Privacy Policy

Last updated: · Controller: Enkindle Digital, SRTI Park, Sharjah, UAE

01 Who we are

Enkindle Digital ("Enkindle", "we", "us") is a performance marketing agency based at Block B, Office B43-191, SRTI Park, Sharjah, United Arab Emirates. We run paid advertising and analytics for our clients, powered by our proprietary platform, SPARK.

For our own website visitors and prospects, Enkindle is the data controller. When we process data on behalf of a client (for example, campaign or customer data inside SPARK), we act as a data processor under that client's instructions and our services agreement.

02 Data we collect

Information you give us

• Contact details you submit (name, email, phone, company) when you book a call, request an audit, or email us.
• Account credentials and profile details if you are given access to the SPARK platform.
• Any information you choose to share in messages or during onboarding.

Information we collect automatically

• Usage and device data (IP address, browser, pages viewed, referring links) via cookies and similar technologies.
• Interaction data with our emails and ads (opens, clicks) where permitted.

Client campaign data (processed on our clients' behalf)

• Advertising performance data pulled from platforms such as Meta, Google, TikTok, Snapchat, GA4, and connected stores.
• Aggregated and, where applicable, pseudonymised conversion and audience data used to measure and optimise campaigns.

03 How we use your data

• To respond to enquiries and provide our services and the SPARK platform.
• To plan, run, measure and optimise advertising campaigns.
• To secure our systems, prevent fraud, and keep audit records.
• To send service updates and, with your consent, relevant marketing you can opt out of at any time.
• To meet legal, tax and regulatory obligations.

04 Legal basis for processing

Where GDPR or similar laws apply, we rely on: your consent (e.g. marketing, non-essential cookies); performance of a contract (delivering our services); our legitimate interests (running and securing our business, measuring campaigns) balanced against your rights; and legal obligations. Under the UAE and KSA Personal Data Protection Laws (PDPL), we process personal data on equivalent lawful bases and honour the data-subject rights those laws provide.

05 Cookies & tracking

Our website uses essential cookies to function and, with your consent where required, analytics and advertising cookies/pixels (for example Meta Pixel, Google/GA4, TikTok, Snapchat) to understand traffic and measure campaigns. You can control cookies through your browser settings and any consent banner we present. Turning off non-essential cookies won't stop you using the site.

06 Sharing & service providers

We share personal data only where needed, with:

• Service providers (processors) who host, secure or support our systems (e.g. cloud hosting, email, analytics), under contracts that require them to protect your data.
• Advertising and analytics platforms to run and measure campaigns (see below).
• Authorities or advisors where required by law, or to protect our rights.

We do not sell personal data or share it for others' independent marketing.

07 Advertising platforms

To deliver campaigns we connect to platforms including Meta, Google Ads & GA4, TikTok, Snapchat, and e-commerce systems such as Shopify and PrestaShop. Data shared with these platforms is governed by their own privacy policies and, where relevant, we use privacy-protective methods (such as hashed or server-side data) to improve accuracy while limiting exposure.

08 International transfers

We operate primarily in the UAE and KSA and serve global clients, so data may be processed in other countries. Where we transfer personal data across borders, we use appropriate safeguards (such as adequacy decisions or standard contractual clauses) consistent with UAE PDPL, KSA PDPL and GDPR requirements.

09 Data security

We take security seriously. The SPARK platform uses secure logins with two-factor authentication (MFA), encryption in transit and at rest, strict role-based access controls, and audit logging. We limit access to personal data to staff who need it and keep our safeguards under review. No system is perfectly secure, but we work hard to protect your information.

10 Data retention

We keep personal data only as long as needed for the purposes above, to meet legal obligations, or to resolve disputes. Client campaign data is retained per our agreement with each client and deleted or returned on request when the engagement ends.

11 Your rights

Subject to applicable law (UAE PDPL, KSA PDPL, GDPR), you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Withdraw consent at any time (without affecting prior processing).
• Request a copy of your data in a portable format.
• Lodge a complaint with the relevant data protection authority.

To exercise any of these, email hello@enkindle.digital. We'll respond within the timeframe the law requires. If your request concerns data we process for a client, we'll refer it to that client (the controller) and support their response.

12 Children

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18.

13 Changes to this policy

We may update this policy from time to time. When we make material changes, we'll update the "last updated" date above and, where appropriate, notify you.

14 Contact us

Questions about this policy or your data? Get in touch: