Privacy policy
Placeholder: this document is a starting draft and must be reviewed by a qualified UAE lawyer before launch.
This policy explains what personal data WDgrowth (“we”, “us”) collects, why, and the choices you have. We follow the principles of the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021): we collect only what we need, we record where every contact detail came from, and we ask for specific consent before contacting you by email or WhatsApp for marketing.
1. What we collect
When you use our website forms (the free SEO audit and the contact form), we collect:
- Your name, email address and, if you provide them, phone number and business name.
- Your website address and your message.
- Your consent choices for email and WhatsApp, with the date, time and page where you gave them.
- A one-way hash of your IP address, used only to prevent abuse of our forms. We do not store your raw IP address.
2. Information about businesses we may contact
To find businesses that may benefit from our services, we use publicly listed business information from the official Google Places API (such as business name, address, public phone number, website and rating) and from the business's own website (such as a published contact email address).
For every contact detail we record its source (for example “Google Places” or the page of the business website where it was published) and the date we found it. We do not scrape Google Maps, Google Search, LinkedIn or Instagram, and we do not buy contact lists.
We contact businesses for the first time by email only. We never send WhatsApp messages to anyone who has not explicitly opted in to WhatsApp contact.
3. Why we use your data
- To respond to your enquiry and prepare the audit you requested.
- To send you relevant SEO information by email, only if you ticked the email consent box or, for businesses, where permitted as a relevant business-to-business message with a clear way to opt out.
- To contact you on WhatsApp, only if you ticked the WhatsApp consent box.
- To keep records of consent and opt-outs, so we respect your choices.
- To protect our website from spam and abuse.
4. Your consent choices
Consent for email and for WhatsApp is recorded separately. Both boxes on our forms are unticked by default, and you can use our forms without ticking either.
You can withdraw consent at any time: every email we send includes an unsubscribe link, and you can reply “STOP” to any WhatsApp message or email us. Withdrawing consent does not affect processing that happened before.
5. Unsubscribing
When you unsubscribe, or an email to you bounces or is marked as spam, your address is added to a suppression list that is checked before every email is drafted and again before it is sent. This is how we make sure we don't contact you again.
6. Access, correction and deletion
You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it by emailing privacy@wdgrowth.com. We will respond within 30 days.
When we delete your data, we keep only a one-way hashed entry of your email address or phone number on our suppression list, so we can make sure we never contact you again. The hash cannot be turned back into your details.
7. How long we keep data
- Enquiries and audit requests: up to 24 months after our last contact, unless you become a client.
- Client records: for as long as required by UAE commercial and tax law.
- Consent and opt-out records: for as long as needed to prove and respect your choices.
- Hashed suppression entries: indefinitely, so we never contact you again.
8. Service providers we use
We use trusted service providers to run our business. They process data on our behalf, under contract, and only for the purposes described here. Some are located outside the UAE, and we rely on appropriate safeguards for those transfers.
- Supabase: database, authentication and file storage.
- Vercel: website hosting.
- Resend: sending and receiving email.
- Meta (WhatsApp Business Platform): WhatsApp messages, only for people who opted in.
- Google: Places API and PageSpeed Insights API for public business and website data.
- Anthropic: AI assistance to summarise website audits and draft messages, which a person reviews before anything is sent.
9. Security
Access to personal data is limited to our team, protected by authentication and database access rules. Data is encrypted in transit.
11. Contact
WDgrowth, Dubai, United Arab Emirates. Email: privacy@wdgrowth.com. Phone: +90 544 738 82 07.