Privacy Policy
Last updated: 5 September 2026 · Version 1.0
This notice explains how personal data is handled when you visit topsocial.ae or contact us. TOP SOCIAL is a brand of XEPA International Trading FZ-LLC (the "Company", "we", "us"). We aim to meet the standards of both the EU General Data Protection Regulation (GDPR) and the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
1. Who we are (Data Controller)
XEPA International Trading FZ-LLC
Ras Al Khaimah Economic Zone (RAKEZ) · Compass Building, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates
Marketing Services Licence No. 47034060 · Social Media Marketing Licence No. 46002304
Contact for privacy matters: hey@topsocial.ae
2. The data we process
a. Data you give us
When you contact us by email, WhatsApp, or the contact form (which composes a message in your own email client), we receive what you choose to send — typically your name, email address or phone number, business name, and the content of your message.
b. Data collected automatically
When configured, our servers and consent-gated tools may process technical data to keep the site secure, measure audiences, and — only with your consent — support marketing. This can include: IP address (stored in truncated or salted-hashed form), device and browser type, pages viewed, referrer, timestamps, and cookie / consent identifiers.
3. Purposes & legal bases
| Purpose | Data | GDPR legal basis |
|---|---|---|
| Reply to your enquiry | Contact details, message | Art. 6(1)(b) pre-contract / (f) legitimate interest |
| Keep the site available & secure; abuse prevention; access register | Truncated/hashed IP, request metadata | Art. 6(1)(f) legitimate interest |
| Audience measurement (analytics) | Cookie/usage data | Art. 6(1)(a) consent |
| Marketing & advertising pixels (e.g. Meta) | Cookie/usage data, identifiers | Art. 6(1)(a) consent |
Under the PDPL, processing is based on your consent or on the other permitted grounds in Article 4 (including our legitimate business interests, where they do not override your rights).
4. Cookies & tracking
We use strictly necessary cookies to run the site and remember your consent choice. Analytics and marketing/advertising cookies and pixels are set only after you agree in the cookie banner, and you can change or withdraw your choice at any time. Full details, categories and named tools are in our Cookie Policy.
5. Who we share data with
We do not sell your data. We share it only with service providers acting on our instructions (processors) — for example hosting/CDN (Cloudflare), email delivery, and, where you have consented, analytics and advertising platforms. Each is bound by a data-processing agreement.
6. International transfers
We are based in the UAE and use providers that may process data outside your country, including in the EU and the USA. Where required, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses and equivalent PDPL mechanisms.
7. How long we keep data
Enquiry correspondence: kept for up to 24 months to handle your request and any follow-up, then deleted. Access-register and consent records: kept for 24 months to demonstrate that consent was validly obtained. Consent-based cookies: for the lifetime stated in the Cookie Policy.
8. Your rights
Subject to applicable law, you may request: access to your data; rectification; erasure; restriction or objection to processing; portability; and to withdraw consent at any time (without affecting prior processing). To exercise any of these, email hey@topsocial.ae. EU/EEA users may also lodge a complaint with their local supervisory authority; UAE users with the UAE Data Office.
9. Security
We use appropriate technical and organisational measures — encryption in transit (HTTPS), access controls on the admin area, IP minimisation in logs, and least-privilege data access — to protect personal data.
10. Contact & changes
Questions or requests: hey@topsocial.ae. We may update this policy; the version and date at the top show when it last changed, and material changes will be signposted on the site.