Privacy Policy

1. Introduction

B5 Marketing FZ-LLC (trading as YallaWeb) ("we", "us", or "our") is committed to protecting the privacy of individuals who visit our website and use our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and any applicable implementing regulations, as well as all other applicable UAE laws.

By accessing our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of our website and services.

2. Data Controller

The data controller responsible for your personal data is:

B5 Marketing FZ-LLC (trading as YallaWeb)
Trade Licence No. 4031356
JT030125, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates
Email: hello@yallaweb.ae
Phone / WhatsApp: +971 55 180 5323

3. Personal Data We Collect

We may collect the following categories of personal data:

• Identity data: full name, business name.
• Contact data: email address, phone number (including WhatsApp number), physical address.
• Business data: business type, industry, project requirements and business categories used to group enquiries and prospects.
• Technical data: IP address, browser type and version, time zone, operating system, pages visited, referring URLs, and other diagnostic data collected automatically when you use our website.
• Communications data: messages and files you send us via email or WhatsApp, including voice messages handled by our team.
• Marketing data: your preferences for receiving marketing communications from us.

We do not collect any special categories of sensitive personal data (e.g., health data, financial account numbers, government-issued IDs) unless expressly required for a specific service and with your explicit consent.

4. How We Collect Your Data

• Directly from you: when you send us a WhatsApp message, email us, or otherwise contact us.
• Automatically: through cookies, web server logs, and similar tracking technologies when you browse our website.
• From third parties: our prospecting workflow uses publicly available business information from Google Maps, recorded in our internal business records and grouped by business type. We do not currently receive personal data from analytics or advertising providers.

5. Purposes and Legal Basis for Processing

6. Cookies and Tracking Technologies

Cookies are small text files stored on your device. Our website currently uses only:

• Strictly necessary cookies: which our hosting provider may set to keep the website secure and working. These cannot be disabled.

We do not currently use analytics or advertising cookies on this website. If we introduce them, we will update this policy first and ask for your consent where required.

You may control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

7. Disclosure of Your Data

We may share your personal data with:

• Service providers: third-party vendors who assist us in operating our website and delivering services, bound by data processing agreements. These include Cloudflare for hosting, domains and infrastructure, Stripe for payments, and Anthropic's Sonnet model for AI-assisted WhatsApp text handling. Our team handles voice messages manually.
• Analytics and advertising platforms: we do not currently share personal data with analytics or advertising platforms.
• Professional advisers: lawyers, accountants, and auditors who are bound by professional confidentiality obligations.
• Regulatory and government authorities: where required by UAE law, court order, or governmental regulation.
• Business transfers: in connection with any merger, acquisition, or sale of assets, where data protection obligations will be transferred accordingly.

We do not sell your personal data to third parties.

8. International Data Transfers

Some of our service providers store or process personal data outside the UAE, for example in the European Economic Area or the United States. These are Cloudflare (website hosting, domains and infrastructure), Stripe (payments) and Anthropic (AI assisted handling of WhatsApp text messages). We do not guarantee UAE only hosting or data storage.

We transfer personal data outside the UAE only where the PDPL allows it, for example where the transfer is needed to provide the services you asked for or to take your payment. Each provider is bound by its own data protection terms, which require it to protect personal data and use it only to provide its services to us. If the UAE authorities publish approved countries or approved transfer terms, we will review our arrangements and update this policy.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by UAE law. Enquiry data is retained for up to 2 years. Client project data is retained for a minimum of 5 years to comply with UAE commercial and tax laws. Marketing data is retained until you withdraw your consent or unsubscribe.

10. Your Rights Under the UAE PDPL

Subject to applicable conditions and exemptions, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete personal data.
• Erase your personal data where there is no compelling reason for its continued processing.
• Restrict processing of your personal data in certain circumstances.
• Object to processing for direct marketing, or where processing does not follow the PDPL principles.
• Data portability: receive your data in a structured, machine-readable format.
• Withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal.
• Lodge a complaint with the UAE Data Office (uaedataoffice.ae) if you believe your rights have been violated.

To exercise any of these rights, contact us at hello@yallaweb.ae. We will respond within 30 days.

11. Data Security

We use technical and organisational measures that are reasonable for a business of our size to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These include encrypted connections (SSL/TLS), limiting access to staff who need it, and using established providers such as Cloudflare and Stripe. We do not store your full card details; Stripe processes card payments. We review these measures from time to time and when our services change. If a security incident is likely to affect your personal data, we will inform you and the relevant authority where the law requires. No transmission over the internet is completely secure, so we cannot guarantee absolute security.

12. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal data.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or our services. The updated policy will be published on this page with a revised effective date. We encourage you to review this page periodically. If we make material changes, we will inform existing customers by WhatsApp or email. Where a change requires your consent under the PDPL, we will ask for it.

15. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

B5 Marketing FZ-LLC (trading as YallaWeb)
Trade Licence No. 4031356
JT030125, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates
Email: hello@yallaweb.ae
WhatsApp: +971 55 180 5323

16. Language

This Privacy Policy is published in English and Arabic. The Arabic version is a translation. If there is any difference between the two versions, the English version prevails.