Privacy Policy

1. Overview

eventifydubai ("we," "us," or "our") operates the event services marketplace at eventifydubai.com. This Privacy Policy explains how we collect, use, disclose and protect your personal data when you use our platform as a client (event planner) or as a vendor (event service provider).

We are committed to protecting your privacy in compliance with:

• UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL)
• Dubai International Financial Centre (DIFC) Data Protection Law (DIFC Law No. 5 of 2020) where applicable
• The EU General Data Protection Regulation (GDPR), to the extent it applies to our European users

By using eventifydubai, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our platform.

2. Data We Collect

2.1 Data You Provide Directly

Category	Data Collected	Who
Account Registration	Full name, email address, phone number, password (hashed)	Clients & Vendors
Client Profile	Event type preferences, location, budget range	Clients
Vendor Profile	Business name, trade licence number, business address, service description, photos, pricing, bank details (for invoicing only)	Vendors
Quote Requests	Event type, date, guest count, venue, budget, special requirements	Clients
Reviews	Rating, written review text, event date and type	Clients
Payments	Card type, last 4 digits (we do not store full card numbers — Stripe handles all payment processing)	Vendors (subscription)
Communications	Messages sent through our platform messaging system	Clients & Vendors
Contact Forms	Name, email, message content (processed via Formspree)	Anyone
Newsletter	Email address, subscriber category preference	Anyone

2.2 Data Collected Automatically

When you use our platform, we automatically collect:

• Log data: IP address, browser type and version, pages visited, time and date of visits, referring URLs
• Device data: Device type, operating system, screen resolution
• Usage data: Search queries, vendor profiles viewed, quote requests sent, features used
• Location data: General location inferred from IP address (not precise GPS)
• Cookies and tracking technologies: See Section 5 below

2.3 Data from Third Parties

We may receive data about you from:

• Social login providers: If you sign in with Google or Apple, we receive your name and email address from that provider
• Vendor verification: We verify vendor trade licences with the Dubai Department of Economic Development (DED)
• Payment processors: Stripe provides us with payment status and limited card information as described above

3. How We Use Your Data

We use your personal data for the following purposes:

3.1 Providing the Service

• Creating and managing your account
• Processing and responding to quote requests
• Facilitating communication between clients and vendors
• Processing vendor subscription payments
• Displaying your vendor profile publicly (vendors)
• Publishing verified client reviews

3.2 Improving the Platform

• Analysing how users search, browse and interact with vendor profiles
• Improving our search relevance and recommendation algorithms
• Identifying and fixing technical issues
• Developing new features based on usage patterns

3.3 Communications

• Transactional emails: booking confirmations, quote notifications, review requests, payment receipts
• Newsletter (bi-weekly): only if you have explicitly subscribed. You can unsubscribe at any time.
• Platform updates: important changes to our terms, pricing or features
• Vendor success communications: for vendors on Professional and Premium plans

3.4 Safety and Compliance

• Verifying vendor identities and trade licences
• Detecting and preventing fraud, spam and abuse
• Enforcing our Terms of Use and Vendor Terms
• Complying with legal obligations under UAE law
• Responding to lawful requests from UAE authorities

3.5 Legal Basis (GDPR)

For users in the European Economic Area, our legal bases for processing are:

• Contract performance: Processing necessary to provide our services to you
• Legitimate interests: Improving the platform, preventing fraud, sending service-related communications
• Consent: Marketing emails and non-essential cookies
• Legal obligation: Tax records, responding to lawful authority requests

4. Data Sharing

4.1 With Other Users

When you are a vendor, your public profile information (business name, description, photos, category, pricing range, ratings and reviews) is visible to all platform visitors. When a client submits a quote request to you, we share their name, contact details, and event details with you so you can respond.

When you are a client, your name and event details are shared with vendors to whom you send quote requests. Your reviews are published publicly alongside your first name.

