Legal

Privacy Policy

Draft, not yet reviewed by a lawyer. Do not publish live until sign-off.

This page is a placeholder shell. The section headings and data fields below are accurate to what the site actually collects, but the legal wording itself has not been drafted or reviewed. Do not treat this as a compliant policy. Have it written or checked by a lawyer, or run through a generator (Termly, iubenda) before it goes live, particularly for UAE PDPL and UK/EU GDPR obligations.

1. Who this policy covers

[Company legal name, registration details, and registered address to be inserted here - e.g. the Peak13 or Viblee operating entity once incorporated.]

This policy applies to anyone who visits viblee.com or the join page, or submits the pre-launch sign-up form.

2. What we collect

The sign-up form on this site currently collects:

FieldWhy we ask
First nameTo address you personally in invitations
Email addressTo contact you about pre-launch events and the app launch
Mobile / WhatsApp numberTo send event invitations directly
Area of Dubai you live inTo invite you to events near you
Interests (tags you select)To match you with relevant events
Children's age bands, if selectedTo invite you to family-suitable events only when relevant
Pets (yes/no)To invite you to pet-friendly events only when relevant
Time you've lived in DubaiTo understand our early community

[Confirm whether an incomplete form submission (name + email only, abandoned before the later steps) is also captured and stored - the current build sends a partial record after step one.]

3. Children's data

The form asks whether you have children and, if so, their age bands. This is provided by the parent or guardian about their child, not collected directly from a child. [This section needs specific legal language under UAE PDPL and, if applicable, UK/EU GDPR Article 8, covering lawful basis for processing data relating to a minor via parental submission.]

4. How your data is used and where it goes

Sign-up data is currently sent by email, via a third-party service (Resend), to an internal Viblee inbox. [Confirm final data flow before publishing: is data also stored in a database or CRM? Name every processor here - Resend, hosting provider (Vercel), any CRM added later.]

[State retention period: how long is this data kept, and what happens to it if the app launch is delayed or cancelled.]

5. Your rights

[List rights under applicable law - access, correction, deletion, objection to marketing, data portability - and how to exercise them, e.g. a contact email for data requests.]

6. International transfers

[If data collected from UAE residents is processed or stored outside the UAE (e.g. on US-based servers via Vercel/Resend), this needs a transfer clause.]

7. Cookies

See our Cookie Policy for details on cookies and similar technologies used on this site.

8. Contact

[Contact email or address for privacy queries and data requests.]

9. Changes to this policy

[Standard clause: how we'll notify users of material changes.]