Privacy policy in full
Template for design review. Have this reviewed by UAE counsel before publishing.
Upcoming change. This policy will be updated on to cover logins to our client reporting dashboard. Review the changes
Plain-English summary
30-second read- We collect what you send us through forms, WhatsApp and email, plus basic analytics about how the site is used.
- We use it to prepare your audit, run your campaign and invoice you. Marketing emails only go out if you ask for them.
- We never sell personal data. Providers such as our host and CRM process it for us under contract.
- Analytics and marketing cookies only run after you accept them.
- You can ask to see, correct, export or delete your data at any time. A person replies within 2 business hours.
This summary and the “In short” lines help you find your way. The full text below is the policy that applies.
1.Who we are
In shortCompany Name FZ-LLC runs this site and decides how your data is used.
- This policy explains how Company Name FZ-LLC (“LinkBuildingService.ae”, “we”, “us”) collects and uses personal data when you visit linkbuildingservice.ae, request a free link gap audit, message us, or become a client.
- We are the controller of that data under the UAE Personal Data Protection Law, Federal Decree-Law No. 45 of 2021 (the “PDPL”). We hold trade licence no. 000000 in Dubai. Our office is at Office 000, Building 00, Dubai Internet City, Dubai, UAE.
- Personal data means information that identifies you or could identify you, such as your name, work email or phone number. Information about a website, such as its backlink profile, is not personal data on its own.
- If you are a client, your contract and our Terms of service also apply. Where your contract has specific data processing terms, those terms take priority.
2.What we collect
In shortWhat you type into our forms, what you send on WhatsApp or email, and analytics you agree to.
2.1Information you give us
- Free link gap audit form: your website, up to three competitor websites, your goal, target markets, language, monthly budget range and timeline, plus your name, work email, phone or WhatsApp number and preferred contact method.
- Strategy call booking: your name, work email and the time you pick.
- Price guide download: your work email.
- Clients: billing contacts, company name, trade licence and TRN for VAT invoices, site approvals, and any Google Analytics or Search Console access you choose to grant.
2.2WhatsApp, phone and email
When you message us on WhatsApp we receive your number, profile name, and the messages and files you send. When you email us we receive your address and the content of your email. We don’t record phone calls. If we ever want to, we will ask first.
2.3Collected automatically
With your consent, our analytics tool records the pages you view, the site that referred you, your device and browser type, and an approximate location at city level derived from your IP address. Our servers also keep short-lived security logs. See section 10 for cookies.
2.4From other sources
To prepare an audit we analyse public backlink data about your website and your competitors’ websites using SEO tools. That data describes websites, not people. For client contacts, we may check a public business profile so we know who we are working with.
2.5What we don’t collect
We don’t ask for sensitive personal data, such as health, religious, biometric or financial account data. Please don’t send it to us through our forms or WhatsApp.
3.How we use your data
In shortTo answer your request, deliver the work, bill you and keep the site secure. Nothing unrelated.
| Purpose | Data used | Legal basis |
|---|---|---|
| Prepare and send your free link gap audit | Audit form, public website data | Steps you ask for before a contract |
| Reply to your messages and calls | Contact details, messages | Steps you ask for before a contract |
| Deliver services and live reporting | Client contacts, approvals, campaign data | Contract |
| Issue VAT invoices and keep tax records | Billing contacts, company details, TRN | Legal obligation |
| Understand and improve the site | Analytics data | Consent |
| Send the price guide and updates you ask for | Work email | Consent |
| Keep our systems secure | Security logs, IP address | Legal obligation |
- We don’t make decisions about you based solely on automated processing.
- We don’t sell, rent or trade personal data, and we don’t use it to train third-party AI models.
4.Legal bases
In shortYour consent, steps you ask for, our contract with you, or a legal duty.
- The PDPL generally requires consent to process personal data, and lists situations where processing is lawful without it. We rely on:
- Consent for analytics and marketing cookies and for marketing emails. You can withdraw consent at any time. Withdrawal doesn’t affect processing that already happened.
- Contract where processing is needed for steps you ask us to take before signing, such as preparing your audit, or to perform our contract with you.
- Legal obligation where UAE law requires it, for example keeping VAT records.
- If you are in the European Union or the United Kingdom, the GDPR or UK GDPR may also apply. In that case we also rely on our legitimate interests in running and securing our business, balanced against your rights.
5.Who we share it with
In shortOnly service providers who work for us, and only what they need. Publishers never get your personal data.
- We use processors: companies that handle data on our behalf under a written contract and only on our instructions.
| Service | What they process | Data location |
|---|---|---|
| Website hosting and CDN | Form submissions, security logs | EU (Frankfurt) |
| CRM and email | Contact details, request details, emails | EU |
| Analytics | Usage data, with consent | United States |
| WhatsApp Business | Number, profile name, messages | Global |
| Call scheduling | Name, email, booked time | United States |
| Accounting and invoicing | Billing contacts, company details, TRN | UAE |
- When we run outreach for a client, we share the client’s website, the target page and the approved anchor text with publishers. We don’t share client contacts’ personal data with publishers.
