Privacy Policy

Effective Date: 1 September 2025 Last Updated: 1 September 2025

01Introduction

Carbonium (“Carbonium,” “we,” “us,” or “our”) operates the website carbonium.agency (the “Website”). We are an AI marketing agency headquartered in Dubai, United Arab Emirates. This Privacy Policy describes how we collect, use, disclose, retain, and protect your personal data when you visit our Website, contact us, or engage our services, and explains your rights regarding that data.

We are committed to processing personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“PDPL”) and, where applicable to visitors from other jurisdictions, other relevant data protection laws such as the EU General Data Protection Regulation (“GDPR”).

By using this Website or submitting information to us, you acknowledge that you have read and understood this Privacy Policy.

02Data Controller

Carbonium is the data controller responsible for your personal data collected through this Website.

Contact: info@carbonium.agency
Location: Dubai, United Arab Emirates

03Personal Data We Collect

3.1 Data you provide directly. When you submit our contact form or contact us via email or WhatsApp, we may collect: your full name; email address; company name; approximate project budget range; the content of your message; and any other information you choose to include.

3.2 Data collected automatically. When you visit the Website, our hosting infrastructure may automatically log limited technical data, including: IP address; browser type and version; device type; operating system; referring URL; pages viewed; and date and time of access. This data is collected as standard server logs for security, performance, and operational purposes.

3.3 Cookies and tracking. As of the Last Updated date above, this Website does not use advertising cookies, analytics trackers, or third-party marketing pixels. Only strictly necessary technical cookies, if any, may be set by our hosting provider to deliver the Website. If we introduce analytics or advertising technologies in the future, this Policy will be updated and, where required by law, your consent will be requested.

3.4 Data we do not collect. We do not knowingly collect special categories of personal data (such as health, biometric, or religious data), payment card data through the Website, or data from children under 18. This Website and our services are directed at businesses and business professionals.

04How We Use Your Personal Data

We process personal data for the following purposes:

(a) responding to inquiries submitted through our contact form, email, or WhatsApp;
(b) preparing proposals, quotations, and scoping documents you request;
(c) delivering, administering, and improving our services under any agreement with you;
(d) maintaining business records and internal administration;
(e) protecting the security and integrity of the Website and our systems;
(f) complying with applicable legal, regulatory, tax, and accounting obligations; and
(g) establishing, exercising, or defending legal claims.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you.

05Legal Bases for Processing

We rely on the following legal bases under the PDPL (and, where applicable, GDPR):

(a) Consent — when you voluntarily submit your details through our contact form;
(b) Contract — where processing is necessary to perform, or take steps prior to entering into, an agreement with you;
(c) Legitimate interests — operating and securing our Website, responding to business inquiries, and maintaining commercial records, provided such interests are not overridden by your rights; and
(d) Legal obligation — where processing is required by UAE law or other applicable law.

06Disclosure of Personal Data

We do not sell, rent, or trade your personal data. We may share personal data only with:

(a) Service providers — third parties that support our operations, including website hosting (Vercel Inc.), email service providers, and communication platforms (e.g., WhatsApp by Meta Platforms, if you contact us through it), in each case only to the extent necessary for them to provide their services;
(b) Professional advisers — lawyers, accountants, auditors, and insurers, where reasonably necessary;
(c) Authorities — government bodies, regulators, courts, or law enforcement where disclosure is required by law or necessary to protect our legal rights; and
(d) Business transfers — a successor entity in the event of a merger, acquisition, or sale of assets, subject to this Policy.

07International Data Transfers

Our hosting and email providers may store or process data on servers located outside the United Arab Emirates, including in jurisdictions that may not provide the same level of data protection as your home jurisdiction. Where personal data is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place consistent with the PDPL and other applicable laws, including relying on providers that maintain recognized data protection compliance frameworks.

08Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy:

(a) inquiry and contact-form data — for the duration needed to handle your inquiry and for a reasonable period thereafter for business follow-up, unless you request earlier deletion;
(b) client engagement data — for the duration of the engagement and as required for legal, tax, and accounting purposes; and
(c) server logs — for short rolling periods determined by our hosting provider.

When personal data is no longer required, we delete or anonymize it.

09Data Security

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction, including access controls, encrypted transmission (HTTPS), and reliance on reputable infrastructure providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10Your Rights

Subject to applicable law, you have the right to:

(a) request access to the personal data we hold about you;
(b) request correction of inaccurate or incomplete data;
(c) request deletion of your personal data;
(d) object to or request restriction of certain processing;
(e) withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
(f) request a copy of your data in a portable format, where applicable; and
(g) lodge a complaint with the UAE Data Office or other competent supervisory authority.

To exercise any of these rights, contact us at info@carbonium.agency. We may need to verify your identity before acting on your request. We will respond within the timeframes required by applicable law.

11Third-Party Websites

The Website contains links to third-party platforms (including Instagram, TikTok, LinkedIn, and WhatsApp). We are not responsible for the privacy practices or content of those platforms. We encourage you to review their privacy policies before providing them with personal data.

12Children’s Privacy

The Website is not directed at individuals under 18 years of age, and we do not knowingly collect personal data from minors. If you believe a minor has provided us personal data, contact us and we will delete it.

13Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last Updated” date. Material changes may be communicated by additional notice on the Website. Continued use of the Website after changes take effect constitutes acceptance of the revised Policy.

14Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices:

Carbonium — Dubai, United Arab Emirates
Email: info@carbonium.agency