Privacy Policy

This Privacy Policy explains how Keymox Media FZCO (“Keymox”, “we”, “us”) collects, uses, shares, and protects personal information, and describes your rights and choices. It includes our Cookies Policy and clearly explains when cookies start and when consent is required.

We align our practices with global frameworks applicable in 2025, including GDPR/UK GDPR, CCPA/CPRA (California), LGPD (Brazil), and UAE PDPL, where relevant. Unless otherwise defined, terms have the meaning given in applicable laws. This Policy applies to our websites, communications, and services where it is posted.

Controller: Keymox Media FZCO, Dubai Silicon Oasis – IFZA, P.O. Box 4333, Dubai, UAE. Contact: (Subject: Privacy Request).

For privacy requests (access, correction, deletion, etc.), please include your region/jurisdiction so we can apply the right process and timelines.

Forms on keymox.com. We currently provide: (1) a Contact form, (2) a Free Consultation form, and (3) a Newsletter signup in the site footer.

• Contact form (required unless noted): Full Name, Email, Phone (optional), Message (max 500 chars).
• Free Consultation form (homepage): Full Name, Email, Phone (optional), Service Interest (select), Business Goals (free text, min length).
• Newsletter signup (footer): Email address (required). We use this to send occasional updates; you can unsubscribe anytime via the link included in each email.

Anti-abuse & diagnostics. To protect the service and improve reliability, we also process: IP address, user-agent/device info, submission timestamps, page URL/referrer, a bot honeypot field (ignored for humans), and a hashed device token (_wtoken) used for rate limiting and fraud prevention. We may detect VPN/proxy usage to reduce misuse.

Newsletter operations. We manage subscriptions and email delivery directly on our own systems. Subscriber data is stored under our control (not on third-party email platforms). We enforce authenticated sending (SPF, DKIM, DMARC) and maintain verifiable opt-in/opt-out logs. You can unsubscribe at any time via the link in our emails or by contacting us.

Payments. If you purchase classified ad packages or other paid offerings, checkout is handled by approved payment providers. We don’t store full card numbers. We may receive limited payment metadata (e.g., transaction ID, status) for reconciliation and support.

What we don’t collect by default. We don’t request sensitive categories of data (e.g., health data, government IDs) and we don’t accept file uploads through these forms. Please avoid including sensitive information in free-text fields.

Sources. Information is collected directly from you via the forms and newsletter signup; some technical data is collected automatically for security and performance as described above.

We process data to deliver and improve the Services; fulfill contracts and requests; provide support; personalize content; ensure security and prevent abuse; comply with legal obligations; and communicate marketing where permitted. Under GDPR/UK GDPR, our legal bases include performance of a contract, legitimate interests, consent (where required), and compliance with law.

We use cookies and similar technologies (e.g., pixels, local storage) to operate core functions and measure performance via Google Analytics. We do not set advertising or remarketing cookies on keymox.com.

• Strictly Necessary: essential for security, sessions, and basic functionality (always on).
• Analytics (Google Analytics): aggregated usage and performance metrics (e.g., pages visited, load times) to improve the site. We do not use Google Ads/Remarketing features or ad personalization through Analytics.

How consent works by region. Our cookie behavior adapts to your region:

• EEA/UK (EU region): non-essential cookies (Analytics) are blocked by default. We display a banner so you can accept, reject, or customize preferences. Until you choose, only strictly necessary cookies are set.
• Non-EEA/UK: Analytics cookies may start by default. You can still opt out or adjust preferences at any time using the banner controls or your browser settings.
• If geolocation is uncertain: we take a conservative approach and show the banner before setting non-essential cookies.

Your controls. You can update your cookie preferences at any time using the “Cookie Settings” link in the site footer. You can also adjust cookies in your browser, and—if you prefer—install Google’s browser add-on to disable Analytics collection. Where shown, the banner additionally lets you accept, reject, or customize non-essential cookies.

Remembering your choice. We store a small preference cookie to remember your selections so you don’t have to choose every time. If you clear cookies or use a different browser/device, you may be asked again.

Retention. Session cookies expire when you close the browser; most Analytics cookies persist between 6 and 24 months unless you clear them earlier. Preference cookies can last up to 12 months so we can honor your choices.

We share personal data with processors that help us operate the Services (hosting, security, analytics, email, payments, ad/marketing platforms, fraud/proxy detection). We may disclose information to professional advisors or authorities where required by law. In a business transaction (e.g., merger), data may transfer subject to appropriate safeguards. We do not sell personal information for money. For California residents, we do not “sell” or “share” personal information as defined by CPRA unless separately disclosed and consented.

We may transfer data across borders. Where required, we rely on Standard Contractual Clauses (SCCs) or other lawful mechanisms, plus supplementary measures as appropriate.

We retain personal data only as long as necessary for the purposes described or to meet legal, accounting, or reporting requirements. Typical periods: support messages up to 24 months after last interaction; contractual/billing records up to 7 years; security logs 12–18 months. We may retain data longer to comply with law, resolve disputes, or enforce agreements.

Depending on your location and the applicable regime, you may have rights to access, correct, delete, restrict or stop processing, object to certain processing, and request data portability; and to withdraw consent where used. You can also lodge a complaint with a supervisory authority. To exercise rights, email with “Privacy Request” and your region; we may verify your identity.

• UAE (PDPL): right to obtain information/access, rectification, erasure, restriction and stop processing, data portability, and objection to automated processing; plus the right to complain to the UAE Data Office.
• GDPR/UK GDPR: access, rectification, erasure, restriction, portability, objection, withdraw consent.
• CCPA/CPRA (California): know/access, correct, delete, opt-out of sale/share, limit sensitive data use, non-discrimination.
• LGPD (Brazil): confirm, access, correct, anonymize/block/delete, portability, information on sharing, withdraw consent.

Financial free zones. If your relationship with us falls under a UAE financial free zone, your rights are handled under that regime: DIFC (Commissioner of Data Protection) or ADGM (Office of Data Protection). Otherwise, the UAE PDPL applies.

We apply appropriate technical and organizational safeguards — including SSL/TLS encryption in transit, network firewalling and access controls, least-privilege administration, automated abuse protections (rate limiting, honeypot and device-token checks, proxy/VPN detection), and security logging/monitoring. We follow data-minimization and retention practices and review our service providers for security. keymox.com does not create customer accounts or store user passwords. As the threat landscape evolves, we continuously improve our controls and, if we identify a security issue affecting personal data, we investigate and take appropriate action in accordance with applicable law.

We may update this Policy to reflect changes in law or our practices. Material updates will be posted here with the “Last updated” date. Your continued use of the Services after changes indicates acceptance.

Questions or requests? Email or use our contact form. We aim to respond promptly and within legally required timeframes.