Privacy Policy

Make It Big  |  https://makeitbig.ae/

Publication note: Replace every bracketed placeholder and confirm that the technologies and retention periods below match the website’s actual configuration before publishing. This template is practical compliance guidance, not a substitute for advice from qualified UAE legal counsel.

1. Who we are

This Privacy Policy explains how [INSERT REGISTERED LEGAL ENTITY NAME] (“Make It Big”, “MIB Agency”, “we”, “us” or “our”) collects, uses, discloses, stores and protects personal data when you visit makeitbig.ae, contact us, submit a form, respond to our advertisements, engage us for services, apply for a role, or otherwise interact with us online or offline.

For the purposes of applicable data-protection law, we generally act as the controller of the personal data described in this Policy. When we process personal data solely on behalf of a client under its instructions—for example while managing the client’s advertising campaigns, CRM audiences or lead data—we may act as that client’s processor. In those circumstances, the client’s privacy notice also applies.

2. Scope

This Policy applies to our website, landing pages, contact and quotation forms, email and WhatsApp enquiries, Meta and LinkedIn lead forms, social-media pages, campaigns, analytics and advertising technologies, client onboarding, supplier and influencer interactions, recruitment, and related business communications. It does not control the independent privacy practices of third-party websites or platforms that we link to or use.

3. Personal data we collect

3.1 Information you provide

• Identity and contact details, such as name, business name, job title, email address, telephone/WhatsApp number, country and location.
• Enquiry and project information, including your website, requested services, budget, timeline, brief, messages, attachments and meeting details.
• Lead-ad information submitted through Meta or LinkedIn Lead Gen Forms, such as pre-filled profile/contact details and any answers you provide.
• Client, supplier and payment administration data, such as billing contact, trade-licence details, invoices and transaction references. We do not intentionally store full payment-card numbers on the website.
• Account information if website account or portal functions are enabled, such as username, password hash and login records.
• Recruitment information, such as CV, employment history, portfolio, salary expectations and interview notes.
• Any other information you choose to provide. Please do not submit special-category or highly sensitive personal data unless specifically requested and necessary.

3.2 Information collected automatically

• Device and technical data, including IP address, browser type, operating system, device identifiers, language, time zone and approximate location.
• Usage data, including pages viewed, referring/exit pages, links or buttons clicked, timestamps, session duration, form interactions and conversion events.
• Cookie and advertising identifiers, campaign parameters and information generated through pixels, tags, SDKs or similar technologies.

3.3 Information from other sources

We may receive data from Meta, LinkedIn and other advertising or social platforms; analytics, hosting, CRM and email providers; referral partners; publicly available business sources; and clients who lawfully instruct us to process data for campaign delivery. The data received depends on your settings, the relevant platform and the campaign.

4. Why we use personal data

• Respond to enquiries, prepare proposals, schedule meetings and provide requested services.
• Create and manage client relationships, contracts, billing, support and project delivery.
• Operate, secure, troubleshoot and improve the website, forms, hosting, accounts and services.
• Measure website and campaign performance, attribute conversions, understand audiences and produce aggregated reports.
• Create custom or matched audiences, retarget website visitors, suppress existing customers where appropriate, and personalise or deliver advertising on Meta, LinkedIn and other platforms.
• Send service communications and, where permitted, marketing by email, telephone, WhatsApp or social platforms; you can opt out at any time.
• Detect fraud, abuse and security incidents; protect our rights, users and systems; and establish or defend legal claims.
• Comply with legal, regulatory, accounting and tax obligations.
• Evaluate candidates and manage recruitment.

5. Legal grounds and consent

We process personal data only where permitted by applicable law. Depending on the activity, this may include your consent; steps requested by you before entering into a contract; performance of a contract; compliance with a legal obligation; protection of vital or public interests; establishment or defence of legal claims; or another statutory exception. Where consent is required—particularly for non-essential advertising cookies or direct marketing—we request it in a clear manner and you may withdraw it at any time without affecting processing already carried out lawfully.

If the UAE federal Personal Data Protection Law does not recognise a particular legal basis used in another jurisdiction, we will rely on consent or another basis/exception available under the law that applies to the relevant processing.

6. Cookies and similar technologies

We and authorised third parties may use cookies, pixels, tags, local storage and similar technologies. A cookie preference tool should allow visitors to accept or reject non-essential categories and to change their choice later.

