Privacy Policy

1. Introduction

Thank you for your interest in our company. Data protection is a high priority for the management of Sixty Seven Digital FZCO (67 Digital, we, us). You can use most of this website without giving us any personal data. If you want to use particular services through the website, we may need to process personal data. Where processing is necessary and there is no legal basis for it, we ask for your consent.

We process personal data such as your name, address, email address or telephone number in line with the data protection laws that apply to us, including UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, where it applies, the EU General Data Protection Regulation (GDPR). This policy explains what we collect, how we use it and the rights you have.

As the controller, we have put technical and organisational measures in place to protect the personal data processed through this website. Even so, data sent over the internet can have security gaps, and absolute protection cannot be guaranteed. You are always free to give us personal data another way, for example by telephone.

2. Who is responsible for your data

The controller for the purposes of data protection law is:

• Sixty Seven Digital FZCO
• IFZA Business Park, DDP, Dubai Silicon Oasis, Dubai, United Arab Emirates
• Phone: +971 55 573 6767
• Email: hello@67.digital
• Website: www.67.digital

3. Definitions

We want this policy to be easy to read. These are the main terms we use:

• Personal data: any information relating to an identified or identifiable natural person (the data subject), such as a name, an identification number, location data or an online identifier.
• Processing: any operation performed on personal data, such as collection, recording, organisation, storage, alteration, retrieval, use, disclosure, restriction, erasure or destruction.
• Restriction of processing: marking stored personal data in order to limit its processing in the future.
• Profiling: automated processing of personal data to evaluate personal aspects of a person, such as preferences, interests, behaviour or location.
• Pseudonymisation: processing personal data so that it can no longer be attributed to a specific person without additional information that is kept separately and protected.
• Controller: the person or body that decides the purposes and means of processing personal data.
• Processor: a person or body that processes personal data on behalf of the controller.
• Recipient: a person or body to which personal data is disclosed.
• Third party: anyone other than the data subject, the controller, the processor and the people authorised to process data under their direct authority.
• Consent: a freely given, specific, informed and unambiguous indication of the data subject's agreement to the processing of his or her personal data.

4. General data collected when you visit

When a person or an automated system opens our website, the server may record general technical information in its log files: the browser type and version, the operating system, the referring website, the pages visited, the date and time of access, the IP address, the internet service provider, and similar information that helps us defend our systems against attacks.

We do not use this information to draw conclusions about you. We need it to deliver the website correctly, to improve its content, to keep our systems working and secure, and to give law enforcement authorities the information they need in the event of a cyber attack. Log data is kept separately from any personal data you give us.

5. Cookies and analytics

This website measures traffic with our own first-party analytics, which is cookieless. It sets no analytics cookie and stores no IP address. A visit is counted using a salted, hashed identifier that changes every day, so visitors cannot be followed from one day to the next. We see totals such as pages viewed, referring channel, device type and browser.

We may also use Google Analytics. It is optional, and when it is enabled Google sets its own cookies and processes usage data, with IP anonymisation, to produce reports for us about how the website is used. You can prevent this by refusing cookies in your browser or by installing the Google Analytics opt-out browser add-on. Google's privacy policy explains how Google handles this data.

The website may use a small number of strictly necessary cookies or browser storage entries, for example to remember your language. You can delete cookies or block them in your browser settings at any time. If you block all cookies, some functions of the website may not work fully.

6. Forms and free tools

When you send us a contact form, book a meeting, request a quote or use one of our free tools, we collect the information you enter. This may include your name, email address, phone number, company, the service you are interested in, your message, and the content or web address you submit to a tool.

We use this information to respond to you, to provide the result you asked for, and to contact you about 67 Digital services that may be relevant to you. You can opt out of these messages at any time by emailing hello@67.digital, and we will stop. We do not sell your information.

Some free tools use AI models supplied by third-party providers to generate a result. Security and data privacy come first: the text you submit is sent to the provider only to produce that result, and we ask you not to enter confidential or sensitive personal data into any tool.

7. Contacting us

If you contact us by email or through a form, the personal data you send is stored automatically so that we can handle your enquiry and reply to you. You give us this data voluntarily. We do not pass it to third parties, except to the service providers described in this policy who help us run the website and our communications.

8. Newsletters and email updates

If you subscribe to email updates from us, we use your email address to send them. We may record the date and time of your subscription so that we can show that it was requested. Every email includes a way to unsubscribe, and you can also unsubscribe by emailing hello@67.digital. Our emails may measure opens and clicks so that we can improve them. We do not give newsletter data to third parties for their own use.

9. Job applications

We collect and process the personal data of applicants in order to handle the application. This includes applications sent by email or through a form. If we sign an employment contract with you, the data is kept to manage the employment relationship in line with the law. If we do not, your application documents are erased two months after we notify you of the decision, unless we have another legitimate interest in keeping them or you ask us to keep them for future roles.

10. Third-party services and social media

We use carefully chosen service providers to host the website, send email, measure traffic and, where relevant, run advertising with Google. They process data on our instructions or under their own privacy policies. Some of them may process data outside the United Arab Emirates. Where that happens, we take reasonable steps to make sure your data stays protected.

Our website links to our profiles on Facebook, Instagram, LinkedIn, YouTube and other platforms. When you follow one of these links or interact with embedded content from these platforms, the platform may collect data about you, and may link it to your account if you are logged in. That processing is covered by the platform's own privacy policy.

If a payment is made online, it is handled by the payment provider under its own terms and privacy policy.

11. Legal basis for processing

• Consent, where we ask for it for a specific purpose.
• Performance of a contract with you, or steps taken at your request before a contract, such as answering an enquiry about our services.
• Compliance with a legal obligation, such as tax and accounting rules.
• Protection of the vital interests of a person, in rare cases.
• Our legitimate interests, where they are not overridden by your interests, rights and freedoms. Our legitimate interest is to run and grow our business for the benefit of our employees and shareholders.

12. How long we keep data

We process and store personal data only for as long as the purpose requires, or for as long as the laws that apply to us require. The main test is the relevant statutory retention period. When the purpose no longer applies or the period ends, the data is routinely blocked or erased, unless it is still needed to perform or prepare a contract.

13. Your rights

Subject to the law that applies to you, you have the right to:

• Confirmation: ask whether we process personal data about you.
• Access: receive a copy of your personal data and information about how it is processed.
• Rectification: have inaccurate data corrected and incomplete data completed.
• Erasure: have your data erased, for example when it is no longer needed, when you withdraw consent, when you object to the processing or when it has been processed unlawfully.
• Restriction: have processing restricted, for example while the accuracy of the data is being checked.
• Portability: receive the data you gave us in a structured, commonly used, machine-readable format, and have it sent to another controller where this is technically feasible.
• Objection: object to processing based on our legitimate interests, and object at any time to processing for direct marketing.
• Automated decisions: not be subject to a decision based solely on automated processing, including profiling, that has legal or similarly significant effects on you.
• Withdrawal of consent: withdraw your consent at any time. This does not affect processing carried out before the withdrawal.

To use any of these rights, email hello@67.digital. We may need to confirm your identity before we act. You may also have the right to complain to the competent data protection authority.

14. When providing data is required

Some personal data is required by law, for example under tax rules, or under a contract, for example details of the contracting party. To sign a contract with us you may need to give us personal data that we then process. If you do not, we may not be able to conclude the contract. If you are unsure whether data is required, ask us before you provide it.

15. Automated decision-making

As a responsible company, we do not use automated decision-making or profiling that produces legal effects for you.

16. Changes to this policy

We may update this policy from time to time. The current version is always published on this page. If you have any question about it, email hello@67.digital.