Welcome to DuBiTop (hereinafter referred to as “the Website,” “we,” “us,” or “our”), a personal digital publication dedicated to curating premium lifestyle content, travel insights, and destination guides across Dubai and the wider United Arab Emirates (UAE). This Privacy Policy governs the manner in which we collect, process, retain, and protect your personal data when you visit or interact with our website, and outlines your legal rights in relation to that data.

By accessing or using DuBiTop, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree to any part of this Policy, you should discontinue use of the Website immediately.

1. Identity of the Data Controller

DuBiTop is operated as an independent personal blog based in the UAE. For all matters relating to this Privacy Policy, data processing activities, or the exercise of your rights under applicable legislation, you may contact us directly:

Email: dubizoom@gmail.com

We will endeavour to respond to all legitimate enquiries within a reasonable timeframe and in accordance with applicable law.

2. Scope and Applicability

This Privacy Policy applies to all visitors and users of DuBiTop, regardless of geographical location. Where specific rights apply to residents of the European Economic Area (EEA), the United Kingdom (UK), California (USA), or the UAE, those rights are addressed in dedicated sections below.

This Policy does not extend to third-party websites, platforms, or services that may be linked to or from our Website. We expressly disclaim any responsibility for the privacy practices of such third parties.

3. Personal Data We Collect

We collect the following categories of personal data, depending on how you interact with our Website:

3.1 Data Provided Directly by You

• Name and email address when you contact us voluntarily via email or inquiry forms.
• Any additional information you choose to include in your communications with us.
• Comments or user-generated content submitted through the Website, if such functionality is enabled.

3.2 Data Collected Automatically

• Internet Protocol (IP) address and approximate geolocation data.
• Browser type, version, and operating system.
• Pages visited, time spent on each page, and navigation paths.
• Referring URLs and exit pages.
• Device identifiers, screen resolution, and language preferences.
• Cookie identifiers and similar tracking data (see Section 6 below).

3.3 Data from Third-Party Sources

We may receive aggregated or anonymised data from analytics providers, advertising networks, and content delivery partners. Where such data can be combined with personal identifiers, it is treated as personal data under this Policy.

4. Purposes and Legal Bases for Processing

We process personal data only for specified, explicit, and legitimate purposes. The table below outlines our processing activities and the corresponding legal bases:

• Purpose: Operate and maintain the Website — Legal Basis: Legitimate interests (Art. 6(1)(f) GDPR)
• Purpose: Analyse user behaviour and improve content — Legal Basis: Legitimate interests / Consent (where cookies are used)
• Purpose: Respond to user enquiries and communications — Legal Basis: Performance of a task at the user’s request (Art. 6(1)(b) GDPR)
• Purpose: Serve personalised or contextual advertising — Legal Basis: Consent via IAB TCF v2.3 (see Section 6)
• Purpose: Comply with applicable laws and regulations — Legal Basis: Legal obligation (Art. 6(1)(c) GDPR)
• Purpose: Prevent fraud and ensure website security — Legal Basis: Legitimate interests

5. Disclosure of Personal Data

We do not sell, rent, or trade your personal data to any third party for commercial gain. We may, however, share data in the following limited circumstances:

• With trusted service providers acting as data processors on our behalf (e.g., analytics platforms, hosting providers, CDN services), subject to appropriate data processing agreements.
• With advertising technology partners where you have provided consent under the IAB Transparency and Consent Framework (TCF) v2.3.
• Where required by applicable law, regulation, court order, or governmental authority.
• In the event of a merger, acquisition, or business transfer, where your data may be disclosed to the prospective entity subject to equivalent protections.

In all cases, we require third parties to handle your data securely and in accordance with applicable data protection law.

6. Cookies, Tracking Technologies & IAB TCF v2.3

6.1 Overview of Cookies

DuBiTop uses cookies and similar tracking technologies — including pixels, web beacons, local storage objects, and device fingerprinting techniques — to deliver a functional, personalised, and analytically informed user experience.

