Privacy Policy

Last updated: 3 September 2026

FRONT ROW MARKETING MANAGEMENT L.L.C, Trade Licence No. 1016326, registered at Office A-61, Marleno Building, Al Murqabat, Deira, Dubai, United Arab Emirates. This document describes our actual practice; it is not legal advice and should be reviewed by qualified counsel before it is relied on.

1. Who we are

FRONT ROW MARKETING MANAGEMENT L.L.C, trading as Front Row, Trade Licence No. 1016326, registered at Office A-61, Marleno Building, Al Murqabat, Deira, Dubai, United Arab Emirates, is the controller of the personal data collected through https://frontrowdxb.com. For any question about this policy or about your data, write to admin@frontrowdxb.com.

2. Which laws apply

We are established in the United Arab Emirates, so we process personal data under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the UAE PDPL). Its Executive Regulations have not yet been issued; until they are, we apply the Decree-Law itself and recognised good practice. Because we also offer our services to people in the European Economic Area and the United Kingdom, the EU and UK General Data Protection Regulation apply to that processing under Article 3(2) GDPR, and we give EEA and UK visitors the rights described below.

3. What we collect

Only three things. First, what you type into our contact form: your name, company, work email, phone, country, service interest, budget range, your message and your confirmation that you are not subject to applicable sanctions. Second, any correspondence you send us by email, phone or WhatsApp. Third, the standard technical records our hosting provider keeps in order to serve pages and block abuse, such as IP address, browser type, requested page and timestamp. We run no analytics, no advertising pixels and no tracking of any kind, so we do not build a profile of you and we cannot follow you to other websites.

4. Why we use it

To answer your enquiry and take the steps you asked for before we enter a contract; to deliver and administer our services once engaged; to carry out the sanctions and anti-money-laundering screening described on our service coverage page; to keep the records UAE law requires us to keep; and to keep the website secure and available.

Service Coverage

5. On what legal basis

Under the UAE PDPL we rely on the performance of a contract or steps taken at your request, on compliance with our legal obligations, and on our legitimate interest in operating and protecting the business. Where the GDPR applies, the corresponding bases are Article 6(1)(b), Article 6(1)(c) and Article 6(1)(f). We do not rely on consent for anything on this website, because nothing here requires it. We will never send you marketing you did not ask for.

6. No profiling, no automated decisions

We do not carry out automated decision-making that produces legal or similarly significant effects, and we do not profile you. Sanctions screening is performed by a human being who reviews the result before any decision is taken.

7. Who else sees your data

Only the service providers that make the website work, each under a contract that limits them to processing on our instructions: Supabase, which stores contact-form submissions; Cloudflare, which serves the site at the edge; Lovable, our deployment platform; and Migadu, our email provider. Google is a recipient only if you choose to load the map on our contact page. We do not sell personal data, we do not share it for advertising, and we disclose it to authorities only where UAE law obliges us to.

8. Transfers outside the UAE

Our providers operate infrastructure outside the United Arab Emirates, so your data is processed abroad. Under Article 22 of the PDPL such transfers require an adequate level of protection or appropriate contractual safeguards; where the GDPR applies we rely on the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum, as the case may be. You may ask us for a copy of the safeguards in place.

9. How long we keep it

Enquiries that do not lead to work are deleted after twenty-four months. Client records are kept for the life of the engagement and then for the period UAE commercial and anti-money-laundering law requires, which is at least five years from the end of the relationship. Server logs are retained by our hosting provider for a short technical period. When a period ends, data is deleted or irreversibly anonymised.

10. Your rights

You may ask us for a copy of your data, for it to be corrected, deleted or restricted, for it to be sent to another controller in a portable format, and you may object to processing we base on our legitimate interest. Where the GDPR applies, these are Articles 15 to 22. Write to admin@frontrowdxb.com; we reply within one month and we do not charge for a first request. We may ask you to confirm your identity before we act.

11. If you want to complain

Please raise it with us first at admin@frontrowdxb.com — most things are quicker to fix directly. If you remain unsatisfied, you can complain to the UAE Data Office, whose functions are supported by the Telecommunications and Digital Government Regulatory Authority during the current transition period. If you are in the European Economic Area or the United Kingdom, you may instead complain to the supervisory authority of the country where you live or work, or to the UK Information Commissioner's Office.

12. Security

The site is served exclusively over encrypted connections, form submissions are validated on the server before they are stored, and access to the submission database is restricted to named members of our team using individual credentials. No system is perfect; if a breach ever affects your rights we will notify you and the competent authority as the law requires.

13. Children

This website is intended for business audiences and is not directed at children. We do not knowingly collect data from anyone under eighteen. If you believe a child has sent us personal data, write to admin@frontrowdxb.com and we will delete it.

14. Changes to this policy

If we change how we handle personal data, we update this page and the date at the top of it before the change takes effect. If a change is material, we will say so here rather than leave you to spot it.