Privacy Policy

Overview

This Privacy Policy explains how NextDigital Growth ("NextDigital", "we", "us" or "our") collects, uses, discloses and protects the personal information you provide when you visit our website (nextdigital.it) or engage our marketing and growth services.

We are committed to handling your data responsibly, in line with applicable data protection laws including the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and, where applicable, the EU General Data Protection Regulation (GDPR).

By using our website or contacting us you acknowledge that you have read and understood this policy.

Information we collect

We collect information in the following ways:

• Contact and business details you provide directly — such as your name, email address, phone number, company name, job title and website URL — when you fill in a form, book a Growth Audit call or subscribe to our newsletter.
• Communications content — the content of emails, WhatsApp messages, enquiry forms and any other messages you send us.
• Usage and device data collected automatically — including your IP address, browser type and version, device type, pages visited, time spent on each page, referral source and geographic region.
• Conversion and event data — actions you take on our website (e.g. button clicks, form completions) collected through Google Tag Manager, Google Analytics 4 (GA4) and Meta's server-side Conversions API (CAPI).
• Client-provided data — business information, customer lists and campaign assets you share with us in the course of receiving our services.

How we use your information

We use the information we collect for the following purposes:

• To respond to your enquiries, deliver the services you have requested and manage our client relationship with you.
• To send you updates, service communications and, where you have opted in, marketing newsletters or promotional content.
• To operate, maintain and improve our website, content and service offerings.
• To measure the performance of our advertising campaigns and website using analytics and attribution tools.
• To send purchase and conversion events server-side to advertising platforms (Meta, Google) so that campaigns are optimised on accurate data.
• To comply with our legal, regulatory and contractual obligations.
• To protect the rights, property and safety of NextDigital, our clients and others.

Legal basis for processing

Where the GDPR or equivalent legislation applies, we process your personal data on one or more of the following lawful bases:

• Consent — where you have given us clear and specific permission, for example to send marketing emails or place non-essential cookies.
• Performance of a contract — where processing is necessary to deliver the services you have engaged us to provide.
• Legitimate interests — where we have a genuine business purpose that does not override your fundamental rights, such as improving our services, preventing fraud or carrying out direct marketing to existing clients.
• Legal obligation — where we are required to process data to comply with a law or regulation.

Tracking technologies

We and our service providers use cookies, pixel tags and server-side event tracking on our website. These technologies help us understand how visitors use our site, measure the effectiveness of our marketing campaigns and deliver relevant content. For full details and to manage your preferences, please see our Cookie Policy.

Specifically, we use:

• Google Tag Manager and Google Analytics 4 — to track page visits, traffic sources and conversion events.
• Meta Pixel and Conversions API (server-side) — to measure ad performance and attribute sales and leads back to Meta campaigns accurately, even where browser-based tracking is limited.
• Hotjar and Microsoft Clarity — to record anonymised session replays and heatmaps that help us improve user experience.

Sharing your information

We do not sell your personal information to third parties. We may share it in the following limited circumstances:

• Service providers and sub-processors — trusted partners who help us operate our business, such as cloud hosting providers, CRM platforms, email delivery tools, analytics platforms and advertising networks. These parties are contractually bound to use your data only to perform services on our behalf and to maintain appropriate security standards.
• Advertising platforms — conversion events and anonymised audience data are shared with Meta and Google to optimise paid advertising campaigns we manage, consistent with their data use policies.
• Professional advisers — lawyers, accountants and auditors, where necessary for legal or financial purposes.
• Law enforcement or regulatory authorities — where we are required to do so by applicable law, court order or governmental authority.
• Business transfers — in the event of a merger, acquisition or sale of all or part of our business, your information may be transferred as part of that transaction, subject to equivalent privacy protections.

International data transfers

NextDigital operates from the UAE and works with clients and service providers globally. If you are located in the European Economic Area (EEA) or the United Kingdom, your personal data may be transferred to and processed in countries that do not have data protection laws equivalent to those in your jurisdiction.

When such transfers occur, we rely on approved transfer mechanisms — including standard contractual clauses (SCCs) approved by the European Commission — to ensure your data receives an equivalent level of protection.

Data retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, or as required to meet legal, accounting, reporting or contractual obligations. In practice:

• Enquiry and contact data is retained for up to 3 years from the date of last contact.
• Active client data is held for the duration of the engagement plus 5 years, in line with standard commercial record-keeping requirements.
• Analytics and usage data is retained in aggregated or anonymised form for longer periods for statistical purposes.
• Where you ask us to delete your data, we will do so promptly unless a legal obligation requires us to retain it.

Your rights

Depending on your location, you may have the following rights regarding your personal information:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct inaccurate or incomplete data.
• Right to erasure — to request that we delete your personal data, subject to legal retention obligations.
• Right to restrict processing — to ask us to pause certain uses of your data while a dispute is resolved.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent — where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.

How to exercise your rights

To exercise any of the rights above, please contact us at info@nextdigital.it.com with the subject line "Data Privacy Request". We will respond within 30 days. Where we cannot comply with a request, we will explain why.

If you are located in the EEA and believe we have not handled your data in accordance with the GDPR, you have the right to lodge a complaint with your local data protection authority.

Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, accidental loss, destruction or misuse. These measures include encrypted data transmission (TLS/HTTPS), access controls, regular security reviews and contractual obligations placed on our service providers.

No method of transmission over the internet is, however, completely secure. If you believe your data has been compromised, please notify us immediately at info@nextdigital.it.com.

Third-party links

Our website may contain links to third-party websites or services. This Privacy Policy does not apply to those sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party site you visit.

Children's privacy

Our website and services are directed at businesses and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal obligations. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Contact us

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

• Email: info@nextdigital.it.com
• Address: NextDigital Growth, Al Zahia, Sharjah, United Arab Emirates