Privacy Policy

Last updated 3 November 2026

This policy explains what personal information Seven Keys Collective, a free zone establishment registered in the Emirate of Fujairah, United Arab Emirates, collects through this website, how we use it, and your rights.

We are the controller of that information under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). Because we also offer our services to people in the United Kingdom and Europe, we handle their information in line with the UK GDPR and the EU GDPR.

What we collect

We only collect what you choose to send us:

  • Enquiry and interest forms: your name, email address, phone number and the details you write, plus the services or experiences you select.
  • Emails and WhatsApp messages you send us: your contact details and the content of your message.
  • Basic technical information recorded by our hosting provider when you visit, such as your IP address, browser type and the pages requested, kept briefly for security and to keep the website running.

We do not use analytics or advertising tools, and we do not set cookies (see our Cookie Settings page).

How we use it

  • To reply to your enquiry and arrange the services you ask about (lawful basis: taking steps at your request before entering into a contract, and performing that contract).
  • To keep records of our correspondence and bookings (lawful basis: our legitimate interests, and legal obligations such as accounting).
  • To keep the website secure and working (lawful basis: our legitimate interests).

We will only send you marketing if you have asked us to, and you can stop it at any time.

Who we share it with

We do not sell your information. We share it only where needed:

  • Service providers who help us run the website and our email: Vercel (website hosting), Resend (delivering form submissions to our inbox) and Google Workspace (email). They act on our instructions.
  • Suppliers and partners, such as hotels, venues and the partners of a hosted experience, when you ask us to arrange something with them.
  • Authorities or advisers where the law requires it.

International transfers

Our providers store and process information outside the UAE, including in the United States, the United Kingdom and the European Economic Area. Where we transfer information across borders, we make sure the safeguards required by the applicable law are in place, such as standard contractual clauses.

How long we keep it

We keep enquiries for up to two years from our last contact if nothing goes ahead, and records of services we arrange for as long as we need them for legal, accounting and insurance purposes (normally six years). Hosting logs are kept for a short period only.

Your rights

You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. To use any of these rights, email us at the address below. We will reply within one month.

If you are unhappy with how we have handled your information, please tell us first. You can also complain to the UAE Data Office. If you live in the UK you can complain to the Information Commissioner's Office (ico.org.uk), and if you live in the EU, to your local data protection authority.

Security

The website is served over an encrypted connection, and we limit access to your information to people who need it. No method of sending information over the internet is completely secure, so please do not send us payment card details through the website or by email.

Changes and contact

We may update this policy and will post the new version here. Questions or requests: info@sevenkeyscollective.com.