- We disclose data where UAE law, a court or a regulator requires it, or where we need to establish or defend a legal claim.
- If we sell or merge our business, personal data may pass to the new owner under this policy. We will tell you before that happens.
6.International transfers
In shortSome providers store data outside the UAE. We only send it where it gets equivalent protection.
- Some processors in section 5 store data outside the UAE. The PDPL allows transfers to countries whose data protection laws give an adequate level of protection.
- Where a country doesn’t have such laws, we rely on a contract that requires the recipient to protect data to the PDPL standard, or on your express consent where the law allows it.
- You can ask us for a copy of the safeguards that apply to a specific transfer.
7.How long we keep it
In shortOnly as long as we need it. Audit requests that don’t become projects are deleted after 24 months.
| Data | Kept for |
|---|---|
| Audit requests that don’t become projects | 24 months after our last contact |
| Client contracts, invoices and tax records | At least 5 years after the end of the relevant tax period, as UAE VAT law requires |
| WhatsApp and email conversations | 24 months after the last message |
| Analytics data | 14 months |
| Price guide email | Until you unsubscribe, then deleted within 30 days |
- When a period ends, we delete the data or anonymise it so it no longer identifies you.
8.Your rights
In shortYou can see, correct, export, restrict or delete your data, and withdraw consent. Email us and we handle it.
- Under the PDPL you have the right to:
- Access: get information about the data we hold on you, how we use it and who receives it, and a copy of it.
- Portability: receive your data in a structured, machine-readable format, or have it sent to another controller where technically feasible.
- Correction: have inaccurate or incomplete data corrected.
- Erasure: have your data deleted when we no longer need it, unless the law requires us to keep it.
- Restriction: limit how we use your data while you contest its accuracy or our use of it.
- Objection: stop processing for direct marketing, and object to decisions based solely on automated processing.
- Withdraw consent at any time, as easily as you gave it.
- To use any of these rights, email privacy@linkbuildingservice.ae. We may ask you to confirm your identity first. We acknowledge requests within 2 business hours and respond in full within 30 days. Requests are free unless they are clearly excessive.
- If you are unhappy with our answer, you can complain to the UAE Data Office.
9.Security
In shortEncryption, two-factor logins and need-to-know access. If something goes wrong, we tell you.
- We protect personal data with technical and organisational measures that fit the risk, including:
- encryption in transit (TLS) and at rest in our core systems
- two-factor authentication on every company account
- access limited to people who need it, reviewed every quarter
- written confidentiality duties for every team member and contractor
- No system is perfectly secure. If a breach affects your personal data, we will notify the UAE Data Office and you where the PDPL requires it, and explain what we are doing about it.
10.Cookies
In shortNecessary cookies keep the site and forms working. Analytics and marketing cookies wait for your consent.
- This section is our cookie policy. Cookies are small files a website stores in your browser. We also use similar browser storage (sessionStorage and localStorage), and this section covers both.
- We use three categories:
- Strictly necessary: make the site and forms work and remember your cookie choice. These don’t need consent.
- Analytics: show us which pages help visitors. Only set after you accept.
- Marketing: measure whether our ads lead to audit requests. Only set after you accept.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
lbs-cookie-choice | Us | Remembers your cookie choice | Necessary | Until you change it or clear your browser storage |
lbs-domain | Us | Carries the website you enter on one page into the audit form | Necessary | Until you close the tab |
lbs-audit-draft | Us | Keeps your audit form answers if you reload the page or read this policy mid-form | Necessary | Until you send the form or close the tab |
lbs-lead | Us | Shows your request summary on the confirmation page | Necessary | Until you close the tab |
lbs-modal-shown | Us | Stops the price guide pop-up showing twice | Necessary | Until you close the tab |
lbs-legal-notice-* | Us | Hides a policy-change notice you have dismissed | Necessary | Until you close the tab |
_ga, _ga_<ID> | Google Analytics | Tells visits and sessions apart | Analytics | 2 years |
_gcl_au | Google Ads | Measures which ads lead to audit requests | Marketing | 90 days |
- You can change your choice at any time with the button below, or block cookies in your browser settings. If you block strictly necessary storage, the audit form may not keep the website you entered.
11.Children
In shortOur services are for businesses. We don’t knowingly collect data from anyone under 18.
- Our site and services are for businesses and professionals. We don’t knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, email us and we will delete it.
12.Changes to this policy
In shortChanges are posted here with a new date. Material ones are announced in advance.
- We update this policy when our services, our providers or the law change. The dates at the top show the current version, and the version history lists every change.
- For material changes we show a notice at the top of this page at least 30 days before they take effect, and we email active clients.
13.Contact us
In shortEmail our data protection lead. A person replies within 2 business hours.
Omar SiddiquiClient services and data protection lead, Company Name FZ-LLC
Version history
Every change to this policy, newest first.
- 1.11 February 2027ScheduledAdds client dashboard logins to section 2.1 and a new processor to section 5.
- 1.01 December 2026First published version.