ChampX Digital
⌁ Legal · UAE PDPL-aligned

Privacy policy.

Last updated: April 28, 2026. Plain English where possible, lawful where it has to be.

This Privacy Policy explains how ChampX Digital FZ-LLC (“ChampX,” “we,” “us”) collects, uses, stores, and protects personal data when you visit champxdigital.ae or interact with our services. We comply with the UAE’s Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and apply GDPR-aligned best practice for visitors from the European Union and the United Kingdom.

We are the data controller for personal data collected through this website. If you have questions or want to exercise any of the rights described below, contact us at hello@champxdigital.ae.

1. Who we are

ChampX Digital FZ-LLC is a free-zone limited liability company registered in Ras Al Khaimah, United Arab Emirates. Our registered address is FDRK 4523, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras al Khaimah, UAE. We design and build websites, online stores, web applications, and run digital marketing campaigns for businesses in the UAE and the wider GCC.

2. Personal data we collect

We collect personal data only when you provide it or when it is generated automatically as you browse the site. Specifically:

  • Contact form & quote wizard: name, email address, phone number (optional), company name (optional), project details, budget range, and any free-text message you send us. Submitted via our forms on /contact.
  • Newsletter subscription: email address only.
  • Direct correspondence: anything you send us via email, WhatsApp, or in person.
  • Automatically collected: IP address, approximate location (country/city level), browser type and version, device type, referrer URL, pages visited, time on site, and similar technical data. Collected via cookies and analytics tools described below.

We do not knowingly collect or store payment-card data through this website. If a project requires invoicing, payment instructions are sent separately and processed via your bank or our payment partner’s portal — not through this site.

3. How we use your personal data

We use the personal data described above for the following purposes:

  • To respond to your enquiry and prepare a project quote.
  • To send transactional emails confirming we’ve received your message and updating you during a project.
  • To send newsletter content if you have explicitly subscribed (you can unsubscribe at any time).
  • To improve the website’s performance, content, and navigation by analysing aggregated usage patterns.
  • To comply with legal obligations under UAE law, including responding to lawful requests from regulators.
  • To prevent abuse, security incidents, and fraudulent submissions.

We rely on the following lawful bases under the PDPL: (a) your consent when you submit a form or subscribe to the newsletter; (b) contractual necessity when you become a client and we need data to deliver the work; (c) legitimate interests for analytics, security, and improving the site, balanced against your rights and interests.

4. Cookies and tracking technologies

The site uses a small number of cookies and tracking technologies. We do not place advertising cookies or sell your data to third parties.

  • Strictly necessary: minimal cookies needed for the site to function (e.g., remembering your theme preference). No consent required under the PDPL because they are essential to the service you requested.
  • Analytics: Google Analytics 4 (cookies starting with _ga) collects pseudonymous usage data. We have IP anonymisation enabled and we do not link analytics data to your contact submissions.
  • Performance monitoring: Vercel sets a small number of cookies to measure page-load performance and prevent abuse.

You can disable non-essential cookies via your browser settings. Doing so will not affect your ability to use the site, but some analytics will not be collected.

5. Third-party services we share data with

We use a small number of carefully chosen third-party processors to operate the site. Each one only receives the data they need to do their job, and each is contractually bound to protect that data.

  • Vercel (USA) — hosting and CDN. Receives request logs and IP addresses for routing and security.
  • Resend (USA) — transactional email delivery for contact-form, quote-wizard, and newsletter messages. Receives the email content and recipient address.
  • Google Analytics 4 (USA) — pseudonymous web analytics. Receives anonymised usage data; IP addresses are truncated.
  • Sanity.io (USA / EU) — content management system for portfolio, blog, and service content. Does not receive visitor data.
  • SiteGround (Bulgaria/EU) — DNS provider. Routes traffic but does not process site visitor data.
  • WhatsApp Business (Meta, Ireland/USA) — used only when you click our WhatsApp link to start a conversation. Subject to Meta’s own privacy terms once you start chatting.

We do not sell, rent, or trade personal data to anyone, ever. We do not share data with advertisers.

6. International transfers

Some of the third-party processors above are located outside the UAE. When data is transferred outside the UAE, we rely on the safeguards permitted by Article 22 of the PDPL — typically the recipient country’s adequacy assessment, standard contractual clauses, or your explicit consent. We choose vendors with strong data-protection records and EU GDPR compliance where applicable.

7. How long we keep your data

  • Contact & quote enquiries: kept for up to 24 months from your last interaction, then deleted unless you become a client.
  • Client project records: kept for 7 years after project completion to comply with UAE accounting and tax-record retention rules.
  • Newsletter subscriptions: kept until you unsubscribe.
  • Analytics data: aggregated and pseudonymised; retained per Google Analytics 4 default settings (currently 14 months).
  • Server logs: rotated and deleted within 90 days unless retained for an active security investigation.

8. Your rights under the UAE PDPL

You have the following rights regarding your personal data:

  • Right to information — to know what data we hold about you.
  • Right of access — to receive a copy of your personal data.
  • Right to rectification — to have inaccurate data corrected.
  • Right to erasure — to have your data deleted, where there is no overriding legal obligation to keep it.
  • Right to restrict processing — to limit how we use your data while a complaint is being investigated.
  • Right to data portability — to receive your data in a structured, commonly used, machine-readable format.
  • Right to object — to processing based on our legitimate interests, including analytics and marketing.
  • Right to withdraw consent — at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, email hello@champxdigital.ae. We will respond within 30 days. If you believe we have not handled your data properly, you have the right to lodge a complaint with the UAE Data Office.

9. Data security

We protect personal data using technical and organisational measures appropriate to the risk: HTTPS encryption everywhere, HSTS preload, security headers, role-based access to internal tools, regular dependency audits, and a documented incident-response process. No system is perfectly secure, and we cannot guarantee absolute security, but we work hard to reduce risk.

10. Children’s privacy

This site is intended for business users aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe a child has submitted personal data through this site, please contact us and we will delete it promptly.

11. Links to other websites

The site may contain links to third-party websites — for example, our portfolio links to projects we have built for clients, our blog cites external sources, and our footer links to social platforms. This Privacy Policy does not apply to those sites. We recommend reading the privacy policies of any third-party site before sharing personal data with them.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business. The “Last updated” date at the top of this page indicates when the policy was last revised. Material changes will be highlighted on the site and, where required by law, communicated to subscribers by email.

13. How to contact us

For privacy questions, requests, or complaints, contact us using any of the following:

Effective date: April 28, 2026. This document is provided for transparency and is governed by the laws of the United Arab Emirates. If any clause is found to be unenforceable, the remainder of the policy continues in full force.

⌁ Let's work together

Your competitors are getting leads from their website. Are you?

Tell us what you need. We'll send a free estimate within 24 hours. No sales calls, no commitment.

Get your free estimate

Or call us at +971 50 358 3258