Privacy Policy

1. Who We Are

This Privacy Policy applies to Matcha Lab AI (also referred to as MATCHALAB), a trading name of MAREE PROJECT MANAGEMENT - FZCO, a company registered in the Dubai Free Zone, United Arab Emirates ("we", "us", "our"). Our registered address is Emirates Towers, Sheikh Zayed Road, Trade Centre District, Dubai, UAE.

We are committed to protecting your personal data and respecting your privacy in accordance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and applicable international standards including the GDPR where applicable.

2. Information We Collect

We may collect the following categories of personal information:

a) Contact Details

When you fill out our contact or inquiry form, or communicate with us directly, we collect: name, email address, phone number, company name, service interest, and message content.

b) Website Usage Data

When you visit our website, we automatically collect technical data such as IP address, browser type and version, pages visited, time spent on pages, referring URLs, and device information — via analytics tools described in Section 5 below.

c) Advertising & Account Data (Client Services)

When clients engage us to manage their advertising or marketing accounts, we may access and process data within those accounts on their behalf. This includes data from platforms such as Google Ads, Meta (Facebook & Instagram) Ads, TikTok Ads, and other advertising or marketing platforms. Such access is strictly limited to performing authorised agency services — including account management, campaign optimisation, performance reporting, monitoring, and related activities — as instructed by the client.

d) Google OAuth Data

Where clients authorise access via Google OAuth (e.g., to connect Google Ads or Google Analytics accounts), we access only the scopes explicitly approved by the client. Data obtained through Google OAuth is used solely for the authorised purpose and is not shared with third parties or used for any purpose beyond the agreed agency services.

e) Analytics Data

We use analytics platforms (including Google Analytics 4 and Google Tag Manager) to collect aggregated, anonymised data about how visitors interact with our website. This helps us improve our content and user experience.

f) Information Provided by Clients

In the course of delivering agency services, clients may provide us with additional business information, creative assets, audience data, or other materials necessary to fulfil the agreed scope of work.

We do not collect sensitive personal data (such as health, financial account, or biometric information) through our website.

3. How We Use Your Information

We use the information collected to:

• Respond to your inquiries and provide you with the services you request
• Send you proposals, project updates, and relevant service communications
• Manage and optimise advertising campaigns on behalf of clients
• Generate performance reports and analytics for client accounts
• Monitor and improve campaign outcomes as part of authorised agency services
• Improve our website, content, and service offerings
• Process payments where applicable
• Comply with legal and regulatory obligations

We rely on your consent (for marketing communications) and legitimate interest (for responding to inquiries and delivering contracted services) as our legal bases for processing your data.

4. We Do Not Sell Your Data

We do not sell, rent, trade, or otherwise transfer your personal data to third parties for their own commercial purposes. Any sharing of data with service providers is solely to support delivery of our services, as described in Section 5.

5. Analytics, Advertising Platforms & Third-Party Services

We use the following third-party platforms and tools in the course of operating our website and delivering agency services. Each is engaged strictly for the purposes described below:

All third-party service providers are contractually required to handle your data securely and only for the specific purposes for which it is shared.

6. Cookies

Our website uses the following types of cookies:

• Essential cookies: Required for basic website functionality and security. These cannot be disabled.
• Analytics cookies: Used by Google Analytics 4 and Google Tag Manager to collect anonymised data about how visitors use our site.
• Advertising cookies: Used by the Meta Pixel to measure ad performance and, where applicable, to support retargeting.

You can control or disable cookies through your browser settings. Disabling certain cookies may limit the functionality of our website. Where required by law, we will obtain your consent before placing non-essential cookies.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law:

• Inquiry and contact data: up to 3 years from last contact
• Client project and contract data: up to 7 years for accounting and legal compliance
• Analytics data: as determined by the respective platform's retention settings

Data accessed within client advertising accounts is retained only for as long as the client relationship is active and for any legally required period thereafter.

8. Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted connections (HTTPS), access controls, and secure data storage practices.

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant authorities and affected individuals as required by applicable law.

9. International Transfers

Your data may be transferred to and processed in countries outside the UAE, including countries where third-party platforms (such as Google and Meta) operate their infrastructure. Where such transfers occur, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws.

10. Your Rights

Depending on your location and applicable law, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict the processing of your data
• Withdraw consent at any time (where processing is based on consent)
• Request data portability
• Lodge a complaint with a relevant supervisory authority

To exercise any of these rights, please contact us at support@matchalab.ai. We will respond within 30 days.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, how we handle your data, or wish to exercise your rights, please contact us: