01 • WHO WE ARE & WHAT THIS COVERS

Metric Bloom is your data controller

Metric Bloom operates in the UAE and acts as data controller for personal data collected through our website (metricbloom.ae), marketing services, CRM systems, and communication channels including email and WhatsApp.

02 • WHAT WE COLLECT & WHY

Data we collect and how

– Identity & contact — Name, email, phone, company — via forms, audit booking, and direct communication.

– Business info — Industry, goals, marketing data — collected during onboarding and strategy calls.

– Usage data — Pages visited, device type, time on site — via cookies and analytics tools.

– Communications — Email content, call notes, WhatsApp messages from direct interaction.

– Financial records — Invoice and payment status for billing.

We don't collect sensitive data (health, biometric, religious) and will never require it.

03 • HOW WE USE IT

Lawful bases for processing

We process personal data only where we have a lawful basis under UAE PDPL:

– Contract — To deliver your services, invoice, and manage your account.

– Legitimate interests — To respond to enquiries, improve our services, and manage operations.

– Consent — For marketing emails or automated sequences — withdraw any time.

– Legal obligation — To comply with UAE tax and regulatory requirements.

We do not use automated decisions that produce significant effects without human review.

04 • WHO WE SHARE DATA WITH

Sharing your data

We do not sell your personal data.

We share data only where necessary, with parties bound by data processing agreements:

– Platforms — GoHighLevel, Google Workspace, Meta Ads, WhatsApp Business API.

– Brand partners — Only with your explicit consent for a specific collaboration.

– Legal authorities — Where required by UAE law, court order, or regulation.

Cross-border transfers include appropriate protections consistent with UAE PDPL.

05 • YOUR CUSTOMERS' DATA

When we process data on your behalf

When we set up your CRM, email flows, or AI agents, you may share customer data with us. In this case, you are the controller and we are the processor — we act only on your instructions. You are responsible for ensuring you have a lawful basis and any required consents before sharing your customers' data with us.

06 • COOKIES

How we use cookies

– Essential — Required for the site to work. Cannot be disabled.

– Analytics — Page performance and visitor behaviour via Google Analytics.

– Marketing — Ad effectiveness tracking via Meta and Google.

You can control non-essential cookies through your browser settings without affecting site functionality.

07 • HOW LONG WE KEEP DATA

Retention periods

– Active client data — Duration of engagement plus 5 years (UAE commercial records).

– Prospects & leads — Up to 2 years from last interaction, or until consent is withdrawn.

– Financial records — 5 years minimum (UAE FTA requirement).

– Website analytics — 26 months (Google Analytics default).

Data is securely deleted or anonymised on expiry.

08 • YOUR RIGHTS UNDER UAE PDPL

Rights you hold

– Access — Request a copy of data we hold on you.

– Correction — Ask us to fix inaccurate or incomplete data.

– Deletion — Request erasure where there is no lawful reason to retain.

– Portability — Receive your data in a structured format.

– Objection — Object to processing based on legitimate interests.

– Withdraw consent — Opt out of marketing at any time.

Email [email protected] to exercise any right. We respond within 30 days. You may also complain to the UAE Data Office.

09 • SECURITY, CHILDREN & UPDATES

How we protect your data

We use encrypted storage, role-based access controls, and reputable certified platforms (Metric Bloom, Google Workspace). We will notify affected individuals of any breach posing risk to their rights, per UAE PDPL.

Our services are for businesses and professionals — we do not knowingly collect data from anyone under 18.

We may update this policy. Material changes are communicated by email or site notice. Continued use after notice means acceptance.

— • CONTACT

Privacy questions or requests

Email: [email protected]

Website: metricbloom.ae

Hours: Mon–Fri, 9am–6pm GST

You also have the right to lodge a complaint with the UAE Data Office if you believe your data protection rights have been violated.