Cookies are small data files stored on your device. They enable us and our partners to recognise you across sessions, measure website performance, and, where you have consented, deliver targeted advertising.

6.2 Categories of Cookies We Use

• Strictly Necessary Cookies: Essential to the basic functioning of the Website. These cannot be disabled without significantly impairing your ability to use the site. No consent is required for these cookies.
• Performance & Analytics Cookies: Used to measure how visitors interact with the Website, identify popular content, and diagnose technical issues. Activated only with your consent.
• Functional Cookies: Allow the Website to remember your preferences (e.g., language, region) to provide an enhanced experience. Activated only with your consent.
• Advertising & Targeting Cookies: Deployed by us and our advertising partners to deliver content and advertisements relevant to your interests, and to measure the effectiveness of advertising campaigns. These are only activated following your explicit consent via our Consent Management Platform (CMP).

6.3 IAB Transparency and Consent Framework (TCF) v2.3

We operate in compliance with the Interactive Advertising Bureau (IAB) Europe Transparency and Consent Framework version 2.3 (TCF v2.3). This framework provides a standardised mechanism through which users can grant or withhold consent for the processing of their personal data by us and our registered advertising technology vendors.

When you first visit our Website, a Consent Management Platform (CMP) will present you with a clear, layered consent notice. Through this interface, you may:

• Review the full list of registered vendors and their stated processing purposes.
• Grant consent on a purpose-by-purpose or vendor-by-vendor basis.
• Exercise your right to object to processing conducted under legitimate interests.
• Withdraw or modify your consent at any time by revisiting the cookie preference centre.

The Purposes defined under TCF v2.3 for which we and our vendors may seek consent or rely on legitimate interests include:

• Purpose 1: Store and/or access information on a device (consent required).
• Purpose 2: Use limited data to select advertising (legitimate interests / consent).
• Purpose 3: Create profiles for personalised advertising (consent required).
• Purpose 4: Use profiles to select personalised advertising (consent required).
• Purpose 5: Create profiles to personalise content (consent required).
• Purpose 6: Use profiles to select personalised content (consent required).
• Purpose 7: Measure advertising performance (legitimate interests / consent).
• Purpose 8: Measure content performance (legitimate interests / consent).
• Purpose 9: Understand audiences through statistics or combinations of data from different sources (consent required).
• Purpose 10: Develop and improve services (legitimate interests / consent).
• Special Purpose 1: Ensure security, prevent and detect fraud, and debug.
• Special Purpose 2: Deliver and present advertising and content.

Your consent signals are stored in a standardised TC String and are shared with IAB-registered vendors only for the purposes you have authorised. You may withdraw or update your consent preferences at any time. Withdrawal of consent will not affect the lawfulness of processing conducted prior to withdrawal.

For the full list of vendors registered on our CMP, please access the cookie preference centre available on our Website.

6.4 Managing Your Cookie Preferences

In addition to the consent choices available through our CMP, you may manage cookie settings through your browser. Please note that restricting cookies at the browser level may impact website functionality. Instructions for managing cookies in commonly used browsers are available on the respective browser’s official support pages.

7. Affiliate Links and Sponsored Content

DuBiTop may feature affiliate links or sponsored content from third parties. When you click on an affiliate link, you may be redirected to an external website operated by a third party, who may independently collect personal data and set cookies in accordance with their own privacy policies.

We are not responsible for the content, privacy practices, or data processing activities of any linked third-party website. We recommend reviewing the privacy policies of any external sites you visit.

Affiliate links may be identified by disclosures in the relevant content or by the use of disclosure notices such as ‘This post contains affiliate links.’

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures are reviewed and updated periodically in line with evolving industry standards.

Notwithstanding the above, no method of transmission over the internet or electronic storage is entirely secure. Whilst we strive to protect your data using commercially reasonable means, we cannot guarantee absolute security. You transmit data to us at your own risk.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required by law, affected individuals without undue delay.

9. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The specific retention periods depend on the nature of the data and the purpose of processing:

• Contact and enquiry data: Retained for up to 12 months following the resolution of the enquiry, unless a longer period is required by law.
• Analytics and behavioural data: Retained in aggregated or anonymised form for up to 26 months, in line with standard analytics platform defaults.
• Consent records (TCF TC Strings): Retained for a minimum of 12 months from the date of consent, to demonstrate compliance with applicable regulations.
• Cookie data: Retained for the duration specified at the time of consent, as disclosed in our CMP.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

10. International Data Transfers

DuBiTop is based in the UAE. If you access our Website from the European Economic Area, the United Kingdom, or another jurisdiction with data transfer restrictions, please be aware that your data may be transferred to and processed in the UAE or other countries that may not provide the same level of data protection as your home jurisdiction.

Where such transfers occur, we take appropriate safeguards to ensure your data is protected in accordance with applicable data protection law. These safeguards may include reliance on adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms as permitted by the relevant regulatory authority.

By using our Website, you acknowledge that your data may be processed in jurisdictions outside your own.

11. Your Rights Under GDPR (EEA & UK Residents)

If you are located in the EEA or the United Kingdom, the GDPR and/or UK GDPR grants you the following rights in respect of your personal data:

• Right of Access (Art. 15): Request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
• Right to Erasure / ‘Right to Be Forgotten’ (Art. 17): Request deletion of your data in certain circumstances.
• Right to Restriction of Processing (Art. 18): Request that we limit how we use your data.
• Right to Data Portability (Art. 20): Request transfer of your data to another organisation in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent (Art. 7(3)): Withdraw any previously given consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact us at dubizoom@gmail.com. We will respond within one calendar month, extendable by a further two months in complex cases. We reserve the right to verify your identity before processing your request.

You also have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been infringed.

12. California Privacy Rights (CCPA / CPRA)

For residents of California, USA, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides the following additional rights:

• Right to Know: The right to request disclosure of the categories and specific pieces of personal information collected about you, as well as the purposes for collection and any third parties with whom it has been shared.
• Right to Delete: The right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: The right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: Although we do not sell personal information in the traditional sense, to the extent that our use of advertising cookies may constitute ‘sharing’ under the CPRA, you may opt out by adjusting your preferences in our CMP.
• Right to Limit Use of Sensitive Personal Information: The right to direct us to use sensitive personal information only for specified, limited purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your rights under the CCPA/CPRA.

To submit a verifiable California consumer request, please contact us at dubizoom@gmail.com. We aim to respond within 45 days, extendable by a further 45 days where reasonably necessary.

We provide all users with the ability to request access to, correction of, or the deletion of their personal data in accordance with applicable privacy standards.

14. Children’s Privacy

DuBiTop is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at dubizoom@gmail.com. Upon verification, we will take prompt steps to delete such information from our records.

15. Limitation of Liability

DuBiTop provides information on an ‘as is’ and ‘as available’ basis. Whilst we make every effort to ensure the accuracy and completeness of content published on the Website, we make no warranties, express or implied, as to the reliability, accuracy, or fitness for purpose of any information provided.

To the fullest extent permitted by applicable law, we shall not be liable for any direct, indirect, incidental, consequential, or special damages arising from your use of, or inability to use, this Website or its content, including any loss of data, revenue, or profits.

We are not responsible for any content, services, or products offered by third-party websites linked from this Website. The inclusion of any external link does not imply endorsement of the linked website or its operators.

Where local law does not permit the exclusion or limitation of implied warranties or liability for incidental or consequential damages, the above exclusions may not apply to you.

16. Changes to This Privacy Policy

We reserve the right to amend or update this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or for other operational or legal reasons. The revised Policy will be published on this page with an updated effective date. Where changes are material, we will endeavour to provide prominent notice.

Your continued use of the Website following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.

17. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please do not hesitate to contact us:

Email: dubizoom@gmail.com

Website: DuBiTop

We are committed to addressing your concerns and will respond to all legitimate enquiries as promptly as practicable.

Last Updated: April 2026