Privacy Policy

1. Introduction and scope

This Privacy Policy applies to all personal data that Vecturaa processes about visitors to the website www.vecturaa.com (the “Website”), prospective and existing clients, individuals who contact us or submit enquiries, recipients of our communications, and applicants for roles with us.

By using the Website or providing us with your personal data, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Website or provide us with personal data.

This Privacy Policy should be read together with our Cookie Policy and our Terms & Conditions.

2. Who we are (data controller)

Vecturaa is a digital marketing studio with its office at Street 65c, M21, Villa 15, Mirdif, Dubai, 50819, United Arab Emirates, and operates the Website. For the purposes of applicable data protection law, Vecturaa is the “controller” that determines the purposes and means of processing your personal data.

If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us at support@vecturaa.com.

3. Definitions

In this Privacy Policy:

• •“Personal data” means any information relating to an identified or identifiable natural person.
• •“Processing” means any operation performed on personal data, such as collection, recording, storage, use, disclosure, or deletion.
• •“Controller” means the party that determines how and why personal data is processed.
• •“Processor” means a party that processes personal data on behalf of the controller.
• •“Consent” means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data.

4. The personal data we collect

We may collect and process the following categories of personal data:

• •Identity and contact data: your name, email address, telephone number, company or organisation name, job title, and website.
• •Enquiry and communication data: the content of messages, enquiries, audit requests, and any correspondence you send to us by form, email, telephone, or WhatsApp.
• •Technical data: internet protocol (IP) address, browser type and version, device type, operating system, time-zone setting, and other technology identifiers on the devices you use to access the Website.
• •Usage data: information about how you use the Website, including pages visited, links clicked, referring pages, and the dates and times of your visits.
• •Marketing and preferences data: your preferences in receiving communications from us and your language preference.
• •Recruitment data: where you apply for a role, your CV, employment history, and any information you choose to provide.

5. How we collect your personal data

We collect personal data through the following means:

• •Directly from you, when you complete a form, request an audit, email or call us, message us on WhatsApp, or apply for a role.
• •Automatically, as you interact with the Website, through cookies, server logs, and similar technologies (see our Cookie Policy).
• •From third parties, such as analytics providers and our infrastructure or email-service providers, acting on our behalf.

6. Purposes for which we use your personal data

We use your personal data for the following purposes:

• •To respond to your enquiries, provide information you request, and prepare proposals.
• •To provide, operate, maintain, and improve the Website and our services.
• •To manage our relationship with you, including administering contracts and communications.
• •To send you marketing communications where you have consented or where we are otherwise permitted to do so, and to measure their effectiveness.
• •To understand how the Website is used so we can improve content, performance, and user experience.
• •To manage recruitment and assess applications.
• •To protect the security and integrity of the Website and our business, to prevent fraud or misuse, and to enforce our Terms & Conditions.
• •To comply with our legal and regulatory obligations and to establish, exercise, or defend legal claims.

7. Legal bases for processing

We rely on one or more of the following legal bases when processing your personal data, in a manner consistent with the PDPL:

• •Consent: where you have given clear consent for a specific purpose, such as receiving marketing communications. You may withdraw your consent at any time.
• •Performance of a contract: where processing is necessary to enter into or perform a contract with you, or to take steps at your request before entering into a contract.
• •Legitimate interests: where processing is necessary for our legitimate interests (such as operating, securing, and promoting our business), provided your interests and fundamental rights do not override those interests.
• •Legal obligation: where processing is necessary to comply with a legal or regulatory obligation.

8. Cookies and similar technologies

The Website uses cookies and similar technologies to function correctly, remember your preferences, and analyse usage. For full details of the cookies we use and how to control them, please see our Cookie Policy.

9. Marketing communications

Where permitted, we may send you communications about our services, insights, and offers. You can opt out at any time by contacting us at support@vecturaa.com or by using any unsubscribe mechanism provided in the communication. Opting out of marketing does not affect communications relating to services you have requested.

10. Disclosure of your personal data

We do not sell your personal data. We may share your personal data with:

• •Service providers and processors who perform functions on our behalf, including hosting and infrastructure providers (such as Vercel, Render, and Supabase), email delivery providers, and analytics providers, all of whom are bound by confidentiality and data-protection obligations.
• •Professional advisers, such as lawyers, accountants, and auditors, where necessary.
• •Government, regulatory, or law-enforcement authorities, where required by law or to protect our rights.
• •A successor entity in connection with a merger, acquisition, or reorganisation of our business, subject to appropriate confidentiality undertakings.

11. International transfers of personal data

Some of our service providers store and process personal data on servers located outside the UAE, including in the United States and the European Union. Where we transfer personal data outside the UAE, we take reasonable steps, consistent with the PDPL, to ensure that an adequate level of protection is provided, whether through the recipient jurisdiction’s data-protection framework or appropriate contractual safeguards.

12. Data retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements, and to resolve disputes or enforce our agreements. The criteria we use to determine retention periods include the nature of the data, the purpose of processing, and applicable legal requirements. When personal data is no longer required, we securely delete or anonymise it.

13. Data security

We implement appropriate technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include access controls, encryption in transit, and the use of reputable infrastructure providers. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

14. Your rights

Subject to applicable law and certain conditions and exceptions, you have the following rights in relation to your personal data:

• •The right to be informed about how your personal data is processed.
• •The right to access the personal data we hold about you.
• •The right to request correction of inaccurate or incomplete personal data.
• •The right to request deletion of your personal data.
• •The right to restrict or object to certain processing, including direct marketing.
• •The right to request the transfer of your personal data (data portability), where applicable.
• •The right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• •The right to lodge a complaint with the competent supervisory authority.

15. How to exercise your rights

To exercise any of your rights, please contact us at support@vecturaa.com. We may need to verify your identity before responding. We will respond to your request within the timeframe required by applicable law. There is normally no fee, although we may charge a reasonable fee or decline to act where a request is manifestly unfounded or excessive.

16. Complaints

If you have a concern about how we handle your personal data, we encourage you to contact us first so we can address it. You also have the right to lodge a complaint with the UAE Data Office or other competent authority responsible for data protection in the United Arab Emirates.

17. Children’s privacy

The Website and our services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

18. Third-party links

The Website may contain links to third-party websites, plug-ins, and services. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.

19. Automated decision-making

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing, including profiling.

20. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The current version will always be posted on this page with a revised “Last updated” date. We encourage you to review it periodically.

21. Contact us and governing law

If you have any questions, requests, or complaints regarding this Privacy Policy or our processing of your personal data, please contact us at support@vecturaa.com. This Privacy Policy is governed by and construed in accordance with the laws of the United Arab Emirates.