Web Design Company
Privacy Policy
Yalla ("Yalla," "we," "us," or "our") is a web design and digital growth agency operating across Dubai (UAE), Riyadh (Saudi Arabia), and London (United Kingdom). This Privacy Policy explains what personal data we collect when you visit our website, request a quote, or work with us as a client, how we use and protect that data, and the choices and rights available to you. It applies today and is built to stay accurate as our services and tools continue to grow.
1. Scope of This Policy
- This Policy applies to visitors of our website, prospective clients who submit an inquiry or request a quote, active clients receiving our web design, development, branding, or marketing services, and anyone who contacts us via our website form, WhatsApp Business channel, email, or phone. Where local law provides additional or different protections — including the UAE Personal Data Protection Law, the Saudi Personal Data Protection Law (PDPL) issued by SDAIA, and the UK General Data Protection Regulation (UK GDPR) — we apply the standard most protective of your rights for your location.
2. Information We Collect
2.1 Information You Provide Directly
- Contact details: name, email address, phone number, and WhatsApp number submitted through our website forms or CRM.
- Project details: business information, goals, budget range, and any files, briefs, or brand assets you share with our team.
- Communication records: messages sent via our contact forms, WhatsApp Business API, email, or phone, including call notes and chatbot conversation logs.
- Payment and billing information when you engage us for a project, processed through our payment or invoicing partners.
2.2 Information Collected Automatically
- Device and usage data such as IP address, browser type, pages visited, referral source, and time on site, collected via cookies and analytics tools.
- Approximate location (city or region level) inferred from IP address, used to route you to the correct regional office and currency.
- Interaction data from our website chatbot or AI-assisted tools, including questions asked and pages viewed immediately before contact.
2.3 Information From Third Parties
- We may receive limited information from advertising platforms (such as Meta and Google), our CRM providers, and WhatsApp Business/Meta Business Manager when you interact with our ads, business profile, or connected messaging channels.
3. How We Use Your Information
- To respond to inquiries, prepare quotes, and deliver the web design, development, branding, or marketing services you request.
- To manage our client relationship, including project updates, invoicing, and after-launch support.
- To operate our WhatsApp Business integration, including message templates, order updates, OTPs, and two-way CRM sync you or your business has opted into.
- To improve our website, services, and AI-assisted tools (such as chatbot features) through aggregated, de-identified analysis.
- To send relevant updates or marketing communications, where you have consented or where permitted by law, with an option to opt out at any time.
- To meet legal, tax, accounting, and regulatory obligations in the jurisdictions where we operate.
4. Cookies and Similar Technologies
- Our website uses cookies and similar technologies to keep the site functional, understand how visitors use our pages, and measure the performance of our marketing campaigns. This includes essential cookies required for the site to work, analytics cookies that help us understand visitor behaviour, and marketing cookies used for retargeting on platforms such as Meta and Google. You can control or disable non-essential cookies through your browser settings or our cookie consent banner at any time.
5. How We Share Your Information
We do not sell your personal data. We share information only in the following circumstances:
- With trusted service providers who support our operations, including hosting, CRM, analytics, payment processing, and communication platforms, bound by confidentiality and data protection obligations.
- With payment gateways and courier or logistics partners when required to fulfil an eCommerce or integration project.
- With regulators, tax authorities, or law enforcement where required by applicable law.
- In connection with a merger, acquisition, or restructuring of our business, with continued protection of your data under this Policy or its successor.
We never share your data with third parties for their own independent marketing purposes without your consent.
6. AI and Automated Tools
- Where we use AI-assisted features, such as chatbots for appointment booking or customer queries, conversations may be processed by AI systems to generate responses and improve service quality. We do not use AI to make solely automated decisions that produce legal or similarly significant effects about you without the option of human review. As our AI capabilities evolve, this section will be updated to reflect any new automated processing we introduce.
7. Data Retention
- We retain personal data only as long as necessary to fulfil the purposes described in this Policy, meet contractual commitments with clients, and comply with legal, accounting, or tax obligations. Project-related data is generally retained for the duration of our working relationship plus a reasonable period afterward for support and record-keeping, after which it is securely deleted or anonymised.
8. Data Security
- We apply industry-standard technical and organisational measures, including encrypted data transmission, access controls, and secure hosting, to protect your personal data against unauthorised access, alteration, disclosure, or loss. No method of transmission or storage is completely secure, and we continuously review our practices as threats and technology evolve.
9. International Data Transfers
- As we operate across the UAE, Saudi Arabia, and the United Kingdom, personal data may be transferred to and processed in countries other than your own. Where such transfers occur, we take appropriate steps, such as contractual safeguards, to ensure your data continues to receive an adequate level of protection.
10. Your Privacy Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal data, subject to legal or contractual retention requirements.
- Object to or restrict certain processing, including direct marketing.
- Withdraw consent at any time where processing is based on consent.
- Request a copy of your data in a portable format, where applicable.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us using the details in Section 13.
11. Children's Privacy
- Our services are directed at businesses and professional clients. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.
12. Changes to This Policy
- We may update this Privacy Policy from time to time to reflect changes in our services, tools, or applicable law, including evolving regulations around AI and data protection. The "Last Updated" date at the top of this page reflects the most recent revision, and we encourage you to review this page periodically. Material changes affecting how we handle your data will be communicated through our website or directly where appropriate.