Privacy Policy

UNLOCKED Marketing is a Dubai-based creative content production and digital marketing studio. Our services may include creative direction, brand films, AI-assisted content production, social media content, advertising creative, campaign management, Meta Ads, TikTok Ads, Snapchat Ads, Google Ads, Shopify design and development, Amazon store services, marketplace content, strategy, and related consulting.

For privacy questions or requests, contact us through the Contact page on unlockedmarketings.com or through the official email address displayed there.

This Policy applies to personal data processed through:

• our website and its forms, chat tools, cookies, analytics, and embedded content;
• email, telephone, WhatsApp, social media direct messages, online meetings, and other business communications;
• inquiries, proposals, onboarding, client projects, account management, support, billing, and offboarding;
• events, campaigns, surveys, downloads, newsletters, and marketing communications; and
• data we process as an independent business or, where applicable, on a client’s documented instructions.

This Policy does not control the independent privacy practices of Meta, Google, TikTok, Snapchat, Shopify, Amazon, YouTube, payment providers, hosting providers, or other third-party services. Their own privacy notices apply when you use their platforms.

Information you provide directly

• Identity and contact details, such as your name, job title, company name, email address, telephone number, country, city, and preferred contact method.
• Inquiry and project information, such as your brand, website, social accounts, products or services, business objectives, target audience, budget range, timeline, requested services, creative brief, campaign information, and messages.
• Client and transaction records, such as proposals, contracts, statements of work, purchase orders, invoices, payment status, tax information, billing contacts, and service history. Full payment-card details are normally processed by payment providers and should not be stored by us unless specifically required and lawfully handled.
• Content and files, such as logos, photographs, videos, audio, product information, testimonials, customer data, ad account information, access credentials, brand guidelines, and other materials supplied for a project.
• Communications, such as emails, call notes, meeting recordings where disclosed, customer-support messages, feedback, approvals, revision requests, and complaints.
• Marketing preferences, including consent, unsubscribe requests, event registrations, and the topics you ask to receive.

Information collected automatically

• Device and technical data, such as IP address, browser type, operating system, device identifiers, language, approximate location derived from IP, and network information.
• Usage data, such as pages viewed, links clicked, referral source, time spent, session activity, form interactions, errors, and date and time of access.
• Cookie and similar-technology data, including essential, preference, analytics, and advertising identifiers where those tools are enabled.

Information from third parties

• Social and advertising platforms when you contact us, grant access, connect accounts, or authorise us to manage services.
• Public sources, directories, company websites, business networks, referrals, event organisers, and professional contacts.
• Service providers, payment providers, fraud-prevention providers, analytics providers, and technical vendors where legally permitted.

• To respond to inquiries, understand your requirements, qualify opportunities, schedule calls, prepare proposals, and take steps you request before entering a contract.
• To create, manage, deliver, review, revise, and support agreed services and projects.
• To manage accounts, platform access, approvals, timelines, communication, client relationships, invoicing, payment follow-up, and records.
• To operate, secure, troubleshoot, maintain, and improve the website, forms, systems, content, and user experience.
• To measure website and campaign performance, prepare reports, understand demand, and improve our services.
• To send service messages, project updates, operational notices, and responses that are necessary for our relationship with you.
• To send marketing communications where you have consented or where otherwise permitted by law, with a clear way to opt out.
• To prevent fraud, abuse, security incidents, unauthorised access, and violations of our rights or agreements.
• To comply with legal, regulatory, tax, accounting, audit, law-enforcement, court, or professional obligations.
• To establish, exercise, defend, or resolve legal claims and disputes.
• To evaluate or complete a business restructuring, merger, acquisition, financing, sale, or transfer, subject to appropriate safeguards.

Depending on the context, we process personal data based on one or more of the following grounds:

• your specific, clear, and informed consent;
• the need to take steps at your request before entering, amending, or ending a contract;
• the need to perform a contract with you or the organisation you represent;
• the need to comply with obligations under applicable UAE laws and regulations;
• the need to establish, exercise, or defend legal rights and claims; or
• another lawful ground permitted under applicable data-protection law.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before withdrawal or processing that remains necessary under another lawful ground.

The website may use cookies, pixels, tags, local storage, and similar technologies. These technologies may be operated by us or by third-party providers.

• Essential technologies are required for security, forms, navigation, session management, and core website functions.
• Preference technologies remember settings and improve usability.
• Analytics technologies help us understand traffic, engagement, performance, and errors.
• Advertising technologies may measure campaigns, attribute inquiries, build audiences, or support remarketing where enabled and lawfully permitted.

Where consent is required, non-essential analytics or advertising technologies should not activate until you have made a choice. You can manage preferences through the website’s cookie settings and through your browser. Blocking cookies may affect some features.

