Privacy Policy

How Apex Digital collects, uses and looks after the information you give us through this website, our forms and WhatsApp.

Introduction

This privacy policy explains what Apex Digital ("we", "us" or "our") does with your personal data when you visit apexagency.ai, send us an enquiry or message us on WhatsApp. Apex Digital is the trading name of Apex Digital - FZCO, licensed in Dubai, United Arab Emirates. Our address is DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai. We are the controller of the data described here.

We process personal data under the UAE Personal Data Protection Law, Federal Decree Law No. 45 of 2021 (the PDPL). If you are visiting from the European Union or the United Kingdom, the GDPR or the UK GDPR also applies to you, and this policy covers the extra rights those laws give you. It was last updated on 9 October 2026.

What we collect

Information you give us

The plan enquiry form on this site asks for:

  • Your name
  • Your WhatsApp number
  • Your email address
  • Your website address, if you have one
  • Your business and what it does
  • The services you want covered
  • The districts of Dubai you work in
  • The plan you are looking at
  • What you need from us
  • Your message

If you message us on WhatsApp, we receive your phone number, the profile name you use on WhatsApp, the messages you send and anything you attach to them. If you become a client, we also hold the details needed to run your plan and invoice you, and our terms of service explain how we handle your own customers' data on your behalf.

Information collected automatically

Webflow, which hosts this site, keeps server logs of the IP address, browser and pages requested on each visit. Those logs exist to keep the site secure and are not used to build a profile of you.

If you accept analytics cookies, Google Analytics 4 records the pages you view, how you arrived, your device and browser, your approximate location worked out from your IP address, and how long you stay. None of this runs until you say yes. The cookies section below lists exactly what is set.

Why we use it, and on what basis

We use your data to:

  • Answer your enquiry, send you the search numbers for your districts, and prepare a quote or a Client Services Agreement. The PDPL allows this because it is a step you have asked us to take before entering a contract, and for EU and UK visitors the lawful basis is the same.
  • Deliver your plan and invoice you once you are a client, which is the performance of our contract with you.
  • Keep accounting and VAT records, which the law requires us to do.
  • Keep the site secure, which is necessary to run it and, for EU and UK visitors, is our legitimate interest.
  • See which pages people read, so we can improve the site. This happens only with your consent to analytics cookies.
  • Send you marketing messages, only if you have asked for them, and you can stop them at any time.

We do not sell your data, we do not buy contact lists, and we do not make decisions about you by automated means.

Who we share it with

Your data is seen by the people at Apex Digital who need it to reply to you or run your plan, and by the providers below, each of which processes it only on our instructions:

  • Webflow, which hosts this site and stores the enquiry form submissions. Webflow keeps its data on servers in the United States.
  • Google, for Google Analytics 4, only where you have agreed to analytics cookies. Google processes this data in the United States and elsewhere.
  • WhatsApp Business, run by Meta, when you choose to message us. Your messages travel through WhatsApp under Meta's own terms and privacy policy, which you accepted when you set up WhatsApp. We do not add you to broadcast lists or send you marketing on WhatsApp unless you have asked for it.
  • Our accountant and other professional advisers, where invoices and records require it.
  • A court, regulator or authority in the UAE, where the law requires us to disclose data.

We do not take payments on this site. If we add a new tool that handles your data, this policy is updated before it goes live.

Transfers outside the UAE

Webflow and Google store data outside the United Arab Emirates, mainly in the United States. The PDPL allows a transfer abroad where the destination protects data to an adequate standard or where a contract commits the recipient to the safeguards the law requires, and we rely on the data processing terms each provider offers. For EU and UK visitors, those same providers rely on the standard contractual clauses approved under the GDPR and UK GDPR.

How long we keep it

  • Enquiries that do not become a plan: 12 months after our last contact with you, then deleted.
  • Client records, invoices and the Client Services Agreement: for the life of your plan and for as long afterwards as UAE tax and accounting law requires us to keep records, which can be up to 7 years.
  • WhatsApp conversations: kept on our business phone while the enquiry or the plan is active, then deleted on the same timetable as the records above.
  • Analytics data: kept in Google Analytics for no longer than 14 months, which is the longest it allows.
  • Your cookie choice: 6 months, after which we ask again.

