PrivacyPolicy

GoNFilm (“GoNFilm”, “we”, “us”, or “our”) is an IT solutions company based at One Central, World Trade Centre, Dubai, United Arab Emirates. We build websites, CRM, task management, HR, and e-commerce systems, and we provide digital marketing services for brands and clinics.

This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website, contact us, respond to our advertising (including on Facebook and Instagram), or work with us as a client. We are the controller of the personal information described in this policy, except where section 7 says otherwise.

Information you give us

• Contact form: your name, email address, company, phone number, the services you are interested in, your budget range, and your message.
• Advertising lead forms: if you submit a lead form in one of our ads on Facebook or Instagram, Meta shares the details you enter with us. These are usually your name, email address, phone number, and answers to the form's questions.
• Communications: anything you send us by email, phone, WhatsApp, or social media messages, and records of those conversations.
• Client information: if you become a client, the contact, billing, and project details needed to deliver our services and invoice you.

Information collected automatically

• Device and usage data: your IP address, browser type, device type, operating system, referring page, pages viewed, and the date and time of your visit.
• Cookies and similar technologies: small files and scripts, including advertising pixels, that help us measure our website and advertising. See section 5.

Information from third parties

Advertising platforms such as Meta and Google may give us aggregated reports about how our ads perform. They may also give us lead form submissions you choose to send us.

We use personal information to:

• respond to your enquiries and send you proposals or quotes;
• provide, manage, and support the services you engage us for;
• send invoices, collect payments, and keep business records;
• run, measure, and improve our advertising on platforms such as Facebook, Instagram, and Google, including showing our ads to people who have visited our website;
• understand how visitors use our website and improve it;
• send you updates about our services where you have agreed to this, or where the law allows. You can opt out at any time;
• protect our website, prevent fraud and abuse, and comply with our legal obligations.

We process personal information in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, where it applies to you, other data protection laws such as the EU and UK GDPR. Depending on the situation, we rely on:

• Your consent: for example, when you submit a form or accept advertising cookies;
• A contract with you: to prepare a proposal or deliver services you have asked for;
• Our legitimate interests: to run and promote our business, as long as those interests are not overridden by your rights;
• Legal obligations: for example, to keep accounting and tax records.

We advertise on Facebook and Instagram and may use Meta Business Tools, including the Meta Pixel, Conversions API, and Lead Ads. We may also use similar tools from Google, such as Google Ads and Google Analytics.

Third parties, including Meta and Google, may use cookies, web beacons, and other storage technologies to collect or receive information from our website and elsewhere on the internet. They use that information to provide measurement services and to target ads. This can include information about the pages you view and the actions you take, such as submitting our contact form.

When we use the Conversions API or upload customer lists to create audiences, we send hashed (encrypted) identifiers, such as an email address or phone number, so that Meta can match them to its users. Meta uses these identifiers only for matching and deletes them afterwards, as set out in Meta's terms.

Your choices

• Control the ads you see on Facebook and Instagram in your Meta ad preferences.
• Control Google ads personalisation in your Google ad settings.
• Opt out of interest-based advertising from participating companies at aboutads.info/choices or youronlinechoices.eu.
• Block or delete cookies in your browser settings. Some parts of the website may not work as well if you do.

You can read how Meta processes data in the Meta Privacy Policy.

We do not sell your personal information. We share it only with:

• Service providers who help us run our business, such as website hosting (Amazon Web Services), email delivery (Resend), communication tools, accounting software, and cloud storage. They may use the information only to provide their services to us.
• Advertising and analytics partners such as Meta and Google, as described in section 5.
• Professional advisers such as lawyers, accountants, and auditors, where needed.
• Authorities when the law requires it, or to protect our rights, our clients, or the public.
• A buyer or successor if our business is merged, acquired, or restructured. This policy will continue to apply to your information.

When we build or operate systems for our clients, such as a clinic CRM, an HR system, or an online store, we may process personal information about the client's own customers, patients, or employees. In those cases the client is the controller and we act on its documented instructions as a processor.

We keep that information confidential, use it only to provide the agreed services, and protect it with appropriate safeguards. If your information is held in a system we operate for one of our clients, please contact that business directly to exercise your rights. We will help them respond.

Some of our service providers, including Meta, Google, Amazon Web Services, and Resend, may store or process information outside the United Arab Emirates. When this happens, we take reasonable steps to make sure your information is protected as required by applicable law, for example through contractual safeguards.

We keep personal information only for as long as we need it for the purposes in this policy:

• Enquiries and leads that do not become clients: up to 24 months after our last contact.
• Client and billing records: for the length of our relationship and for as long afterwards as tax, accounting, and other laws require.
• Cookies and advertising data: for the periods set by each cookie or platform.

When information is no longer needed, we delete or anonymise it.

We use appropriate technical and organisational measures to protect personal information. These include encrypted connections (HTTPS), access controls, and working only with reputable service providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your rights, we will notify you and the relevant authorities as the law requires.

Subject to applicable law, you have the right to:

• access the personal information we hold about you;
• correct information that is inaccurate or incomplete;
• ask us to delete your information;
• restrict or object to how we process it, including for direct marketing;
• receive your information in a portable format;
• withdraw your consent at any time, without affecting earlier processing;
• complain to the relevant data protection authority.

To exercise any of these rights, email info@gonfilm.ae. We may need to verify your identity first. We will respond within 30 days.

You can ask us to delete the personal information we hold about you, including information we received from a Facebook or Instagram lead form:

• Email info@gonfilm.ae with the subject line “Data deletion request”.
• Include the name, email address, or phone number you used, so we can find your records.
• We will confirm by email once your data has been deleted, usually within 30 days.

We may keep a limited amount of information where the law requires it, such as invoices. To remove information held by Meta itself, use your Facebook or Instagram account settings.

Our website and services are intended for businesses and adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

Our website may link to other websites and platforms, such as social media. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.

We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date on this page. If the changes are significant, we will take reasonable steps to let you know.

For any questions or requests about your personal information:

• Email: info@gonfilm.ae
• Phone: +971 50 734 3975
• Address: GoNFilm, One Central, World Trade Centre, Dubai, United Arab Emirates

Please also read our Terms & Conditions.