Privacy Policy

Innova Stars for Marketing & Technology is a marketing and technology studio registered in Abu Dhabi, UAE. For all privacy matters we act as the “Data Controller” of personal data collected via this website.

Contact: info@innova-stars.ae · +971 54 318 0337

This policy covers personal data we collect through:

• The website at innova-stars.ae and any subdomain we operate.
• Our contact and newsletter forms.
• Our official social channels (Instagram, LinkedIn, Facebook, TikTok), where data we collect is also subject to those platforms’ own privacy policies.
• Our WhatsApp Business number (+971 54 318 0337) for inbound enquiries.

We collect only what we need to do business with you. The categories below are exhaustive — if a category isn’t listed, we don’t collect it.

3.1 Information you give us directly

• Contact form: name, email, optional company, budget range, and message.
• Newsletter form: email address only.
• Email / WhatsApp: whatever you choose to share when you message us.

3.2 Information we collect automatically

• Technical data: IP address (used for rate limiting and abuse prevention), browser user-agent, device type, screen size, referrer.
• Usage data: pages visited, time on page, scroll depth, errors encountered — gathered through Vercel Analytics in an aggregated and anonymous form.
• Cookies: see section 11 below.

3.3 What we don’t collect

• Government IDs, passport numbers, or Emirates ID.
• Payment-card details (we don’t process payments here).
• Health, biometric, or sensitive data of any kind.
• Your social-graph or precise geolocation.

We use your data only for the purposes below:

• To respond to enquiries within 24 hours.
• To send our monthly newsletter, only if you explicitly subscribed.
• To send transactional emails (auto-reply confirmation, project updates if you become a client).
• To detect and prevent abuse — repeated submissions from the same IP get rate-limited or blocked.
• To improve the site through aggregated, non-identifying analytics.
• To comply with legal obligations (tax records, court orders, regulatory requests).

No automated decisions: we do not make decisions about you that have legal or significant effects without human review.

Under the UAE Personal Data Protection Law (Federal Decree-Law 45 of 2021, “PDPL”) and the EU/UK General Data Protection Regulation (GDPR) where it applies, we rely on the following legal bases:

• Consent — when you voluntarily submit a contact form or subscribe to the newsletter.
• Legitimate interest — operating, securing, and improving the site (rate limiting, analytics, fraud prevention).
• Contract — when you become a client, processing your data is necessary to deliver the service we agreed.
• Legal obligation — where we’re required to retain or disclose data by law.

We do not sell your personal data, and we don’t share it with advertisers. We share data only with vetted sub-processors that help us operate the site, under contracts that bind them to the same standards described here.

We may also disclose your information when legally required — for example, in response to a valid court order, regulatory request, or to enforce our terms.

Some of our sub-processors are based outside the UAE (United States, European Union). When your data leaves the UAE, we ensure the transfer is protected by:

• Standard Contractual Clauses (SCCs) approved by the European Commission, where the recipient is in the EU/UK GDPR scope.
• Adequacy decisions issued by the UAE Data Office or the European Commission where they exist.
• Industry-standard encryption in transit (TLS 1.2+) and at rest.

We apply industry-standard safeguards to protect your data:

• TLS 1.2+ encryption for every page and API request, with HSTS preload.
• Strict Content Security Policy, X-Frame-Options, and anti-clickjacking headers.
• Rate limiting and bot honeypots on every form.
• Principle of least privilege — only the team members who need access to your data have it, and access is logged.
• Sub-processors vetted for SOC 2, ISO 27001, or equivalent certifications.
• Encrypted backups; data deleted from backups within 30 days of the original deletion request.

Under UAE PDPL and GDPR, you have the rights below. To exercise any of them, email info@innova-stars.ae. We respond within 30 days, free of charge for the first request in any rolling 12-month period.

• Access — get a copy of the personal data we hold about you.
• Rectification — correct anything inaccurate or incomplete.
• Erasure — have your data deleted (“right to be forgotten”), unless we’re required by law to retain it.
• Restriction — pause our processing while a question is being resolved.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on our legitimate interests.
• Withdraw consent — where processing is based on consent (e.g., newsletter), you can withdraw it at any time.
• Lodge a complaint — with the UAE Data Office, your local data-protection authority, or a court of competent jurisdiction.

We use a minimal set of cookies — no advertising or cross-site tracking. Full list and durations are on our Cookie Policy. You control your choice through the consent banner shown on first visit, and you can change it anytime by clearing cookies for our domain.

Our services are intended for users aged 18 or above. We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted information to us, contact info@innova-stars.ae and we will delete it promptly.

In the unlikely event of a personal-data breach that is likely to result in a risk to your rights and freedoms, we will notify the UAE Data Office (and any other relevant regulator) within 72 hours of becoming aware of it, and we will notify affected users without undue delay through email or a prominent notice on this site.

We may update this policy as our services or laws evolve. Material changes will be flagged at the top of this page with a new “Last updated” date, and — for significant changes — we’ll notify newsletter subscribers by email at least 14 days before they take effect.

For any privacy-related question, request, or complaint:

• Email: info@innova-stars.ae
• Phone / WhatsApp: +971 54 318 0337
• Post: Innova Stars for Marketing & Technology, Abu Dhabi, UAE

We aim to acknowledge privacy requests within 5 working days and resolve them within 30 days.