4.2 With Service Providers

We share data with third-party service providers who help us operate the platform:

Provider	Purpose	Data Shared
Stripe	Payment processing	Email, billing info
Formspree	Contact form handling	Form submission data
Google Analytics	Website analytics	Anonymised usage data
Amazon Web Services (AWS)	Cloud hosting and storage	All platform data (encrypted)
Mailchimp	Newsletter distribution	Email address, subscriber category
Intercom	Customer support chat	Name, email, conversation history

All service providers are contractually required to protect your data and use it only for the specified purpose.

4.3 Legal Disclosures

We may disclose your data to law enforcement or regulatory bodies when required by UAE law, or to protect the rights, property or safety of eventifydubai, our users, or the public.

4.4 We Never Sell Your Data

We do not sell, rent or otherwise provide your personal data to advertisers, data brokers or any third parties for their marketing purposes.

5. Cookies

We use cookies and similar technologies to operate and improve eventifydubai. You can manage your cookie preferences in your browser settings or through our cookie consent banner.

Cookie Type	Purpose	Can be Disabled?
Essential	Login sessions, security tokens, shopping cart. Required for the platform to function.	No
Performance	Google Analytics — anonymous usage data to improve the platform	Yes
Functional	Your saved preferences (language, location, search filters)	Yes
Marketing	We do not currently use marketing/advertising cookies on eventifydubai	N/A

For full details, see our Cookie Policy.

6. Data Retention

We retain your data for as long as your account is active, plus a reasonable period thereafter to comply with legal obligations and resolve disputes. Specifically:

• Active accounts: Retained for the duration of the account
• Deleted accounts: Most personal data deleted within 90 days of account deletion request, except where we are legally required to retain it
• Financial records: Retained for 7 years as required by UAE VAT law
• Reviews: Retained unless you request deletion; deleted within 30 days of a valid request
• Communications: Retained for 24 months for dispute resolution purposes, then deleted
• Newsletter subscriptions: Retained until you unsubscribe; unsubscribed addresses retained on our suppression list to prevent re-subscribing

7. Your Rights

Under UAE PDPL and GDPR (where applicable), you have the following rights regarding your personal data:

7.1 Right to Access

You can request a copy of all personal data we hold about you. We will respond within 30 days.

7.2 Right to Correction

You can update most of your data directly in your account settings. For data you cannot update yourself, contact us and we will correct inaccuracies within 14 days.

7.3 Right to Deletion ("Right to be Forgotten")

You can request deletion of your account and personal data. We will delete your data within 90 days, except where we are legally required to retain it (e.g. VAT records). Note that published reviews cannot be deleted after 12 months as they form part of the platform's integrity.

7.4 Right to Portability

You can request an export of your data in a machine-readable format (JSON or CSV).

7.5 Right to Withdraw Consent

Where processing is based on consent (e.g. newsletter), you can withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

7.6 Right to Object

You can object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds.

7.7 How to Exercise Your Rights

To exercise any of the above rights, contact us at: privacy [at] eventifydubai [dot] com or use our contact form. We will verify your identity before processing requests. We respond to all requests within 30 days.

8. Security

We implement industry-standard security measures to protect your data:

• All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher
• Passwords are hashed using bcrypt — we never store passwords in plaintext
• Payment processing is handled entirely by Stripe — we never handle or store full card numbers
• Our servers are hosted on AWS with encryption at rest
• We conduct regular security audits and penetration testing
• Staff access to production data is role-based and logged
• Two-factor authentication is available for all vendor accounts

Despite our best efforts, no internet transmission is 100% secure. If you believe your account has been compromised, contact us immediately at our contact page.

9. International Data Transfers

Your data is primarily stored on servers in the UAE and EU (AWS regions). Some of our service providers (Stripe, Mailchimp) process data in the United States. Where data is transferred outside the UAE, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Data processing agreements with all third-party processors

10. Children's Privacy

eventifydubai is not directed to children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us at our contact page and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email at least 14 days before the changes take effect. We will also update the "Last updated" date at the top of this page. Your continued use of eventifydubai after changes take effect constitutes your acceptance of the updated policy.

12. Contact Us

For all privacy-related enquiries, requests or complaints:

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. In the UAE, this is the UAE Data Office. For GDPR matters, contact your local EU supervisory authority.