Privacy Policy

1. Who this policy covers

This policy is issued by Viblee, operated by a limited liability company, with trade licence number [insert number], and whose registered office is [insert registered address], the United Arab Emirates, in compliance with the UAE Personal Data Protection Law (Federal Decree by Law No. 45 of 2021) (the “PDPL”). Viblee acts as the “Controller” (as defined in Article 1 of the PDPL) of personal data collected through its website and sign-up form.

This policy applies to anyone who visits viblee.com or the join page, or submits the pre-launch sign-up form.

2. What we collect

The sign-up form on this site currently collects:

If you start the form and don’t finish it, a partial record (first name and email only) is still captured and stored, tagged separately from a completed sign-up. If you return later and complete the form, it updates that same record rather than creating a second one.

3. Legal basis for processing

Viblee processes personal data on the following legal bases: (a) your voluntary consent, provided in accordance with Article 6 of the PDPL; and (b) where processing is necessary to perform a contract to which you are a party or to take steps at your request before entering into a contract, in accordance with Article 4(9) of the PDPL. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal, in accordance with Article 6(2) of the PDPL.

4. How your data is used and where it goes

Personal data is processed in accordance with the controls set out in Article 5 of the PDPL: processing is fair, transparent and lawful; data is collected for a specific and clear purpose; data is adequate, relevant and limited to what is necessary; data is kept accurate and up to date; and data is not retained beyond the purpose of processing. Sign-up data is stored in Zoho CRM. The site is hosted on Vercel, with the domain registered and its DNS managed through GoDaddy. These three are currently the complete list of processors; this page will be updated if that changes.

We keep sign-up data for as long as it serves the purpose it was collected for: inviting you to events and to the app launch. If you ask us to delete your data, or the app launch is cancelled, we will delete the sign-up list within a reasonable period rather than hold it indefinitely.

5. Your rights

Under the PDPL, you have the following rights, subject to applicable legal exceptions:

• Right to receive information. You may request information about the processing of your personal data, including the types of data processed, the purposes of processing, recipients, storage periods, cross-border safeguards and how to exercise your rights.
• Right to data portability. You may request a copy of your personal data in a structured, machine-readable format and, where technically feasible, request its transfer to another Controller.
• Right to correction. You may request correction of inaccurate personal data or completion of incomplete data without undue delay.
• Right to erasure. You may request erasure of your inaccurate personal data in the specified circumstances.
• Right to restrict or stop processing. You may request that processing be restricted or stopped including the right to require restriction or cessation of processing where applicable.
• Right to object to direct marketing. You may object to processing for direct marketing purposes, including profiling related to direct marketing.
• Right to object to automated decisions. You may object to decisions based solely on automated processing, including profiling, particularly where they have a legal effect on you or adversely affect you.
• Right to complain. You may lodge a complaint with the UAE Data Office if you believe your personal data has been processed in violation of the PDPL.

To exercise these rights, please email hello@viblee.com. Viblee will respond within [30] days of receiving a valid request.

You can stop receiving messages from Viblee at any time by emailing hello@viblee.com with ‘unsubscribe’ in the subject line, or by using the opt-out link included in any marketing message. We will action your request within [5] business days and will not charge you to do so. Withdrawing your consent does not affect the lawfulness of processing based on that consent before withdrawal. Opting out of marketing messages does not withdraw any consent needed to process a sign-up already submitted, and you may still receive essential service communications (for example, confirming that your request has been actioned).

6. International transfers

The sign-up form is processed on Vercel’s US servers (Washington, D.C.) and sign-up data is stored in Zoho CRM’s US data centre (crm.zoho.com). If you’re located outside the US, including in the UAE, this means your data is transferred to and stored in the US. Any transfer of personal data outside the UAE is carried out in accordance with Articles 22 and 23 of the PDPL. Viblee ensures that adequate safeguards are in place, including contractual commitments requiring the receiving parties to apply data protection standards consistent with the PDPL. The transfer is necessary to perform the contract between Viblee and the data subject under Article 23(1)(d) of the PDPL.

7. Data security

Viblee implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or alteration, in accordance with Article 20 of the PDPL. These measures include encryption where appropriate and regular review of our security practices.

8. Cookies

See the Cookie Policy for details on cookies and similar technologies used on this site.

9. Contact

If you have any questions about this Privacy Policy, or how we process your personal data, please contact us at hello@viblee.com.

10. Changes to this policy

We may update this policy from time to time. Where a change is material, we will notify you by email (where we hold your email address) and update the date at the top of this page.