6.1 Cookie categories

• Strictly necessary: security, network management, form submission, session management and preference storage. These cannot always be disabled through our website.
• Analytics: help us understand visits, traffic sources and website performance. [CONFIRM ANALYTICS PROVIDERS, E.G. GOOGLE ANALYTICS 4].
• Advertising and social media: measure conversions, build audiences, limit or personalise ads and connect activity with Meta, LinkedIn or other platforms.
• Functional: remember optional settings and enable enhanced website features. [CONFIRM WHETHER USED].

6.2 Consent controls

Except where local law permits otherwise, analytics and advertising technologies should not activate until the visitor has consented to the relevant category. Withholding or withdrawing consent does not affect essential website functions, although some optional features may work differently. Browser controls may also block or delete cookies, but browser settings do not replace the website consent tool.

7. Meta advertising technologies

We may use Meta Business Tools, including the Meta Pixel, event tracking, Custom Audiences, Lead Ads and, if configured, Conversions API. These tools may send Meta information such as page visits, URLs, browser/device information, IP address, cookie identifiers, campaign interactions and conversion events. If advanced matching or Conversions API is enabled, contact identifiers such as email or phone number may be normalised and cryptographically hashed before transmission. Hashing does not make the data anonymous to all parties.

We use these tools to measure ad effectiveness, attribute leads, create or exclude audiences, and show relevant advertisements. Meta processes information under its own terms and privacy policy and may combine it with information it already holds. Do not send Meta sensitive personal data, full form-field contents, passwords, financial account details, health information or URL parameters that reveal such data. Visitors can use our cookie settings and Meta’s ad settings to manage relevant choices.

8. LinkedIn advertising technologies

We may use the LinkedIn Insight Tag, Website Actions, conversion tracking, Matched Audiences and LinkedIn Lead Gen Forms. The Insight Tag may collect page URL, referrer, IP address, device/browser characteristics, timestamp, page views and conversion events. LinkedIn provides us with aggregated reporting and audience insights and may enable retargeting without identifying individual LinkedIn members to us.

LinkedIn Lead Gen Forms may share the details that a user submits or confirms, which can include name, email, telephone number, company, job title, seniority, location and campaign responses. We use this information to respond to the request, qualify the enquiry and follow up about relevant services, subject to the choices presented on the form.

The LinkedIn Insight Tag must not be placed on pages that collect or contain sensitive data. Visitors can use our cookie settings and LinkedIn account advertising settings to manage relevant choices.

9. Direct marketing and lead follow-up

If you request information, submit a lead form or consent to marketing, we may contact you through the channel you provided. Every promotional email should provide an unsubscribe method. You may opt out of marketing at any time by using the unsubscribe link or contacting [INSERT PRIVACY EMAIL]. We may retain a minimal suppression record so that we honour the opt-out. Opting out of marketing does not prevent service, contractual, security or legally required messages.

10. When we share personal data

We do not sell personal data for money. We may disclose personal data only as reasonably necessary to:

• Advertising and social platforms, including Meta and LinkedIn, when their tools or lead forms are used.
• Hosting, content-delivery, security, analytics, consent-management, CRM, email, cloud-storage, productivity, communications, payment and professional-service providers.
• Our employees, contractors and group entities who need access and are subject to confidentiality obligations.
• Clients for whom you have made an enquiry or where we process campaign data on their documented instructions.
• Authorities, courts, regulators, advisers or counterparties when required by law or necessary to protect rights, safety or legal claims.
• A buyer, investor or successor in connection with a merger, restructuring, financing or sale, subject to appropriate safeguards.

Some privacy laws define disclosure to advertising platforms for cross-context behavioural advertising as “sharing” or a “sale” even without monetary payment. Where such law applies, we provide the notices and opt-out mechanisms it requires.

11. International transfers

Our providers and platforms may process personal data outside the UAE, including in countries whose laws may offer different protections. Where required, we use contractual, organisational and technical safeguards, obtain consent, or rely on another lawful transfer mechanism or statutory exception. You may contact us for information about safeguards relevant to your data.

