Mirage Minds is committed to protecting your privacy and handling your personal data responsibly and transparently. This Privacy Policy explains what personal data we collect, how and why we use it, who we share it with, how long we keep it, and the rights you have over your data.
This Policy applies to our website at www.mirageminds.ae, our advertising and lead-generation campaigns (including ads run on Meta/Facebook, Instagram, Google, LinkedIn, and TikTok), our landing pages, and any other digital touchpoint where we collect personal data.
As a Dubai Mainland company, we process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and its implementing regulations, as well as any other applicable data protection laws.
Contents
Mirage Minds is an IT services and digital marketing agency based in the United Arab Emirates. We provide web development, software development, and marketing services, including paid advertising and lead-generation campaigns for our own business and on behalf of our clients.
For the purposes of the personal data described in this Policy, the data controller is:
Where we collect and process personal data on behalf of a client, we act as a data processor for that client and process the data according to our agreement with them. In those cases, the client is the controller and their privacy policy also applies.
2.1 Information you give us directly
When you contact us, request a quote, submit an enquiry, subscribe, or respond to one of our ads or landing pages, we may collect:
2.2 Information from advertising and lead-generation campaigns
When you interact with an ad we run, we may receive the contact details you submit through a platform lead form (Meta/Facebook, LinkedIn Lead Ad, or Google lead form), the ad or campaign you responded to, and limited engagement signals from the advertising platform.
2.3 Information we collect automatically
When you visit our website or landing pages, we and our service providers may automatically collect: IP address and approximate location, browser type, device type and operating system, pages viewed, links clicked, time on page, referring source, and cookie identifiers.
2.4 Information from third parties
We may receive information from advertising and analytics platforms (e.g. Meta, Google, LinkedIn), referrals from clients or partners, and publicly available sources for business-to-business outreach. We do not knowingly collect special categories of sensitive personal data.
We use personal data only where we have a lawful basis under the PDPL:
| Purpose | Legal basis |
|---|---|
| Respond to your enquiry, quote request, or message | Your consent, and/or steps to enter into a contract at your request |
| Provide and deliver our IT and marketing services | Performance of a contract |
| Follow up on leads and qualify your interest (by phone, email, or WhatsApp) | Your consent given when you submitted your details |
| Send marketing communications, offers, and updates | Your consent (which you can withdraw at any time) |
| Run, measure, and improve our advertising and retargeting | Your consent (for non-essential cookies/tracking) |
| Operate, secure, and improve our website | Our legitimate business interests, balanced against your rights |
| Comply with legal, tax, and regulatory obligations | Compliance with a legal obligation |
Where processing relies on your consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
Our website uses cookies and similar technologies to make the site work, understand how it is used, and support our advertising. We use three categories:
Where required, we ask for your consent before placing non-essential cookies. You can change preferences at any time through our cookie banner or browser controls.
To run and optimise our campaigns, we use services from Meta Platforms (Facebook, Instagram), Google (Google Ads, Google Analytics), LinkedIn, and TikTok. These platforms may use cookies, pixels, and device identifiers to measure conversions, build audiences, and show you ads.
They process this data as independent controllers under their own privacy policies. We recommend reviewing their policies and using their ad-preference settings to control how they use your data.
If you submit your details through one of our forms or ads, or otherwise express interest, we may contact you about our services by email, phone, SMS, or WhatsApp. We will only send marketing communications where we have the appropriate consent.
You can opt out at any time by replying STOP, clicking unsubscribe, or emailing info@mirageminds.ae. Opting out of marketing does not stop service-related messages necessary to deliver a service you requested.
We share personal data only as needed and with appropriate safeguards. Recipients may include:
We require our processors to protect personal data and use it only for the purposes we specify.
Mirage Minds operates internationally and some of our service providers and team members are located outside the UAE, including our delivery and operations team in Pakistan. Your personal data may therefore be transferred to, stored, or processed in countries outside the UAE.
Where we transfer personal data outside the UAE, we do so in accordance with the PDPL’s cross-border transfer requirements. You may contact us to obtain more information about the safeguards we apply.
| Data type | Retention period |
|---|---|
| Leads and enquiries that do not convert | 36 months, then deleted or anonymised |
| Client and contract records | Duration of engagement plus any legally required period |
| Marketing contacts | Until you unsubscribe or consent expires |
When data is no longer needed, we securely delete or anonymise it.
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. These include access controls, encryption in transit, restricted staff access, and agreements with our processors. No method of transmission or storage is completely secure, but we work to protect your data and respond promptly to any incident in line with our legal obligations.
Subject to the PDPL and any applicable conditions, you have the right to:
To exercise any of these rights, contact us using the details in Section 13. We may need to verify your identity before acting on a request.
Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.
For any questions about this Policy, to exercise your rights, or to raise a concern, contact:
We may update this Policy from time to time to reflect changes in our practices, technology, or legal requirements. The latest version will always be posted on this page with an updated “Last updated” date. Where changes are significant, we will take reasonable steps to notify you.
Have any business questions or confused about where to start? Connect with us and our dedicated consultants will help you out.
