Privacy Policy

Bukhash Brothers LLC is a company registered in the Emirate of Dubai, United Arab Emirates, with its principal place of business at Alserkal Avenue, Warehouse 14, Al Quoz Industrial Area 1, Dubai. We act as the Data Controller for personal data processed in connection with the Services. #ABtalks is operated as a segment of Bukhash Brothers and is not a separate legal entity.

For any privacy-related question, request, or complaint, please contact us at legal@bukhashbrothers.ae or by post at the address above.

This Policy applies to personal data we collect from: - visitors to our websites and digital properties; - clients and prospective clients engaging our creative, digital, or consultancy services; - talent, creators, and influencers featured in or considered for our campaigns and content; - customers of shop.abtalks.ae; - candidates applying for roles at Bukhash Brothers; - audience members and attendees at productions, shoots, or events we organise; - users who interact with us on social media platforms.

3.1 Data you provide directly

Identification and contact details (name, email, phone, postal address); billing and shipping details for shop orders; payment information processed by our payment providers; information you submit via contact forms, briefing documents, or career applications; communications you send to us.

3.2 Data we collect automatically

IP address, device identifiers, browser type, operating system, language, referring page, pages visited, time spent, and interactions with our content. We collect this data through cookies and similar technologies as described in our Cookie Policy. Approximate location may be derived from IP address.

3.3 Talent, creator, and influencer data

For our talent roster and campaign work we may collect: stage name and legal name, agent or manager contact, social handles, audience metrics, prior brand collaborations, content samples, rate cards, contracts, deliverables, and post-campaign performance metrics. This data may be shared with prospective clients under confidentiality, with the talent's prior knowledge.

3.4 Production-set, event, and CCTV data

We may record audio, video, and photographs at productions, shoots, and events. Where practical, signage and consent forms inform attendees. Where CCTV is in use at our premises, it is operated for security purposes and footage is retained no longer than thirty (30) days unless required for an active investigation.

3.5 Career applicant data

When you apply for a role, we collect your CV, contact details, references where you provide them, work eligibility information, and any data you choose to share with us.

3.6 Data about third parties

If you provide data about another person (for example, a gift recipient or a referee), we rely on you to confirm that person's awareness and, where required, consent.

3.7 Data from social platforms

When you follow or interact with us on Instagram, YouTube, X, Facebook, TikTok, or LinkedIn, we may collect public profile information and engagement metrics consistent with each platform's terms.

3.8 Sensitive personal data

We do not knowingly collect special-category data (health, biometric, racial, religious, political, or genetic data) unless strictly necessary for a specific engagement and supported by an appropriate lawful basis or your explicit consent.

3.9 Children's data

The Services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact legal@bukhashbrothers.ae and we will delete it.

• Purpose: Provide and operate the Services — Lawful basis (PDPL Art. 4): Performance of a contract
• Purpose: Process orders, payments, and shipping — Lawful basis (PDPL Art. 4): Performance of a contract
• Purpose: Respond to enquiries and customer support — Lawful basis (PDPL Art. 4): Performance of a contract / legitimate interest
• Purpose: Manage talent rosters and pitch creators to clients — Lawful basis (PDPL Art. 4): Legitimate interest, with talent awareness
• Purpose: Send marketing communications — Lawful basis (PDPL Art. 4): Consent (you can withdraw at any time)
• Purpose: Improve and secure the Services, prevent fraud — Lawful basis (PDPL Art. 4): Legitimate interest
• Purpose: Comply with legal, tax, and regulatory obligations — Lawful basis (PDPL Art. 4): Legal obligation
• Purpose: Defend legal claims — Lawful basis (PDPL Art. 4): Legitimate interest
• Purpose: Recruit and assess job applicants — Lawful basis (PDPL Art. 4): Pre-contractual measures at applicant's request

We do not use solely-automated decision-making that produces legal or similarly significant effects on you.

5.1 Who we share with

- service providers and processors acting on our instructions (payment processors, delivery couriers, IT and cloud providers, marketing platforms, professional advisors); - affiliates, partners, and sub-contractors involved in delivering specific engagements; - prospective clients, where talent or creator information is shared as part of a pitch, on a need-to-know basis; - regulators, courts, and law enforcement when required by law; - a successor entity in connection with a merger, acquisition, or restructuring.

5.2 International transfers

Some of our service providers are located outside the United Arab Emirates. Where we transfer personal data internationally, we rely on the conditions set out in PDPL Articles 22–23, including transfers to jurisdictions with an adequate level of protection or, where adequacy is absent, contractual safeguards equivalent to standard contractual clauses, supplementary measures, or your explicit consent.

We retain personal data only as long as necessary for the purposes set out above and to comply with legal obligations: - order and transaction records: duration of the client relationship plus the period required by tax and commercial law; - payment card data: not stored by us; processed by our payment provider; - customer accounts: until closure or thirty-six (36) months of inactivity, after which we may anonymise or delete; - marketing data: up to thirty-six (36) months from your last interaction; - connection logs and cookie data: up to thirteen (13) months; - CCTV footage: up to thirty (30) days unless required for investigation; - career applicant data: up to twelve (12) months after the application decision, unless you ask us to keep it for future opportunities; - talent and creator records: duration of representation plus seven (7) years for contractual and audit purposes.

Subject to applicable law, you have the right to: - access the personal data we hold about you; - request correction of inaccurate or incomplete data; - request deletion of your data ("right to be forgotten"); - restrict or object to certain processing; - request data portability for data you have provided to us; - withdraw consent at any time, without affecting prior lawful processing; - give post-mortem instructions where applicable.

To exercise any right, email legal@bukhashbrothers.ae. We will acknowledge your request within seven (7) days and respond substantively within thirty (30) days, extendable by a further sixty (60) days for complex requests, as permitted by PDPL.

If you believe we have not handled your data in accordance with applicable law, you may complain to the UAE Data Office (https://www.uaedata.gov.ae/) or, where you reside in the EEA or UK, to your local supervisory authority.

You can opt out of marketing emails by clicking the unsubscribe link in any message or by emailing legal@bukhashbrothers.ae. Opting out may mean you no longer receive personalised offers or invitations. Operational and transactional messages (order confirmations, service updates, security notices) will continue.

Cookie preferences are managed through our cookie banner and your browser settings. See the Cookie Policy.

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. Measures include encrypted communications, access controls, vendor due diligence, and ongoing security review. No system is perfectly secure, and we cannot guarantee absolute security.

In the event of a personal data breach likely to result in a risk to your rights, we will notify the UAE Data Office and affected data subjects in accordance with PDPL Article 9, in any event without undue delay and where feasible within seventy-two (72) hours of becoming aware of the breach.

We use cookies and similar technologies for site functionality, security, and analytics. Strictly necessary cookies do not require consent; analytics and marketing cookies are loaded only after you provide consent through our cookie banner. Full detail, including a list of cookies and durations, is in our Cookie Policy.

Our websites may contain links to third-party websites and platforms. We are not responsible for their privacy practices, and we encourage you to review their policies before sharing personal data.

We may update this Policy to reflect changes in law, our Services, or our practices. Material changes will be notified through the website or by email where reasonable. The "Last updated" date at the top reflects the most recent revision. Your continued use of the Services after such updates constitutes acceptance of the revised Policy.

Bukhash Brothers LLC (including #ABtalks) Alserkal Avenue, Warehouse 14, Al Quoz Industrial Area 1, Dubai, United Arab Emirates Email: legal@bukhashbrothers.ae Shop and media enquiries: contact@abtalks.ae