Welcome to Afro Baobab! Your privacy is important to us, and we are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, store, and protect your data when you visit our website, interact with our services, or engage with us on social media.
This Privacy Policy explains how AFRO BAOBAB CULTURAL HUB & ART GALLERY L.L.C, a limited liability company registered in mainland Dubai, United Arab Emirates, trading as Afro Baobab Cultural Hub (“Afro Baobab”, “we”, “us” or “our”), collects, uses, and protects personal data through the website [www.afrobaobabhub.com] (the “Website”).
We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and other applicable UAE laws.
Data you provide to us:
Data collected automatically:
We use personal data to:
We process personal data on the following bases under the PDPL:
The Website uses cookies and similar technologies, including:
These tools may set cookies and collect device and usage data as described by their providers. You can manage or disable cookies through your browser settings, and where a cookie banner is provided on the Website, through your cookie preferences. Disabling cookies may affect some Website functionality.
We do not sell personal data. We share personal data only with:
Our service providers are only permitted to use personal data to provide services to us and are required to protect it appropriately.
Some of our service providers store or process data on servers located outside the United Arab Emirates. Where personal data is transferred outside the UAE, we take steps to ensure it receives an adequate level of protection consistent with the requirements of the PDPL, including through contractual safeguards with our providers.
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, in accordance with the storage limitation principle set out in the PDPL. This retention period is determined in particular by reference to the following criteria: the time needed to respond to your enquiry and manage our business relationship; applicable statutory limitation periods in the event of a dispute; and retention periods required under UAE laws, in particular for accounting, tax, or anti-money laundering purposes.
By way of illustration, the table below sets out the retention periods applicable to the main categories of personal data we process:
Data category
Purpose
Retention period
Legal basis
Enquiry / contact form data (name, email, message)
Responding to your enquiry
3 years from last contact, if no business relationship follows
Legitimate interest / consent
Prospect / marketing data (leads not yet customers)
Commercial prospecting
3 years from last contact
Legitimate interest / consent
Customer / contract data (identity, contact details, order history)
Performance of the contract, relationship management
Duration of the contract + 5 years after termination
Statutory limitation period (contractual claims)
Invoicing / accounting data
Legal accounting and tax obligations
10 years from the end of the financial year
Statutory retention obligation (accounting/tax law)
Payment data (excluding full card numbers, which are not stored)
Processing payments
Duration of the transaction + applicable limitation period for payment disputes (generally 13 to 15 months)
Contractual necessity / legal obligation
Cookies and tracking data
Analytics, website functioning, advertising
Maximum 13 months from collection
Consent
Recruitment data (CVs, applications)
Managing job applications
2 years from last contact if unsuccessful, unless the candidate consents to longer retention
Legitimate interest / consent
Complaints / litigation data
Managing disputes
Duration of proceedings + applicable statutory limitation period
Legal claims
Anti-money laundering (AML) checks (if applicable)
Compliance with AML regulations
5 years from the end of the business relationship
Legal obligation
This table is provided for illustrative purposes and reflects the categories of personal data we process; retention periods may be adjusted in accordance with applicable legal or regulatory requirements.
Upon expiry of these periods, your personal data is deleted or irreversibly anonymised, such that it can no longer be used to identify you.
You may, at any time, exercise your right to request access to, rectification, or erasure of your data, as well as restriction of or objection to its processing, under the conditions set out by the PDPL (see Section 9"Your Rights").
Cookies, Analytics, and Advertising Pixels
The Website uses cookies and similar technologies (such as pixels and tags) for the purposes described below. In accordance with the GDPR and applicable ePrivacy legislation, cookies that are not strictly necessary for the Website to function will only be placed on your device after you have given your prior, free, specific, and informed consent via the cookie banner displayed on the Website.
1. Essential cookies
These cookies are strictly necessary for the Website to function (e.g. session management, security, load balancing) and cannot be disabled. They are not subject to consent, in accordance with applicable law.
2. Analytics cookies
With your consent, we use Google Analytics to understand how visitors use the Website and to improve our services. These cookies are only activated once you have accepted them via the cookie banner.
3.Advertising pixels
With your consent, we use advertising pixels and tags — including the Meta Pixel, the LinkedIn Insight Tag, and Google advertising tags — to measure the performance of our campaigns and to show you relevant advertising based on your visit to the Website. These tools are only activated once you have accepted them via the cookie banner.
Third-party providers and international transfers
These tools are provided by third parties (Google, Meta, and LinkedIn) and may involve the transfer of your data outside the European Economic Area, in particular to the United States. Where such transfers occur, they are carried out on the basis of appropriate safeguards. For further information, please refer to the privacy policies of the relevant providers: Google Privacy Policy, Meta Privacy Policy, LinkedIn Privacy Policy.
Your choices
You can accept, refuse, or customise your cookie preferences at any time via the cookie banner or the "Cookie Preferences" link available on the Website. You may withdraw your consent at any time, as easily as you gave it, with effect for the future. You can also manage or disable cookies through your browser settings. Please note that refusing certain cookies may affect some Website functionality, although core features will remain accessible.
For more information on the specific cookies used, their purpose, and their retention period, please consult our Privacy Policy.
Subject to the conditions set out in the PDPL, you have the right to:
To exercise any of these rights, contact us using the details in Section 13. You also have the right to lodge a complaint with the UAE Data Office if you believe your personal data has been processed in violation of the PDPL.
The Website is intended for adults and is not directed at children. We do not knowingly collect personal data from children through the Website. Inquiries and bookings relating to school experiences are submitted by schools, teachers, and parents or guardians — not by children. Any personal data relating to student groups that is shared with us as part of organising a school visit is provided by the responsible institution and is used only to plan and deliver that visit.
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date. Significant changes will be communicated on the Website where appropriate.
If you have questions about this Privacy Policy or how we handle personal data, contact us at:
Afro Baobab Cultural Hub
Warehouse No. 14, owned by Suhail Rashid Ahmed Bin Drai Al Qubaisi, Bardab, Al Quoz Industrial Area, Dubai, UAE.
Email: [info@afrobaobab.com]