Creative Broadcast Agency

Privacy Policy

Last updated: 2026-04-24

Overview

This privacy policy describes how Creative Broadcast Agency FZE-LLC ("CBA", "we", "us") collects, uses, and protects personal data of website visitors, event attendees registering via our platforms, and clients engaging our services.

We operate under UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and apply equivalent standards for data residents of other jurisdictions: GDPR for EU residents, Saudi PDPL for KSA residents.

What we collect

Website visitors. When you visit creativebroadcast.ae, we collect IP address, browser type, pages visited, referrer, and time on page via standard analytics (Google Analytics 4). This data is aggregated and not used to identify individuals unless combined with a form submission.

Contact form submissions. Name, email address, company, role, phone number (optional), and the content of your enquiry. Used to respond to you and to qualify the engagement as a sales lead.

Event registrations. When CBA produces an event and you register via our platforms, we collect name, email, company, role, and any event-specific data requested by the event organiser. This data is processed on behalf of the event organiser (the data controller) under a Data Processing Agreement.

Event engagement data. During live events we produce, we capture watch time, questions asked, poll responses, and chat activity per attendee. Used to produce post-event analytics for the event organiser. Retained per the organiser's retention policy.

Business clients. Company name, billing address, contact individual details, contract history, project scope documents, and any commercially sensitive material shared under engagement.

How we use your information

Delivering requested services. Event production, broadcast delivery, post-event analytics, ongoing client relationship management.

Responding to enquiries. Contact form submissions receive a reply from a CBA team member, usually within one working day.

Sales and marketing to prospects who have opted in. Follow-up communication, case study sharing, newsletter delivery where consent was given at form submission.

Legal and regulatory compliance. Contract records retained per UAE commercial law. Financial records retained per tax and audit requirements.

Improving our services. Aggregated analytics on website usage and event engagement patterns, anonymised where possible.

Who we share it with

We share personal data only with processors who help us deliver services to you, under contractual obligations equivalent to this policy.

Hosting and infrastructure. Vercel (website), Supabase (event platform), Cloudflare (DNS and security), Hetzner (broadcast infrastructure).

Communication. Resend and Gmail (transactional and business email).

Analytics. Google Analytics 4 (website traffic), Semrush and DataForSEO (SEO analytics, website-level only, no personal data).

Event platforms. YouTube, LinkedIn, Vimeo, and similar distribution platforms receive broadcast data as configured by the event organiser.

We do not sell personal data to third parties. We do not use personal data for advertising retargeting without explicit consent.

Your rights

Under UAE PDPL and equivalent laws in other jurisdictions, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete data where we no longer have a lawful basis to retain it.
  • Object to processing for direct marketing.
  • Portability of your data in a commonly used format.
  • Withdraw consent where processing was based on consent.

To exercise any of these rights, email chris@creativebroadcast.ae with your request. We respond within 30 days as required by UAE PDPL.

If you are dissatisfied with our response, you have the right to lodge a complaint with the UAE Data Office (or your local data protection authority if you are resident outside the UAE).

Retention + security

Retention. Enquiry data is retained for 24 months from last contact. Event registration and engagement data is retained per the event organiser's policy (typically 12 months). Client contract and financial records are retained for 7 years per UAE commercial law.

Security. Data in transit is encrypted with TLS 1.3. Data at rest is encrypted with AES-256. Access is restricted to CBA team members with need-to-know, authenticated via SSO with our identity provider.

Data residency. Default data residency is Mumbai (ap-south-1) via Supabase. EU-resident data is hosted in Frankfurt on request. Saudi PDPL residency options available for Saudi-resident data.

Breach notification. In the event of a data breach that affects personal data, we notify affected individuals and the relevant regulator within 72 hours as required by UAE PDPL.

Cookies

Strictly necessary cookies. Session management, security tokens. These do not require consent and cannot be disabled.

Analytics cookies. Google Analytics 4 for aggregated website usage. These require consent via our cookie banner.

Chat widget cookies. The CBA chatbot uses cookies to maintain conversation state. Data is processed under this same privacy policy.

You can manage cookie preferences via the cookie banner on your first visit and via browser settings at any time.

Contact

For any question about this privacy policy or our data practices:

Creative Broadcast Agency FZE-LLC
Data Protection Contact: Chris McDonnell
Email: chris@creativebroadcast.ae
Phone: +971 50 119 3723

This policy is governed by UAE law. We may update this policy periodically. Material changes will be communicated via the website or direct notice where appropriate.