1. Introduction
DESIRO Advertising ("we", "our", or "us") is a full-service digital marketing and advertising agency headquartered at Business Village, Port Saeed, Dubai, UAE. We are committed to protecting the privacy and security of your personal information.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our services. Please read this policy carefully. By using our website or services you consent to the practices described herein.
2. Information We Collect
Information You Provide
- Contact form submissions: name, company name, email address, phone number, and message content.
- Service enquiries: details about your business, budget range, and marketing objectives.
- Communication records: emails, WhatsApp messages, and phone call notes when you contact our team.
- Account credentials if you access any client portal or reporting dashboard we provide.
Information Collected Automatically
- IP address, browser type and version, operating system, and device identifiers.
- Pages visited, time spent on each page, referring URL, and exit pages.
- Cookies, pixel tags, and similar tracking technologies (see our Cookie Policy for full details).
- Aggregated analytics data through Google Analytics 4 and similar tools.
Information from Third Parties
- Business contact data obtained from LinkedIn or other professional networks in the context of business development.
- Ad platform data (Meta, Google, TikTok, etc.) relating to campaigns we manage on your behalf.
- CRM data you share with us to facilitate marketing or integration services.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To respond to your enquiries and provide the services you have requested.
- To deliver, manage, and optimise digital marketing campaigns on your behalf.
- To send you service-related communications, performance reports, and updates.
- To improve our website, products, and service offerings through analytics.
- To comply with legal obligations, including anti-money laundering and tax requirements.
- To protect the security and integrity of our systems and services.
- To send you marketing communications about our services where you have given consent or where we have a legitimate interest.
- To fulfil contractual obligations under any service agreement we hold with you.
4. Legal Basis for Processing (GDPR)
Where the General Data Protection Regulation (GDPR) or UK GDPR applies, we process your personal data on the following legal grounds:
- Contract performance: processing is necessary to deliver services you have engaged us for.
- Legitimate interests: where our interests in operating a business do not override your rights.
- Consent: where you have clearly opted in to receive marketing communications.
- Legal obligation: where processing is required to comply with applicable law.
5. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:
- Client service data is retained for the duration of our engagement plus 7 years for audit and legal purposes.
- Marketing enquiry data is retained for up to 2 years from the date of last contact.
- Website analytics data is retained for 26 months in line with Google Analytics default settings.
- Email correspondence is retained for 5 years.
When data is no longer required, we securely delete or anonymise it in accordance with our internal data disposal procedures.
6. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data. We may share your information with the following categories of third parties only to the extent necessary:
- Advertising platforms (Meta, Google, TikTok, Snapchat, LinkedIn) to run campaigns on your behalf.
- CRM and marketing automation providers (e.g., HubSpot, Salesforce) used to manage client communications.
- Analytics providers (e.g., Google Analytics) to help us understand website usage.
- Payment processors to facilitate invoicing and payments.
- Professional advisers including lawyers, accountants, and auditors under confidentiality obligations.
- Regulatory or law enforcement bodies where required by applicable law.
- Prospective buyers in the event of a merger, acquisition, or sale of business assets.
All third-party service providers are contractually required to handle your data in compliance with applicable data protection laws and our instructions.
7. International Data Transfers
DESIRO Advertising operates from Dubai (UAE), Lahore (Pakistan), and London (UK). Your personal data may be transferred to and processed in countries outside your own. Where such transfers occur from the European Economic Area (EEA) or UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission or UK equivalent measures.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right of access: to request a copy of the personal data we hold about you.
- Right to rectification: to request correction of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): to request deletion of your data in certain circumstances.
- Right to restriction of processing: to request that we limit how we use your data.
- Right to data portability: to receive your data in a structured, machine-readable format.
- Right to object: to object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at info@desiroadvertising.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
9. Cookies
Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse site usage. For full details of the cookies we use and how to manage them, please see our .
10. Data Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include SSL/TLS encryption, access controls, staff training, and regular security assessments.
While we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but will notify you and the relevant authorities without undue delay in the event of a data breach that is likely to result in a risk to your rights and freedoms.
11. Children's Privacy
Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete it.
12. Links to Third-Party Websites
Our website may contain links to third-party websites. We have no control over, and are not responsible for, the privacy practices of those sites. We encourage you to review the privacy policies of any third-party site you visit.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will indicate the date of the latest revision at the top of this page. Continued use of our website or services after any changes constitutes your acceptance of the revised policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:
DESIRO Advertising
Business Village, Port Saeed, Dubai, UAE
Email: info@desiroadvertising.com
Phone: +971 50 418 3946