Privacy Policy
How Studio Future collects, uses and protects your personal data when you visit our website or get in touch.
1. Who we are
Studio Future is operated by STUDIO FUTURE L.L.C-FZ, a free zone company established in Dubai, United Arab Emirates, with its registered office at Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.
In this policy, "we", "us", and "our" refer to STUDIO FUTURE L.L.C-FZ as the data controller for personal data collected through studiofuture.ae.
If you have any questions about this policy or how we handle your data, email us at hello@studiofuture.ae.
2. What data we collect
Information you give us
When you submit a form on our site or contact us directly, we collect the information you provide, including:
- Your name
- Your email address
- Your website URL (optional)
- The content of your message
- Any additional details you choose to share
Information we collect automatically
When you visit our site, we automatically collect certain information about your device and how you interact with the site:
- IP address and approximate location (city, region, country) derived from it
- Browser type, version, and user agent
- Device type and operating system
- Pages viewed, time spent, and referring URL
- Click and scroll interactions on our pages
- Advertising identifiers (Google Click ID, Meta Click ID) passed from marketing campaigns
3. How we use your data
We use personal data to:
- Respond to enquiries and deliver our services
- Send the details of your enquiry to our internal team chat (Mattermost) so we can reply
- Understand how visitors use the site and improve content, performance, and design
- Measure the effectiveness of our advertising and attribute conversions
- Build and serve relevant advertising through Google Ads and Meta (Facebook and Instagram)
- Protect the site against fraud, spam, and abuse
- Comply with legal and regulatory obligations
4. Legal basis for processing
We process personal data in line with UAE Federal Decree Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and its implementing regulations. Where visitors to our site are located in the United Kingdom or European Economic Area, we also take account of the UK GDPR and EU GDPR as applicable.
Our lawful bases for processing are:
- Consent — for analytics and marketing cookies, and for sending identifying data (such as hashed email addresses) to advertising platforms for enhanced conversion measurement.
- Legitimate interest — to respond to your enquiries, operate and secure the site, and measure overall site performance.
- Contractual necessity — where we are taking steps to enter into or perform a contract with you.
- Legal obligation — where we must process your data to comply with law.
5. Who we share your data with
We do not sell your personal data. We share it with third-party service providers only as needed to operate the site and deliver our services:
- Vercel Inc. — hosting, content delivery, and traffic analytics. Vercel may process your IP address and request metadata to serve our site.
- Google LLC — Google Tag Manager, Google Analytics 4, and Google Ads. These services use cookies and process device/browsing data to measure traffic and attribute advertising conversions. Where you have provided identifying information on a form, we pass a hashed (SHA-256) version of your email address to Google via Google Ads Enhanced Conversions to improve attribution accuracy.
- Meta Platforms, Inc. — the Meta (Facebook) Pixel and Conversions API. These services collect browsing events and, where a form is submitted, a hashed version of your email address and name for advertising measurement and targeting.
- Mattermost — our private team collaboration tool, self-hosted on our own infrastructure. When you submit a form, the details of your message (name, email, website, message, approximate location, and browsing context) are sent to our internal team chat so we can respond. Your data is not shared with any third party through this channel.
- Professional advisors — lawyers, accountants, and auditors, where required.
- Authorities — where we are legally required to disclose personal data.
6. Cookies and similar technologies
We use cookies and similar tracking technologies to operate the site, measure performance, and support advertising. The main categories are:
- Strictly necessary — required for the site to function (e.g. security, load balancing). Cannot be turned off.
- Analytics — Google Analytics 4 cookies (
_ga,_ga_*) help us understand how visitors use the site. - Advertising — Google Ads conversion cookies (
_gcl_*) and Meta Pixel cookies (_fbp,_fbc) measure the performance of our advertising campaigns and enable retargeting.
You can control cookies through your browser settings. Blocking advertising or analytics cookies may affect how the site functions and how we measure performance, but the core site will still work.
7. International data transfers
We are based in the United Arab Emirates, but several of our service providers are based abroad (including in the United States and Europe). When we transfer personal data outside the UAE, we do so in accordance with the PDPL and rely on appropriate safeguards — such as transfers to countries the UAE recognises as providing an adequate level of protection, contractual commitments from our providers, or equivalent mechanisms (for example, the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum where relevant).
8. How long we keep your data
We retain personal data only for as long as necessary for the purposes described in this policy:
- Enquiry messages and related correspondence: up to 3 years after our last contact with you.
- Analytics data in Google Analytics: up to 14 months at event level.
- Advertising cookies: per each platform's default (typically up to 90 days for click IDs, up to 2 years for pixel cookies).
- Data we must retain for legal or accounting reasons: for the period required by law.
9. Your rights
Subject to applicable law, you have the right to:
- Request access to the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure of your personal data ("right to be forgotten")
- Object to, or request restriction of, processing based on legitimate interest
- Withdraw consent at any time where processing is based on consent
- Request portability of your data to another provider
- Lodge a complaint with the UAE Data Office (dataoffice.gov.ae). If you are resident in the UK or EEA, you may also contact your local supervisory authority (for UK residents, the Information Commissioner's Office at ico.org.uk).
10. How to exercise your rights
To exercise any of the rights above, email us at hello@studiofuture.ae. We will respond within 30 days and may ask you to verify your identity before acting on the request.
11. Children's privacy
Our site is not directed at children under 16, and we do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us so we can delete it.
12. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Significant changes will be communicated via the site or, where appropriate, by email.
13. Contact us
Email: hello@studiofuture.ae
Company: STUDIO FUTURE L.L.C-FZ
Address: Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E