional analytics or similar technologies, this will also be subject to the cookie choices described in Section 15 below.

6. How We Use Your Information

We may use personal information to:

• create and manage your Libroo account;
• process orders and payments;
• deliver and collect books;
• recommend books based on a child’s age and interests;
• provide personalised book curation;
• maintain a child’s reading profile and reading history;
• communicate about deliveries, collections and returns;
• send reminders about upcoming book returns;
• provide customer support;
• manage refunds, credits, damaged or lost books;
• prevent fraud or misuse of the service;
• maintain and improve www.libroo.ae;
• analyse website performance;
• comply with applicable legal, regulatory, accounting and tax obligations; and
• protect Libroo, our customers and our legal rights.

Information relating to a child will only be used in accordance with the additional protections described in Sections 2 and 12 of this Privacy Policy.

We process personal information only where there is an appropriate basis for doing so under applicable law. Where consent is required, we will obtain that consent before the relevant processing and you may withdraw it at any time, subject to applicable legal requirements.

7. Marketing Communications

We may send you information about Libroo, including:

• new services or features;
• new books;
• reading ideas and tips;
• promotions;
• offers; and
• other Libroo updates.

We will send promotional or marketing communications only where you have opted in to receive them or where otherwise permitted under applicable law. Where consent is used, marketing consent will be separate from the communications necessary to provide your Libroo service. You do not need to agree to receive marketing in order to use Libroo.

You may unsubscribe from marketing emails at any time using the unsubscribe option included in the communication or by contacting support.libroo@gmail.com.

Unsubscribing from marketing will not prevent us from sending important service-related communications, such as order confirmations, payment notifications, delivery updates or return reminders.

Where you have separately opted in to receive promotional communications through WhatsApp or another messaging service, you may withdraw that preference at any time.

8. WhatsApp and Other Communications

If you contact Libroo through WhatsApp or another third-party communication platform, information you send through that service may also be processed by the relevant platform provider under its own privacy policy.

We may use WhatsApp to:

• respond to your enquiries;
• provide personalised book recommendations;
• confirm delivery or collection information; and
• provide customer support.

We do not require you to provide unnecessary information about your child through WhatsApp.

Please avoid sending information about your child through WhatsApp that is not reasonably required for your enquiry or curation request.

Operational WhatsApp messages relating to an order, delivery, collection, curation request or customer-support matter are treated separately from promotional WhatsApp marketing. Promotional communications will be handled in accordance with Section 7 above.

9. When We Share Information

Libroo does not sell or rent your personal information or your child’s personal information to advertisers or other third parties.

We may share limited information with trusted service providers where reasonably necessary to operate Libroo, including:

• website hosting and infrastructure providers;
• payment processors, including Mamo;
• delivery and collection partners;
• email or communication service providers;
• website analytics providers;
• IT and cybersecurity providers;
• professional advisers such as accountants, auditors or lawyers; and
• government, regulatory or law-enforcement authorities where disclosure is legally required.

Service providers are given only the information reasonably required to perform the relevant service.

Where appropriate, we also seek contractual, confidentiality, security or data-protection commitments from service providers that process personal information on our behalf.

We do not sell children’s information or use it for third-party behavioural advertising, third-party targeted advertising or unrelated commercial profiling.

10. Where Your Information Is Stored

Libroo’s primary application and database infrastructure is currently hosted on servers located in Germany within the European Union.

As a result, information collected through Libroo may be transferred from the United Arab Emirates to Germany for hosting, storage and processing.

Some third-party service providers used by Libroo may also process information in other countries.

Where personal data is transferred outside the United Arab Emirates, we take reasonable steps to ensure that the transfer is handled in accordance with applicable UAE data-protection requirements and use safeguards permitted by applicable law, including appropriate contractual, technical and organisational protections where required.

11. Data Security

We take reasonable technical and organisational measures designed to protect personal information against:

• unauthorised access;
• accidental loss;
• misuse;
• alteration;
• inappropriate disclosure; and
• destruction.

These measures include encrypted HTTPS/TLS connections between your browser and our website and access controls for systems containing customer information.

Payment card information is handled through Mamo’s regulated payment infrastructure rather than stored directly by Libroo, as described in Section 4 above.

While we take data security seriously, no website, internet transmission or electronic storage system can be guaranteed to be completely secure.

If a personal data breach occurs, we will take appropriate steps and provide notifications where required by applicable law.

12. Children’s Privacy

Protecting children’s information is particularly important to us.

Libroo is designed for parents and guardians, including parents of young children. Children are not intended to create accounts, manage profiles or provide personal information directly to Libroo.

Where information relates to a child and parental or guardian consent is required under applicable UAE law, we will seek that consent before collecting or using the relevant child-profile information.

