Privacy Policy
Last updated 2 July 2026
1. Who we are
This website is operated by Web Box Marketing Management L.L.C ("Webbox", "we", "us", "our"), a limited liability company licensed in Dubai, United Arab Emirates (Trade License No. 1559063).
- Registered address: Office 1002-029, Aspin Commercial Building, Trade Centre First, Dubai, United Arab Emirates
- Contact for privacy matters: sam@webbox.ae
- General contact: sam@webbox.ae
We are the data controller responsible for the personal data described in this policy.
2. Scope and the law we follow
We process personal data in accordance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and its implementing regulations, together with other applicable UAE laws including the Consumer Protection Law (Federal Law No. 15 of 2020) and the Cybercrime Law (Federal Decree-Law No. 34 of 2021).
This policy applies to personal data we collect through this website, our booking and messaging channels, and related business communications.
3. What personal data we collect
We collect only what we need to respond to you and run our services.
Information you give us directly
- Enquiry and contact forms: your name, email address, phone number, company name, and the content of your message.
- Bookings: when you schedule a call, our booking provider collects your name, email address, phone number, your selected time, and any answers to booking questions.
- Messaging: if you contact us via WhatsApp or similar channels, we receive your phone number, profile name, and the content of your messages.
- Correspondence: any information you include when you email or otherwise communicate with us.
Information collected automatically
- Usage and device data: via analytics cookies and similar technologies, pages viewed, referring source, approximate location (derived from IP), browser and device type, and interaction data.
- Search performance data: aggregated data about how visitors reach the site from search engines.
We do not intentionally collect sensitive personal data (such as data revealing health, religious or political beliefs, or biometric data) through this website. Please do not send us sensitive personal data unless we specifically request it.
4. How and why we use your data (and our legal basis)
We use your personal data for the following purposes, each with its legal basis under the PDPL:
- Responding to your enquiries and providing quotes, necessary to take steps at your request or to perform or negotiate a contract.
- Managing bookings and consultations, necessary to perform or negotiate a contract.
- Communicating with you about our services, your consent and/or our legitimate business interests.
- Operating, securing and improving the website, our legitimate business interests.
- Analytics and understanding site performance, your consent, where required for non-essential cookies.
- Meeting legal, tax and regulatory obligations, compliance with applicable UAE law.
Where we rely on consent (for example, non-essential cookies or marketing messages), you can withdraw it at any time, see Section 9.
We do not sell your personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects about you.
5. Cookies and analytics
We use cookies and similar technologies to make the site work and to understand how it is used:
- Strictly necessary cookies, required for the site to function.
- Analytics cookies, we use Google Analytics 4 to measure traffic and usage. These are set only where permitted by your cookie choices.
You can control cookies through your browser settings, and through our cookie controls where available. Blocking some cookies may affect how the site works.
6. Who we share your data with
We share personal data only with service providers that help us operate, and only as needed:
- Vercel Inc., website hosting and file storage. See the Vercel privacy notice.
- MongoDB, Inc., managed cloud database (MongoDB Atlas), where enquiry and booking data is stored. See the MongoDB privacy notice.
- Google LLC, web analytics (Google Analytics 4) and search performance data (Google Search Console). See the Google privacy notice.
- Cal.com, Inc., scheduling and bookings. See the Cal.com privacy notice.
- WATI and Meta Platforms, Inc., WhatsApp Business messaging via the WhatsApp Business API. See the WATI privacy notice and the WhatsApp privacy notice.
- Meta Platforms, Inc., where you interact with our official social pages. See the Meta privacy notice.
Each provider processes data on our instructions as a processor, or under its own responsibility as a controller, in accordance with its own privacy notice. We may also disclose data where required by law, regulation, court order, or a competent UAE authority.
7. International transfers
Some of our service providers store or process data on servers outside the UAE (for example, in the United States or the European Union). Where we transfer personal data outside the UAE, we take the steps required by the PDPL to ensure an appropriate level of protection, including relying on jurisdictions recognised as providing adequate protection, or putting appropriate contractual safeguards in place with the recipient.
8. How long we keep your data
We keep personal data only for as long as necessary for the purpose it was collected:
- Enquiries that don't become clients: up to 24 months, then deleted or anonymised.
- Client and booking records: for the duration of our relationship and for as long as required afterwards to meet legal, tax and accounting obligations under UAE law.
- Analytics data: retained per our analytics provider's retention settings.
9. Your rights
Subject to the conditions and exceptions in the PDPL, you have the right to:
- Be informed about how your data is processed;
- Access the personal data we hold about you and request a copy;
- Rectify inaccurate or incomplete data;
- Erase your data in certain circumstances;
- Restrict or object to certain processing;
- Data portability, receive your data in a structured, machine-readable format;
- Withdraw consent at any time, where processing is based on consent;
- Lodge a complaint with the UAE Data Office.
To exercise any of these rights, contact us at sam@webbox.ae. We will respond within the timeframe required by the PDPL. We may need to verify your identity before acting on a request.
10. How we protect your data
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including access controls, encryption in transit, and use of reputable infrastructure providers. No system is completely secure, but we work to protect your information and to notify the relevant authority and affected individuals of a data breach where required by the PDPL.
11. Children
This website and our services are directed at businesses and are not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
12. Third-party links
Our website may link to third-party sites (for example, published guest posts or client work). We are not responsible for the privacy practices of those sites; please review their own policies.
13. Changes to this policy
We may update this policy from time to time. The "Last updated" date shown on this page reflects when it was last revised. Material changes will be reflected here.
14. Contact us
For any question about this policy or your personal data:
Web Box Marketing Management L.L.C Office 1002-029, Aspin Commercial Building, Trade Centre First, Dubai, UAE Email: sam@webbox.ae