Privacy policy

1. 1.Data controller

   CapDUBAI Marketing Management acts as data controller in respect of personal data processed through this website. Registered address: Downtown Dubai, Dubai, United Arab Emirates. Enquiries regarding the processing of personal data may be directed to contact@cap-dubai.com.

2. 2.Categories of personal data collected

   Where an enquiry is submitted via the contact or partner-application form: name, role, company, company website, email address, telephone number, and any further information voluntarily provided within the message.

   Where an account is held, whether as manufacturer, buyer or agency personnel: name, email address, company details, and the products, orders, quotations, invoices, artwork and compliance documentation submitted in connection with the account.

   Payment card details are not collected under any circumstances. The Company issues invoices solely in respect of its own marketing, design & branding services fee; the manufacturer invoices, and is paid directly by, the buyer, and the Company does not receive or process that payment.

3. 3.Cookies and similar technologies

   This website places three first-party cookies, all of them strictly necessary to the function they serve. Signing in sets two related cookies: a session-token cookie that maintains a signed-in user's authenticated session, and a callback-url cookie that the sign-in system uses internally to return the user to the right page afterward. Both are set only upon sign-in and are removed upon sign-out or at the end of the browser session. A third cookie is set only when the Company's own operator visits a private link of her own, and thereafter excludes her own page views from the aggregate analytics described below; it is never set for, and has no effect on, any other visitor. None of these cookies is used for cross-site tracking or advertising, and no cookie of any kind is used to track an ordinary visitor's activity on this website, except as described below in respect of one marketing landing page.

   Separately, and without any cookie, the website records anonymous, aggregate statistics about each page view: the page visited, the referring website's domain where the visitor's browser supplies one, and the visitor's country. Country is derived momentarily from the visitor's IP address using an offline lookup at the moment of the page view; the IP address itself is never stored, logged, or otherwise retained. No cookie, IP address, or device or browser identifier is stored against a page view, so no individual visitor's journey through this website can be reconstructed from this data.

   The marketing landing page at /hospitality/soap and its confirmation page are the sole exception. There, Google Tag Manager may load Google Analytics and Google Ads to measure engagement with that page and to record, for a visitor who submits the enquiry form there, that the resulting enquiry followed a click on a Google advertisement. These tools may set advertising and analytics cookies in the visitor's browser, and are not present, and do not run, anywhere else on this website.

4. 4.Purposes and legal basis for processing

   To respond to an enquiry or application submitted to the Company, on the basis of consent given by submission thereof.

   To administer an account and to perform marketing services on the basis of the contract between the parties.

   To satisfy the Company's applicable regulatory recordkeeping obligations, including the retention of evidence supporting Dubai Municipality registration, on the basis of compliance with a legal obligation.

5. 5.Recipients of personal data

   A manufacturer to whom a buyer is introduced receives such information as is necessary for the fulfilment of the corresponding order.

   The following service providers process personal data on the Company's behalf and act solely on its instructions: Render Services, Inc. (hosting), Google LLC (transactional email sent via Gmail, and, solely in respect of the marketing landing page referenced above, Google Tag Manager, Google Analytics and Google Ads), and HubSpot, Inc. (customer relationship management).

   Personal data is not sold. Data submitted through the marketing landing page referenced above (contact name, email address and telephone number) is provided to Google Ads, in hashed form, solely to confirm that the resulting enquiry followed a click on a Google advertisement; it is not otherwise disclosed for advertising purposes, and no other page on this website discloses personal data to any advertising service.

6. 6.Data retention

   Account and business-relationship data: retained for the duration of the account's active status, and thereafter deleted or anonymised within thirty (30) days of a request for account closure.

   Billing and payment data: retained for a minimum period of five (5) years pursuant to UAE tax legislation, and for up to ten (10) years where EU accounting obligations apply to the client concerned.

   Sales prospecting data: retained for a maximum period of three (3) years following the most recent contact with the data subject.

   Technical and security logs: retained for a period not exceeding twelve (12) months.

7. 7.Data subject rights

   Pursuant to UAE Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data, data subjects are entitled to request access to, rectification of, or erasure of their personal data, and to object to its processing. Such requests should be addressed to contact@cap-dubai.com and will be responded to within the timeframe prescribed by applicable law.

8. 8.Amendments to this policy

   This policy shall be updated to reflect any material change in the categories of personal data collected or the purposes for which they are processed, with the date of the applicable revision indicated below.

Last updated: 20 August 2026