12. Data retention

We keep personal data only for as long as reasonably necessary for the stated purposes, including legal, accounting, security and dispute requirements. The following periods are proposed and must be confirmed against Make It Big’s operations:

• Unconverted enquiries and lead-form records: up to [12 MONTHS] after the last meaningful interaction.
• Marketing contact records: until opt-out, inactivity review or [24 MONTHS] after the last engagement; suppression records may be retained longer to honour opt-outs.
• Client contracts, invoices and core business records: [5–7 YEARS] after the relationship or longer if required by UAE law.
• Recruitment records for unsuccessful applicants: [6–12 MONTHS], unless consent supports longer retention.
• Website security logs: typically [90–180 DAYS], subject to incident needs.
• Cookie and platform identifiers: according to the cookie settings table and the relevant provider’s retention rules.

We may delete or anonymise data earlier, and may retain it longer where litigation, investigation, legal hold or another lawful reason requires it.

13. Security

We use reasonable technical and organisational measures designed to protect personal data, such as access controls, authentication, least-privilege access, encryption where appropriate, backups, provider due diligence and incident procedures. No online system is completely secure, and we cannot guarantee absolute security. Please do not send confidential credentials or sensitive information through ordinary contact forms.

14. Your privacy rights

Subject to applicable law and exceptions, you may have the right to request information about our processing; access a copy; correct inaccurate or incomplete data; erase data; restrict or stop processing; object to direct marketing; receive or transfer certain data in a structured machine-readable format; withdraw consent; and object to certain solely automated decisions that have legal or similarly significant effects.

To exercise a right, email [INSERT PRIVACY EMAIL] with the subject “Privacy Request” and explain your request. We may verify your identity and authority before acting. We will respond within the period required by applicable law. You may also complain to the competent UAE Data Office or another regulator with jurisdiction over your complaint.

15. Automated decision-making

We may use platform optimisation, lead scoring or audience tools to prioritise ads or enquiries. Unless expressly disclosed otherwise, we do not make decisions based solely on automated processing that produce legal or similarly significant effects for website visitors. If this changes, we will provide the information and safeguards required by applicable law.

16. Children’s privacy

Our website and agency services are intended for businesses and persons aged 18 or over. We do not knowingly collect personal data from children through the website or use it for targeted advertising. If you believe a child has provided personal data, contact us so we can investigate and delete it where appropriate.

17. Third-party links and platforms

Our website may link to social networks, client sites and other third parties. Their services are governed by their own privacy notices and settings. Meta and LinkedIn act independently for much of their processing; reviewing their policies and ad controls is recommended.

18. Changes to this Policy

We may update this Policy to reflect changes in law, technology or our practices. The updated version will be posted on this page with a revised effective date. If a change materially affects how we use data already collected, we will provide additional notice or obtain consent where required.

19. Contact us

Privacy enquiries and rights requests may be sent to:

• Legal entity: [INSERT REGISTERED LEGAL ENTITY NAME]
• Trade name: Make It Big / MIB Agency
• Address: [INSERT FULL UAE BUSINESS ADDRESS]
• Email: [INSERT PRIVACY EMAIL]
• Telephone: [INSERT BUSINESS TELEPHONE]
• Trade licence / registration: [INSERT NUMBER, IF YOU WISH TO PUBLISH IT]

Website implementation checklist

• Create a permanent /privacy-policy/ URL and link it in the global footer, contact forms, account registration and every Meta/LinkedIn lead form.
• Add a separate Cookie Policy or a live cookie table naming each cookie, provider, purpose, category and duration.
• Deploy a consent banner with Accept All, Reject Non-Essential and Manage Preferences choices of comparable prominence.
• Block Meta Pixel, LinkedIn Insight Tag and other non-essential tags until the relevant consent is recorded where required; preserve consent logs and allow withdrawal.
• Audit Google Tag Manager, plugins and page source to confirm every actual tracker/provider is named.
• Keep sensitive data, form-field values and revealing URL parameters out of pixels, tags and conversion events.
• For Meta Lead Ads and LinkedIn Lead Gen Forms, link this exact policy URL and add campaign-specific consent wording for follow-up marketing.
• Use separate, unticked consent where marketing is optional; do not bundle marketing consent with a quotation request.
• Sign appropriate data-processing terms with vendors and, when acting for clients, a controller-processor agreement defining instructions, security, sub-processors, deletion and breach handling.
• Add a working privacy-request process, opt-out/suppression workflow, breach response plan and documented retention/deletion schedule.
• Review the policy at least annually and whenever a tracking, CRM, advertising, form or hosting provider changes.