Privacy Policy
1. Introduction
Ahdaf Digital (“we”, “us”, “our”) operates the website
https://ahdafdigital.ae
(the “Website”). We are committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store, and protect personal data of
visitors, leads, subscribers, and customers, in compliance with the General Data Protection
Regulation (EU GDPR) and applicable laws.
2. Controller and Contact
The controller responsible for the processing of personal data via the Website is:
Ahdaf Digital
Dubai, Media City (DMC) – Office No. 246
P.O. Box 0245
United Arab Emirates
Email:
info@ahdafdigital.ae
If you are resident in the EU or prefer to exercise your rights under EU law,
you may use the same contact details above for any data-protection related requests.
3. Data We Collect
Depending on how you use the Website, we may collect the following categories of
personal data:
-
Identification & contact data – e.g. name, email address, phone number,
company name, job title (when you fill contact, quote, inquiry, or lead forms).
-
Communication data – content of messages you submit through forms and
email correspondence.
-
Marketing data – newsletter subscription status, preferences, and
campaign interactions.
-
Technical & usage data – IP address, device and browser information,
access times, pages visited, referral URL, cookie identifiers.
-
Lead / customer data – service preferences, project details,
invoicing-relevant information (for paying clients), where applicable.
4. Purposes & Legal Bases
We process personal data for the following purposes and on the following legal bases:
-
Responding to inquiries and contact requests
To process and answer your contact, quote, inquiry, or lead requests.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and/or Art. 6(1)(f) GDPR
(legitimate interest in responding to inquiries).
-
Operating, securing, and improving the Website
To ensure the Website functions properly, to maintain security, and to improve user experience.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
-
Sending newsletters and marketing communications
To send newsletters or other marketing content where you have opted in.
Legal basis: Art. 6(1)(a) GDPR (consent).
-
Analytics, performance measurement, and marketing tracking
To understand how the Website is used, measure performance, and support marketing
activities, but only after consent has been given for non-essential cookies or tools.
Legal basis: Art. 6(1)(a) GDPR (consent) or, for strictly necessary analytics,
Art. 6(1)(f) GDPR (legitimate interest).
-
Compliance with legal obligations and defence of claims
To comply with legal requirements (e.g. invoicing, tax) and to assert or defend legal claims.
Legal basis: Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR.
5. Contact Forms & Lead Capture
When you fill in a contact, quote, inquiry or lead form on the Website, we collect
the data you provide (for example: name, email address, phone number, company name,
and your message).
The form clearly states that the purpose of this data collection is to process your request
and communicate with you.
The legal basis for this processing is typically pre-contractual measures
(Art. 6(1)(b) GDPR) and/or our legitimate interest in handling inquiries
(Art. 6(1)(f) GDPR).
If an optional marketing consent checkbox is present, it is never pre-ticked and is only valid
if you actively select it.
6. Newsletter & Email Marketing
If you subscribe to a newsletter or otherwise opt in to receive marketing communications
from us:
-
Processing is based on your explicit consent (Art. 6(1)(a) GDPR).
-
Every marketing email includes an easy-to-use unsubscribe link.
-
If you unsubscribe, we stop sending further marketing emails. We may delete or anonymise
your data, or retain only minimal information in a suppression list to ensure your
objection is respected.
7. Cookies and Tracking Technologies
We use cookies and similar technologies on the Website.
-
Essential cookies – required for basic site functionality and security;
these are set without consent and are necessary for the Website to operate.
-
Analytics and marketing cookies – used for usage tracking, performance
analysis, and advertising or remarketing purposes; these are only set after you have
given explicit consent via our cookie banner or consent mechanism.
You can view detailed information about cookie categories, their purposes, retention periods,
and providers in our
Cookie Policy.
A persistent "Cookie Settings" link in the footer allows you to withdraw
or change your consent at any time. You can also manage or delete cookies via your browser
settings.
8. Third-Party Processors & Data Transfers
We may use third-party service providers (processors) to support our business operations,
for example:
- Hosting and infrastructure providers.
- CRM and email-marketing platforms.
- Analytics tools.
- Booking or contact form tools.
We only work with trusted providers and, where required by GDPR (Art. 28), we have concluded
Data Processing Agreements (DPAs) with them.
If personal data is transferred outside the European Economic Area (EEA), we ensure an
adequate level of protection, for example through an EU adequacy decision or the use
of Standard Contractual Clauses (SCCs).
9. Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected
or as required by law. Typical retention periods may include:
-
Contact and lead data: retained for up to 24 months after the last
interaction, unless you request earlier deletion and no legal retention obligations apply.
-
Newsletter subscriber data: retained until you unsubscribe or withdraw
your consent; suppression list entries may be kept for a longer period to respect your
objection.
-
Analytics data: retained according to the configuration of the relevant
analytics tools (for example, typically 14–24 months).
-
Contract and invoicing data: retained for the statutory retention period
(e.g. 6–10 years) for tax and commercial law compliance.
After the applicable retention period expires, personal data is deleted or anonymised.
10. Your Rights
Under applicable data protection laws, including the GDPR, you have the following rights
with respect to your personal data:
-
Right of access – to request a copy of the personal data we hold about you.
-
Right to rectification – to correct inaccurate or incomplete data.
-
Right to erasure (“right to be forgotten”) – to request deletion of your
personal data, unless we are legally obliged to retain it (for example, for invoicing
purposes).
-
Right to restriction of processing – to request that processing of your
data be limited under certain conditions.
-
Right to data portability – to receive your personal data in a structured,
commonly used and machine-readable format, or to have it transmitted to another controller.
-
Right to object – to object to the processing of your data, in particular
for direct marketing or certain analytics based on legitimate interests.
-
Right to withdraw consent – where processing is based on your consent,
you may withdraw it at any time, without affecting the lawfulness of processing prior
to withdrawal.
To exercise these rights, please contact us at:
info@ahdafdigital.ae.
You also have the right to lodge a complaint with a data-protection supervisory authority,
in particular in the EU Member State of your residence, place of work, or place of the
alleged infringement.
11. Data Security
We implement appropriate technical and organisational measures to protect personal data
against unauthorized or unlawful access, loss, misuse, or disclosure. These measures include,
for example, HTTPS encryption, access controls, and regular security reviews of our systems
and infrastructure.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices,
tools, or legal obligations. The latest version will always be available on the Website.
If changes are significant, we will highlight them in an appropriate way (for example via
a notice on the Website).