Information about a child is collected through an adult account holder and only to the extent reasonably necessary to:

• personalise book recommendations;
• provide curation services;
• maintain reading history; and
• improve the child’s Libroo reading experience.

Where possible, we aim to provide these services using limited information such as a nickname, age or age band, reading level and interests rather than unnecessary identifying information.

We do not sell children’s information.

We do not create advertising profiles about children, use children’s information for third-party targeted advertising, sell it to advertisers or use it for unrelated commercial profiling.

Parents and guardians can request access to, correction or deletion of information relating to their child and can withdraw consent where our processing is based on consent. Requests can be made by contacting support.libroo@gmail.com or through any relevant privacy or child-profile controls that we make available through the Libroo account.

If you withdraw consent for a child profile, we will stop using that profile for consent-based personalisation and remove information that is no longer required from active use as soon as reasonably practicable, subject to any lawful retention requirements.

13. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or where we are required to retain it by law.

If you close your Libroo account, delete a child profile, withdraw relevant consent or request deletion, personal and child-profile information that is no longer required will be removed from active use as soon as reasonably practicable, subject to applicable legal and operational requirements.

Residual copies may temporarily remain in secure backups, logs or other recovery systems and will generally be deleted or anonymised through our normal deletion cycles within 90 days, unless we are required or permitted by law to retain particular information for longer.

Certain information may need to be retained for longer, including:

• invoices;
• payment and transaction records;
• order history;
• accounting records;
• records relating to disputes, refunds or claims; and
• information that we are legally required to retain.

Where an order or financial record must be retained, this does not mean that child-profile information that is no longer necessary will automatically be retained with it.

Where possible, information that no longer needs to identify an individual may be anonymised rather than retained in identifiable form.

14. Your Privacy Rights

Subject to applicable law and any lawful exceptions, you may have the right to:

• ask what personal information we hold about you;
• request access to your personal information;
• request correction of inaccurate or outdated information;
• request deletion of information;
• request restriction or cessation of certain processing;
• withdraw consent where processing is based on your consent;
• object to certain uses of your information;
• request information about how your personal data is being processed or shared;
• request portability or transfer of certain personal information in a structured or machine-readable form where applicable;
• request information about, object to or challenge certain automated processing or automated decision-making where applicable; and
• submit a complaint to the competent UAE data-protection authority where you believe your rights under applicable law have not been respected.

You may also request changes or deletion of information relating to a child for whom you are the parent, guardian or otherwise authorised adult.

Where processing of a child’s information is based on your consent, you may also withdraw that consent as described in Sections 2 and 12.

To exercise a privacy right, contact:

• support.libroo@gmail.com

We may need to verify your identity before completing certain requests.

Some requests may be limited where we need to retain information to comply with legal obligations, complete an existing transaction, establish or defend legal rights, prevent fraud, or for another reason permitted by applicable law.

Privacy rights are not absolute and may be subject to exceptions or limitations under applicable law.

15. Cookies

www.libroo.ae uses cookies and similar technologies.

Essential cookies — Certain cookies are necessary to operate the website, including for:

• login and authentication;
• security;
• shopping cart functionality;
• account functionality; and
• basic website operation.

These cookies cannot always be disabled without affecting the operation of the website.

Analytics and optional cookies — Where enabled, Libroo may use analytics tools such as Google Analytics to understand how visitors use the website and improve our service.

Where consent is required by applicable law, optional analytics or other non-essential cookies will only be activated after you provide that consent.

You can manage your preferences using the Cookie Settings option on www.libroo.ae.

You may change or withdraw your optional-cookie preferences through Cookie Settings where this functionality is available. You may also control certain cookies through your browser settings.

Rejecting optional cookies should not prevent you from using the core Libroo service.

16. Third-Party Websites and Services

www.libroo.ae may contain links to third-party websites or services.

Libroo is not responsible for the privacy practices of third parties. We recommend reviewing the privacy policy of any third-party website or service before providing information to it.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• our service;
• our technology;
• our service providers; or
• applicable legal or regulatory requirements.

The latest version will always be published on www.libroo.ae.

Where a change materially affects how we use personal information, we may also notify affected customers by email or through another appropriate communication.

Where required by applicable law, we will seek new or renewed consent before making a material change to consent-based processing, including relevant processing of children’s information.

18. Contact Us

For questions, requests or concerns regarding privacy or personal information, please contact:

• LIBROO ARC FZC
• Premises No. B.C. 1308693
• AFZ C1 Building
• United Arab Emirates
• Email: support.libroo@gmail.com

You may also use this email address to request access, correction or deletion, withdraw relevant consent, or raise a concern relating to information about your child.

For general information about Libroo, please visit www.libroo.ae.

If you have any questions about this privacy policy or how we handle your data, please reach out to us at support.libroo@gmail.com. We're happy to help.