​

Effective date: 04 April 2025  ·  Last updated: 24 June 2026

​

1. Who We Are

Curio:City (“we”, “us”, “our”) is an integrated media and marketing agency based in Dubai, UAE. This Policy explains how we handle personal data when you visit curiocity.ae or curiocity.cc (the “Website”) or contact us through it. For data collected through the Website, we are the data controller. We comply with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, “PDPL”) and, for visitors in the EU/UK/EEA, the GDPR.

​

2. Scope

This Policy covers the Website only. It does not cover the data we process when running advertising and marketing campaigns for clients — in those campaigns the client (advertiser) is the controller and we act as processor under a separate agreement.

If you arrived by clicking an ad (sometimes labelled with an ad exchange or DSP name), this Policy covers your visit to this Website only. Any targeting, audience, or conversion data tied to that ad is controlled by the advertiser and governed by the advertiser’s own privacy notice, not this Policy.

​

3. Service-Specific Policies

Some services we provide are governed by their own privacy policies, which apply in addition to this one for the service they cover. If you can’t locate the relevant policy, contact us (Section 11).

​

4. What We Collect and Why

​

• Information you give us — when you use our contact form or email us: your name, email, company, phone (if provided), and your message. We use it to respond to and follow up on your enquiry.

• Information collected automatically — limited technical data (IP address, browser/device type, referring page, date/time, pages viewed) logged by our hosting providers to keep the Website secure and running.

• Cookies — only strictly necessary cookies needed for the Website to function (Section 6).

​

We do not collect special-category data (e.g. health, religion, biometrics) through the Website; please don’t submit it via our forms. We don’t send marketing emails unless you’ve asked or would reasonably expect them, and you can opt out anytime.

Legal bases (GDPR): legitimate interests (responding to enquiries; running and securing the Website), consent (where given, e.g. form submissions), and legal obligation (where the law requires).

​

5. How We Share Data

We don’t sell your data. We share it only with: service providers acting on our instructions (e.g. hosting, email, IT) under confidentiality and data-protection terms; professional advisers where needed; authorities where legally required; and an acquirer in the event of a merger or sale of the business.

​

6. Cookies

The Website uses only strictly necessary cookies, which don’t require consent. If we later add analytics or advertising cookies, we’ll update this Policy and request consent via a cookie banner first. You can manage cookies in your browser settings.

​

7. International Transfers

Some providers may store data outside the UAE or your country. Where data is transferred abroad, we rely on a lawful basis and appropriate safeguards under the PDPL and, for GDPR transfers, an adequacy decision or Standard Contractual Clauses.

​

8. Retention and Security

We keep personal data only as long as needed — enquiry data for the duration of our contact and a reasonable period after, and longer only where law requires (e.g. tax records); technical logs for a short period. We apply appropriate technical and organisational measures (access controls, encryption in transit, reputable providers) to protect it, though no system is completely secure.

​

9. Your Rights

Subject to the PDPL and, where applicable, the GDPR, you may request: access to your data; correction; deletion; restriction of processing; objection (including to direct marketing); portability; withdrawal of consent; and to stop processing or cross-border transfer. To exercise any right, contact us (Section 11). We may verify your identity, will respond within legal timeframes, and won’t charge unless a request is excessive or unfounded.

​

10. Children and Third-Party Links

The Website is intended for businesses and is not directed at children; we don’t knowingly collect children’s data. We’re not responsible for the privacy practices of third-party sites linked from the Website.

​

11. Contact, Complaints and Changes

Questions, rights requests, or complaints: info@curiocity.ae — Curio:City, Curiocity Digital Marketing Services, 501, City Avenue Building, Deira, Dubai, UAE. We may update this Policy from time to time; the version on the Website, with its “Last updated” date, is the current one.