سياسة الخصوصيةPrivacy Policy

1. Who we are

This Privacy Policy explains how B5 Marketing FZ-LLC ("B5 Marketing", "we", "us" or "our") collects, uses, shares and protects personal data. We are the controller of the personal data described in this policy.

This policy applies to our corporate website, b5marketing.ae, and to your dealings with B5 Marketing FZ-LLC directly (for example as a business contact, partner, supplier or client). Personal data collected through the YallaWeb website is also controlled by B5 Marketing FZ-LLC and is described in the YallaWeb Privacy Policy.

2. Laws that apply

We process personal data in line with:

• UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and its implementing regulations; and
• Regulation (EU) 2016/679 (the "GDPR") and, where relevant, the UK GDPR, when they apply to our processing, for example when we process the personal data of people in the European Economic Area or the United Kingdom in connection with offering them services.

Where the two frameworks set different standards, we aim to apply the one that gives you more protection.

3. Personal data we collect

• Identity and contact data: your name, job title, company name, email address, phone or WhatsApp number.
• Communications: the content of emails, WhatsApp messages and calls you exchange with us.
• Client and business data: details needed to provide and invoice our services, such as company name, trade licence details, billing address, and the content and brand assets you provide.
• Technical data: when you visit this website, our hosting provider automatically records server logs, including your IP address, browser type, the pages requested, the referring page and the date and time of the request.
• Advertising account data: when we manage Google or Meta campaigns for a client, we access campaign settings and aggregated performance data in the client's advertising accounts.

We do not ask for special categories of personal data (such as health, religious or biometric data) and ask you not to send them to us.

4. How we use personal data and our legal bases

We do not make decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects.

5. Cookies and similar technologies

This website does not set analytics or advertising cookies, and it does not use tracking pixels.

The website loads its typefaces from Google Fonts. When a page loads, your browser connects to Google's servers, which receive your IP address and browser information. Google LLC processes this data as described in the Google Privacy Policy.

If we add analytics or advertising technologies in future (for example Google Analytics or the Meta Pixel), we will ask for your consent before setting any non-essential cookies, where the law requires it, and we will update this policy first.

6. Who we share personal data with

We share personal data only where needed, and never sell it. Recipients may include:

• Service providers acting on our behalf, such as website hosting, email, cloud storage and accounting providers, under contracts that require them to protect the data.
• Communication platforms you choose to use with us, such as WhatsApp (operated by Meta), which process your data under their own terms and privacy policies.
• Advertising platforms, such as Google and Meta, when we run campaigns for a client.
• Professional advisers, such as lawyers, auditors and accountants, bound by confidentiality.
• Authorities, including the Ras Al Khaimah Economic Zone, the Federal Tax Authority, courts and law enforcement, where the law requires it.
• A buyer or successor of all or part of our business, who will be bound by this policy.

7. International transfers

Some of our service providers store or process data outside the UAE, for example in the European Union or the United States. When personal data leaves the UAE, we rely on the transfer conditions in the PDPL, such as transfers to countries with an adequate level of protection or under contractual safeguards.

When the GDPR applies and personal data is transferred outside the EEA or the UK, we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses (or the UK equivalent), with additional safeguards where needed.

8. How long we keep personal data

• Enquiries that do not lead to a contract: up to 24 months after our last contact.
• Client records, contracts and invoices: for the duration of the relationship and at least five years after it ends, or longer where UAE commercial, tax or free zone rules require.
• Website server logs: up to 90 days, unless needed to investigate a security incident.
• Marketing preferences: until you withdraw your consent or unsubscribe.

When data is no longer needed, we delete or anonymise it.

9. Your rights

Depending on the law that applies, you have the right to:

• be informed about how we process your personal data and access a copy of it;
• have inaccurate or incomplete data corrected;
• have your data erased, where we no longer need it or process it unlawfully;
• restrict our processing in certain circumstances;
• object to processing based on legitimate interests, and to direct marketing at any time;
• receive your data in a structured, machine-readable format and have it transferred to another controller (data portability);
• not be subject to decisions based solely on automated processing that significantly affect you;
• withdraw your consent at any time, without affecting processing carried out before the withdrawal.

To exercise a right, email info@b5marketing.ae with the subject line "Data request". We may need to verify your identity. We respond within 30 days; under the GDPR we may extend this by up to two further months for complex requests, and we will tell you if we do.

Complaints

If you are unhappy with how we handle your data, please contact us first so we can try to resolve it. You also have the right to complain to the UAE Data Office or, if the GDPR applies to you, to the data protection supervisory authority in the country where you live or work, or where the alleged infringement took place.

10. When we act for our clients

When we build websites, manage enquiries or run advertising for a client, we may process personal data of that client's own customers (for example contact form submissions or advertising leads). In those cases the client is the controller and we act as its processor, following its documented instructions. Questions about that data should go to the business concerned. Clients can request our data processing terms at info@b5marketing.ae.

11. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted HTTPS connections, access controls limited to people who need the data, and reputable service providers. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authorities of a personal data breach where the law requires.

12. Children

Our website and services are intended for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

13. Changes to this policy

We may update this policy to reflect changes in the law or in how we work. The current version is always on this page, with its effective date. If we make material changes, we will highlight them on this website and, where appropriate, tell you directly.

14. Contact us

For any question about this policy or your personal data, contact: