This Privacy and Cookies Policy explains how GKEY Marketing Agency FZ-LLC ("GKEY", "we", "our" or "us") collects, uses, stores and protects personal information when you visit gkey.agency (the "Website") or contact us in connection with our marketing and consulting services.
We are committed to handling your personal data responsibly and in accordance with applicable UAE data protection principles and international best practices, including the EU General Data Protection Regulation (GDPR) to the extent it applies to our processing of data belonging to individuals in the European Economic Area.
01Who We Are
| Legal entity | GKEY Marketing Agency FZ-LLC |
| Licence number | 17008057, Media & Marketing Consultancy |
| Registered address | Compass Building, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates |
| Free zone | Ras Al Khaimah Economic Zone (RAKEZ) |
| Data controller email | g@gkey.agency |
For all data protection enquiries, please contact us at g@gkey.agency. We aim to respond within 5 business days.
02Data We Collect
We collect only the data that is necessary to provide our services and operate the Website. This includes:
| Category | Examples | Source |
|---|---|---|
| Contact data | Name, email address, company name, phone number | You, via contact form or Calendly booking |
| Communication data | Messages, enquiries, meeting notes | You, via email or scheduling tools |
| Usage data | Pages visited, session duration, device type, browser, approximate geolocation (country/city) | Automatically via Google Analytics 4 |
| Marketing data | Ad interactions, click-through data, conversion events | Automatically via Meta Pixel, Google Ads |
| Technical data | IP address, cookies, referrer URL | Automatically via browser and Cloudflare |
We do not collect sensitive personal data (health, financial account numbers, biometric data, etc.) through this Website.
03How We Use Your Data
- Responding to enquiries: to reply to your messages and schedule discovery calls via Calendly.
- Service delivery: to provide marketing consulting, campaign management and related services to clients.
- Website analytics: to understand how visitors use the Website, identify popular content and improve user experience (via Google Analytics 4).
- Advertising measurement: to measure the effectiveness of our own marketing campaigns (via Meta Pixel and Google Ads).
- Legal compliance: to comply with applicable UAE laws, regulations and licence obligations.
- Security: to detect, prevent and address fraud, abuse or technical issues.
We do not sell, rent or trade your personal data to third parties for their own marketing purposes.
04Legal Bases for Processing
Where the GDPR applies to our processing of your data, we rely on the following legal bases:
| Processing activity | Legal basis |
|---|---|
| Responding to enquiries | Legitimate interests / pre-contractual steps |
| Service delivery under contract | Performance of a contract |
| Analytics & site improvement | Legitimate interests (or consent where required) |
| Advertising measurement cookies | Consent (via cookie banner) |
| Legal obligations | Compliance with legal obligations |
05Third Parties & International Transfers
We use the following third-party services that may process your personal data:
| Service | Purpose | Location |
|---|---|---|
| Google Analytics 4 | Website analytics | USA (SCCs / adequacy) |
| Google Ads / Tag Manager | Advertising & tag management | USA (SCCs / adequacy) |
| Meta (Facebook) Pixel | Advertising measurement | USA (SCCs) |
| Calendly | Meeting scheduling | USA (SCCs) |
| Cloudflare | Website hosting, CDN, security | Global (SCCs) |
| Google Workspace | Email communication | USA (SCCs / adequacy) |
Where data is transferred outside the UAE or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions. Each provider listed above maintains its own privacy policy and data processing agreements.
06Cookies & Tracking Technologies
We use cookies and similar tracking technologies on the Website. A cookie is a small text file placed on your device. We use the following categories:
| Category | Cookie / Tool | Purpose | Duration |
|---|---|---|---|
| Strictly necessary | Cloudflare security tokens | DDoS protection, routing | Session |
| Analytics | Google Analytics 4 (_ga, _ga_*) | Traffic measurement, user behaviour | Up to 2 years |
| Marketing | Meta Pixel (_fbp, _fbc) | Ad measurement, remarketing audiences | Up to 90 days |
| Marketing | Google Ads / GTM (_gcl_*) | Conversion tracking | Up to 90 days |
| Functional | Calendly | Scheduling widget functionality | Session / 1 year |
Managing cookies. You can control and delete cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Note that disabling certain cookies may affect the functionality of the Website.
For analytics cookies, you can opt out via Google Analytics Opt-out. For Meta advertising, visit your Facebook Ad Preferences.
07Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law:
- Enquiries and contact data: up to 3 years from last contact, or until you request deletion.
- Client engagement data: for the duration of the engagement plus 5 years, to meet commercial and legal record-keeping requirements under UAE law.
- Analytics data: up to 14 months in Google Analytics (configured at account level).
- Marketing pixel data: governed by Meta's and Google's own retention policies (typically 90 days for ad measurement).
08Your Rights
Depending on your location and the applicable law, you may have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
- Restriction: request that we restrict processing of your data in certain circumstances.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interests, including for direct marketing.
- Withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior processing.
To exercise any of these rights, please email g@gkey.agency with a brief description of your request. We will respond within 30 days. We may need to verify your identity before processing the request.
09Children's Privacy
The Website is directed at business professionals and is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately at g@gkey.agency and we will delete it promptly.
10Contact & Complaints
If you have any questions, concerns or complaints about how we handle your personal data, please contact us:
If you are located in the EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.
We reserve the right to update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the Website after such changes constitutes your acceptance of the updated policy.