Privacy Policy

Overview & Controller Identity

DB Group FZCO ("we", "us", "our") is the data controller responsible for your personal information. We are registered and operating within the Dubai Airport Free Zone (DAFZA), Dubai, United Arab Emirates.

This Privacy Policy applies to personal data collected through our website at dbgroupfzco.com, through our contact forms, and in the course of our business communications. It does not cover the practices of third-party websites that may be linked from our Site.

Personal Data We Collect

We collect personal data in the following ways:

Information you provide directly:

• Name, company name, job title, and role in your organisation.
• Email address, telephone number, and country or region.
• Trade requirements: commodity type, estimated volume, destination port, and enquiry type submitted through our contact form.
• Any other information you choose to include in messages sent to us.

Information collected automatically:

• Technical data including your IP address, browser type and version, operating system, and referring URL.
• Usage data such as pages visited, time spent on pages, and links clicked.
• Cookie identifiers and session data (see Section 8 for details).

We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us immediately.

How We Use Your Data

We use personal data collected from you for the following purposes:

We will not use your data for purposes incompatible with those described above without first obtaining your consent or establishing another lawful basis.

Legal Basis for Processing

We process your personal data on the following legal grounds:

• Consent: When you submit a contact form or enquiry, you provide voluntary consent for us to process your data to respond to your request.
• Legitimate interests: We process technical and usage data to improve our website and communications, where these interests are not overridden by your data protection rights.
• Legal obligation: Where processing is necessary to comply with UAE law, DAFZA regulations, or lawful government requests.
• Contractual necessity: Where processing is required to perform or prepare for a contract with you or your organisation.

You may withdraw consent at any time by contacting us at info@dbgroupfzco.com. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

Sharing Your Data

We do not sell, rent, or trade your personal data to third parties. We may share your data in the following limited circumstances:

• Service providers: Trusted third-party companies that assist us in operating the Site or conducting our business (e.g., hosting providers, email delivery services, analytics platforms). These parties are contractually obligated to keep your data confidential and use it only for the purposes we specify.
• Professional advisers: Lawyers, accountants, or auditors who provide professional services to us, subject to duties of confidentiality.
• Regulatory authorities: DAFZA, UAE federal authorities, or other competent bodies where required by law or regulation.
• Business transfers: In connection with a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity, subject to the same privacy protections.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations.

• Enquiry and contact form data is retained for up to 3 years from the date of submission, or longer if required to manage an ongoing business relationship.
• Technical and usage data collected via cookies is retained in accordance with our Cookie Policy (see Section 8).
• Financial and transaction records are retained in compliance with UAE commercial law requirements (typically 5–10 years).

When your personal data is no longer required, we will securely delete or anonymise it.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Secure HTTPS encryption for all data transmitted through our website.
• Access controls limiting internal access to personal data on a need-to-know basis.
• Regular review of our information security policies and practices.
• Secure disposal of data that is no longer required.

While we take data security seriously, no method of transmission over the internet or method of electronic storage is 100% secure. If you become aware of any suspected data breach or security incident involving our Site, please notify us immediately at info@dbgroupfzco.com.

Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and help us understand how the Site is used. Cookies are small text files placed on your device.

We use the following types of cookies:

• Strictly necessary cookies: Required for the basic functioning of the Site, such as session management and security. These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our Site (e.g., pages visited, time on site). We use this data to improve content and performance. These cookies are anonymised where possible.
• Preference cookies: Remember your settings and preferences to improve your experience on return visits.

You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Site. Most browsers allow you to refuse or accept cookies, delete existing cookies, and set your browser to notify you when a cookie is set.

We do not use advertising or retargeting cookies on this Site.

Your Data Protection Rights

Under the UAE PDPL and applicable data protection principles, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data, subject to applicable legal obligations that require us to retain it.
• Right to restrict processing: Request that we limit the use of your personal data in certain circumstances.
• Right to data portability: Receive your data in a structured, commonly used format and transmit it to another controller, where technically feasible.
• Right to object: Object to our processing of your data based on legitimate interests.
• Right to withdraw consent: Withdraw your consent to data processing at any time, where consent is the legal basis for processing.

To exercise any of these rights, please contact us using the details in Section 11. We will respond within 30 days of receiving your request. We may need to verify your identity before fulfilling your request.

International Data Transfers

DB Group FZCO operates within the UAE and processes data primarily within UAE infrastructure. Where data is transferred to, or accessed by, parties outside the UAE (for example, a cloud service provider with servers in another jurisdiction), we take steps to ensure an adequate level of protection for your data, including:

• Engaging only with service providers that maintain appropriate data protection standards.
• Implementing contractual clauses that obligate recipients to protect data at a standard equivalent to UAE requirements.

We do not transfer your personal data to countries that lack adequate data protection frameworks without first implementing appropriate safeguards.

Contact Our Privacy Team

For any questions about this Privacy Policy, to exercise your rights, or to raise a concern about how we handle your personal data, please contact us:

Also see our Terms of Use for the conditions governing your use of the DB Group FZCO website.