Privacy Policy – ArabShine
Last Updated: [08/04/2025]
1. Scope & Consent
This policy governs data collected via www.arabshine.com (including future subdomains/mobile apps) and applies to all users, with special provisions for:
- UAE Federal Decree-Law No. 45/2021 (PDPL)
- DIFC/ADGM regulations (if applicable)
- GDPR (for EU users)
- CCPA (for California users)
By using our site, you consent to:
✓ Cookies & tracking
✓ Cross-border data transfers
✓ Future policy updates (notified via website banners)
Data Explicitly Excluded:
- Sensitive data (biometrics, health, Emirates ID)
- Children’s data (<21 years, per UAE digital age of consent)
3. Data Sharing & Third Parties
We share data only with:
- Subprocessors: AWS (UAE data centers), Google AdSense
- Legal compliance: UAE authorities if legally mandated
- M&A scenarios: Data transfer during business transfers
International Transfers:
- Covered under UAE Standard Contractual Clauses
- GDPR-compliant mechanisms (for EU data)
5. Security & Breach Protocols
- Encryption: TLS 1.2+, AES-256
- Access controls: Role-based permissions
- Breach response: Notify UAE authorities & affected users within 72 hours if high risk
6. Future-Proofing Clauses
- Regulatory Updates:
- Automatic incorporation of new UAE/EU/US laws into this policy.
- Users notified of material changes via email/site banners.
- AI/ML Data Use:
- Clear opt-in for training AI models with anonymized data.
- Prohibition of discriminatory algorithms (per UAE AI Ethics Guidelines).
- Emerging Technologies:
- Blockchain-based consent management (if adopted).
7. Google Ad-Specific Disclosures
- We use Google AdSense; their data collection is governed by Google’s Privacy Policy.
- Users can opt-out of personalized ads via Ad Settings.
8. Dispute Resolution
- Primary jurisdiction: UAE courts
- Alternative: Binding arbitration under DIFC Arbitration Centre rules
