Privacy Policy

The M. (M House FZE LLC)
Last updated: 22 June 2026 · Version 2.0

1. Introduction

This Privacy Policy explains how we collect and use personal data when you visit the-m.co (the “Site”), submit the contact form, send an email or a WhatsApp message, or otherwise interact with us in connection with an event production engagement.

We process personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and its Implementing Regulations issued by the UAE Data Office.

2. Who is the data controller

M House FZE LLC (trading as “The M.”)

Trade Licence No. 4428832.01

Business Centre,
Sharjah Publishing City Free Zone,
Sharjah, United Arab Emirates

Managing Director:
Anna Magnus

Email:
‍hello@the-m.co

Telephone / WhatsApp:
+971 58 551 7701

We have not appointed a Data Protection Officer. The contact above reaches the person responsible for privacy matters within The M.

3. What personal data we collect

Identity and contact data — your name, the name and address of the organisation you represent, your role, email address, and phone or WhatsApp number where provided.
Project information — the project type and the free-text brief you submit through the contact form.
Communications — the content of emails, WhatsApp messages, calls and meetings related to a potential or active engagement.
Technical data — IP address, browser, device and pages visited, logged at server level by our hosting provider for security and operational purposes. The Site currently uses only strictly necessary cookies. If we add web analytics later, we will request your prior consent through a cookie banner.

We do not request and do not need sensitive personal data within the meaning of Article 15 PDPL (data revealing racial or ethnic origin, political opinions, religious beliefs, health, biometric data, etc.). Please do not include such information in your messages.

4. How we collect personal data

Directly from you — when you submit the contact form, write to us, or message us via WhatsApp or Instagram.
Automatically — through server logs maintained by our hosting provider.
From public sources — limited to publicly available professional information (for example LinkedIn or your organisation’s website) when we conduct outreach to a prospective client or partner.

5. Why we process personal data and on what legal basis

Each purpose for which we process personal data is supported by a lawful basis under Article 4 of the PDPL:
‍

Purpose	Legal basis (Article 4 PDPL)
Responding to enquiries and preparing proposals, contracts and quotations.	Necessary for the conclusion or performance of a contract — Art. 4(3).
Delivering an active event production engagement.	Necessary for the performance of a contract — Art. 4(3).
Keeping accounting, tax and corporate records.	Necessary to comply with a legal obligation — Art. 4(6).
Defending or pursuing legal claims and cooperating with public authorities.	Compliance with a legal obligation — Art. 4(6); legitimate interests — Art. 4(7).
B2B outreach to prospective clients or partners.	Necessary to protect our legitimate interests — Art. 4(7). You may object at any time.
Operating and securing the Site (server logging, strictly necessary cookies).	Necessary to protect our legitimate interests — Art. 4(7).
Any future analytics or non-essential tracking.	Your consent — Art. 4(1), requested through a cookie banner.

6. Who we share personal data with

We treat personal data as confidential and share it only with the parties below:

Hosting and form processing — Netlify, Inc. (United States).
Email infrastructure — [your email provider, e.g. Google Workspace operated by Google LLC].
Professional advisers — accountants, lawyers and auditors, under professional duties of confidentiality.
Public authorities — where required by law, court order or regulatory request.

When you message us via WhatsApp or Instagram, the message is also processed by Meta Platforms, Inc. and its affiliates under their own privacy policies. We are not a controller of that processing.

7. International transfers

Some of our service providers are established outside the United Arab Emirates, notably in the United States and the European Union. In line with Article 22 of the PDPL, we transfer personal data to such jurisdictions only where one of the following applies:

the receiving jurisdiction is recognised by the UAE Data Office as providing an adequate level of protection;
the transfer is governed by contractual safeguards approved by the UAE Data Office, or by binding internal rules of the recipient;
the transfer is necessary for the performance of a contract with you, for the establishment of a legal claim, or with your explicit consent.

You may request more information about the safeguards we rely on by writing to hello@the-m.co.

8. How long we keep personal data

Contact form enquiries that do not lead to an engagement: up to 24 months from the last interaction, then deleted.
Project files and client communications: for the duration of the engagement and for 7 years afterwards, in line with the record-keeping obligations under the UAE Corporate Tax Law (Federal Decree-Law No. 47 of 2022).
Invoices and tax records: 7 years from the end of the relevant tax period.
Server logs: typically 30 days, then aggregated or deleted by our hosting provider.

9. Your rights

Subject to the conditions set out in the PDPL, you have the right to:

request information about the personal data we hold and how it is processed (Art. 13);
ask us to correct inaccurate or incomplete data (Art. 13);
ask us to delete your data, subject to legal retention obligations (Art. 13);
restrict the processing of your data in defined circumstances (Art. 13);
receive your data in a portable, machine-readable format where the processing is automated and based on consent or a contract (Art. 13);
object to processing based on legitimate interests, including direct marketing (Art. 13);
withdraw consent at any time, without affecting the lawfulness of past processing (Art. 6).

We do not engage in automated decision-making that produces legal or similarly significant effects on you within the meaning of Article 14 PDPL.

To exercise any of these rights, write to hello@the-m.co. We will respond within the period required by Article 13 PDPL, typically without undue delay and at the latest within one month from receipt of the request.

10. Right to lodge a complaint

If you believe that we have not handled your personal data in accordance with the PDPL, you have the right to lodge a complaint with the UAE Data Office:

Website:
‍https://www.data.gov.ae

Email:
‍info@data.gov.ae

11. Cookies

The Site currently uses only cookies that are strictly necessary for it to function (for example, remembering that you have seen the loading screen during a session). Strictly necessary cookies are used on the basis of our legitimate interest in operating the Site.

If we later introduce non-essential cookies — for example for analytics or social media — we will ask for your prior consent through a cookie banner, where you will be able to accept, reject or fine-tune your choices. Refusing non-essential cookies will be as easy as accepting them.

12. How we protect personal data

We apply appropriate technical and organisational measures to protect personal data — access controls on devices and accounts, encryption in transit, and confidentiality undertakings from anyone handling client data on our behalf. If a personal data breach occurs and is likely to result in a risk to your rights and freedoms, we will notify the UAE Data Office within the period prescribed by Article 9 of the PDPL and inform you directly where the breach is likely to result in a high risk to you.

13. Minors

The Site and our services are directed at professional clients and at adults representing them. We do not knowingly collect personal data from minors as defined by UAE law. If you believe we have inadvertently collected such data, please contact us and we will delete it.

14. Changes to this Policy

We may update this Policy from time to time, for example to reflect changes in the law or in the services we use. The current version is identified by the “Last updated” date at the top. Where a change is material, we will take reasonable steps to bring it to your attention.

15. Contact

For questions, requests or complaints relating to this Policy or to your personal data:

M House FZE LLC (trading as “The M.”)
‍hello@the-m.co
+971 58 551 7701

‍