Cookies

Cookies are small text files a website stores on your device. We sort ours into 3 groups, and nothing outside the first group is set until you agree to it.

Strictly necessary

These keep the site working: page delivery, security and the enquiry form. They include one cookie of our own, fp_consent, which remembers the choice you make about cookies and the date you made it. These run without consent because the site cannot work without them.

Analytics

Google Analytics 4 counts visits and shows us which pages and services people read. We do not use analytics data for advertising. Until you agree, Google Consent Mode holds analytics storage in a denied state, so no analytics cookie is written to your device.

Marketing

This group is for advertising measurement, such as a pixel that tells an ad platform that a visit came from one of our adverts. At launch there is nothing in it. If we add a marketing tool later, it is listed in the table below first, and it only runs if you turn this group on.

The cookies we use

CookieSet byWhat it doesHow long it lasts
fp_consentApex DigitalRemembers your cookie choice and the date you made it. Strictly necessary6 months
Webflow session and form cookiesWebflowPage delivery, security and submitting the enquiry form. Strictly necessarySession
_ga, _ga_*GoogleGoogle Analytics 4. Counts visits and tells one visit apart from another. Analytics, set only with your consentUp to 2 years
Marketing cookiesNone at launchAdvertising measurement, if we add it later. Set only with your consent, and listed here before it goes liveStated here when added

Changing your mind

You choose when you first arrive, and you can change that choice whenever you like using the Cookie settings link at the bottom of every page.

Turning a group off also deletes the cookies it had already set. If you make no choice at all, only the strictly necessary cookies are used. We keep a record of what you chose and when, which is how we show that your consent was freely given, and we ask again after 6 months.

You can also control cookies in your browser. These links explain how: Chrome, Firefox, Safari, Edge. To opt out of Google Analytics across all websites, visit https://tools.google.com/dlpage/gaoptout.

Your rights

Under the PDPL you have the right to:

  • Ask for a copy of the personal data we hold about you, and for details of how we use it
  • Have inaccurate or incomplete data corrected
  • Have your data deleted, where we no longer need it or you withdraw consent
  • Restrict or object to how we use it, including an objection to direct marketing at any time
  • Receive the data you gave us in a structured, machine readable form, and have it sent to another provider where that is technically possible
  • Withdraw consent you have given, without affecting what was done before you withdrew it
  • Not be subject to a decision made solely by automated means, which we do not do in any case
  • Complain to the UAE Data Office, the regulator for the PDPL

If you are in the EU or the UK, the GDPR or UK GDPR gives you the same rights, and you can also complain to your local data protection authority, which for the UK is the Information Commissioner's Office at ico.org.uk.

To use any of these rights, send us a message through the contact form. We may ask you to confirm it is you before we act on a request. We reply within 1 month, and sooner where we can.

Withdrawing consent

Where we rely on your consent, you can withdraw it at any time. That does not affect anything done lawfully before you withdrew it. To withdraw consent or opt out, you can:

  • Use the Cookie settings link at the bottom of any page to change or withdraw your cookie consent
  • Tell us on WhatsApp or through the contact form
  • Use the unsubscribe link in any marketing email we send

Children

This site and our services are for businesses. They are not directed at anyone under 18 and we do not knowingly collect personal data from children. If you believe a child has sent us their data, tell us through the contact form and we will delete it.

How we keep it safe

This site is served over HTTPS and hosted by Webflow. Enquiries and WhatsApp conversations are seen only by the people at Apex Digital who need them, and access to the accounts that hold them is protected by passwords. No system is perfectly secure, so if we learn of a breach that affects you we tell you and the UAE Data Office as the PDPL requires.

Changes to this policy

We update this policy when the way we handle data changes, and the date at the top tells you when that last happened. If a change affects you as a client, we tell you directly. Please check back from time to time.

Contact

If you have a question about this policy, want to use any of the rights above or want to complain, send us a message through the contact form or on WhatsApp from any button on this site. We reply within 1 working day on ordinary questions, and within 1 month on requests about your rights.