We do not sell personal data. We may disclose personal data only as reasonably necessary to:

• hosting, domain, security, cloud-storage, email, communications, CRM, project-management, analytics, advertising, video, design, AI, payment, accounting, and other service providers;
• freelancers, production partners, developers, media buyers, consultants, and subcontractors supporting a project under appropriate confidentiality and data-handling obligations;
• platforms such as Meta, Google, TikTok, Snapchat, Shopify, Amazon, YouTube, and related tools when you request or authorise services involving those platforms;
• professional advisers, insurers, auditors, accountants, and legal counsel;
• government, regulatory, law-enforcement, judicial, or tax authorities where disclosure is required or legally permitted;
• a potential buyer, investor, lender, successor, or transaction adviser in connection with a business transaction, subject to appropriate confidentiality safeguards; and
• other parties where you direct us, authorise us, or where disclosure is otherwise lawful.

Service providers are expected to use personal data only for the agreed purpose, protect it appropriately, and follow applicable laws and contractual requirements.

When a client gives us access to advertising accounts, stores, customer lists, analytics, websites, social accounts, or other systems, the client is responsible for ensuring that the data was collected lawfully and that the requested processing is authorised. We will process such data only for the agreed services, subject to the project agreement and applicable law.

Where we process personal data solely on a client’s documented instructions, the client generally determines the purposes and means of processing and remains responsible for its own notices, legal grounds, consent records, data-subject requests, and platform compliance. Additional data-processing terms may be required for particular projects.

Our providers, platforms, collaborators, or systems may process data outside the UAE. Where personal data is transferred internationally, we will use measures reasonably designed to comply with applicable UAE requirements, which may include adequacy-based transfers, contractual protections, explicit consent where appropriate, or transfers necessary to perform a contract or protect legal rights.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain records, resolve disputes, enforce agreements, and satisfy legal, tax, accounting, or regulatory requirements.

Retention periods vary according to the data type, project status, contractual commitments, risk, limitation periods, and legal obligations. When data is no longer required, we will delete, anonymise, or securely archive it, unless continued retention is legally permitted or required.

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure, misuse, or unauthorised access. Measures may include access controls, secure credentials, least-privilege access, encryption where appropriate, secure cloud services, backups, vendor reviews, confidentiality obligations, and incident-response procedures.

No internet transmission, email, cloud platform, or storage system is completely secure. You are responsible for using secure methods, protecting account credentials, enabling multi-factor authentication where available, and notifying us promptly of suspected unauthorised access.

Subject to applicable law and relevant exceptions, you may have the right to:

• request information about the personal data we process, the purposes, sharing, retention standards, and international-transfer safeguards;
• request access to or a copy of your personal data;
• request correction or completion of inaccurate or incomplete personal data;
• request deletion where the legal requirements are met;
• request restriction or suspension of processing in certain circumstances;
• object to direct marketing and related profiling;
• request transfer of data you provided in a structured and machine-readable format where legally applicable and technically feasible;
• withdraw consent where processing is based on consent;
• object to certain solely automated decisions that have legal or similarly significant effects; and
• submit a complaint to the relevant UAE data-protection authority where you believe your rights have been infringed.

To make a request, contact us through the website Contact page or official privacy/legal email displayed there. We may need to verify your identity and authority before acting. We may refuse or limit a request where permitted by law, including where it would adversely affect the rights or confidentiality of others, conflict with legal proceedings, or be excessive or unrelated.

You can unsubscribe from promotional email by using the unsubscribe link or contacting us. You may also object to direct marketing through our Contact page. Even after opting out of marketing, we may still send non-promotional messages about an inquiry, contract, project, payment, account, security issue, or legal matter.

We may use automation to organise inquiries, route messages, measure engagement, detect spam, or support workflow decisions. We do not intend to make decisions about individuals solely through automated processing where those decisions produce legal or similarly significant adverse effects, unless permitted by law and accompanied by appropriate safeguards.

Our website and services are intended for businesses, professionals, and individuals who are legally able to enter contracts. We do not knowingly collect personal data from children through the website. If you believe a child has submitted personal data without appropriate authorisation, contact us so we can review and delete it where required.

The website may link to or embed third-party websites, videos, maps, social feeds, portfolios, booking tools, or platforms. Those services may collect data independently. We do not control their privacy, security, content, or practices. Review their notices before providing personal data or using their features.

We may update this Privacy Policy to reflect changes in our services, technology, vendors, business operations, or legal requirements. The updated version will be posted on this page with a revised effective date. Material changes may also be communicated through the website or other appropriate channels.

For privacy questions, requests, or complaints, use the Contact page on unlockedmarketings.com or the official legal/privacy email displayed there. Please include enough information for us to understand and verify your request, but do not send passwords or unnecessary sensitive data.