1) Who We Are

SideKick is a Dubai-based company providing subscription-based website services and related add-ons. Our registered operating location is Dubai, United Arab Emirates.
You can contact us at contact@sidekick.tech.

Data Controller: SideKick, Dubai, UAE

2) Scope

This Policy applies to personal information we process about visitors, prospects, and customers of our Services. It does not apply to content you host with third-party providers under their own terms and privacy policies.

3) Information We Collect

• Account & Contact Data: name, email, phone, company, role, billing contact.

• Project & Website Inputs: text, images, files, brand assets and preferences you provide for your site.

• Payment Data: handled by payment processors (e.g., card last four, billing address, transaction IDs). We do not store full card numbers.

• Usage & Device Data: pages viewed, actions taken, IP address, device type, browser, referrer, approximate location.

• contact & Communications: chat, email, tickets, and feedback.

• Third-Party Sources: lead forms, partners, or social if you interact there.

• Cookies & Similar Technologies: to run the site, keep you signed in, measure performance, and improve features (see “Cookies” below).

4) How We Use Information

• Provide & Improve Services: create and manage your site, deliver add-ons, maintain hosting, and enhance features.

• Account & Billing: authenticate users, process payments, prevent fraud, send invoices and renewal notices.

• contact & Communications: respond to inquiries, send important updates about your project or account.

• Marketing (optional): send product news or offers. You can opt out anytime via the email footer or by contacting us.

• Analytics & Performance: understand how our Services are used to improve stability and user experience.

• Legal & Security: comply with laws, enforce terms, and protect our users and platform.

5) Legal Bases

We process personal data under the UAE PDPL based on lawful bases including contract necessity, consent (where required), legitimate interests (e.g., security, analytics), and legal obligations. Where the EU/UK GDPR applies, we rely on: (a) contract necessity, (b) legitimate interests, (c) consent, and (d) legal obligations. We also consider other applicable frameworks (e.g., DIFC/ADGM data protection regulations) as relevant.

6) Sharing & Disclosure

• Service Providers/Sub-Processors: hosting, payments, analytics, email, customer contact — bound by confidentiality and data protection obligations.

• Business Transfers: as part of a merger, acquisition, or asset sale.

• Legal & Safety: to comply with law, enforce terms, or protect rights, safety, and property.

• With Your Direction: when you connect integrations or request we share certain data.

7) Cookies & Tracking

We use necessary cookies to operate the site, and (where permitted) analytics/functional cookies to improve performance. You can manage cookies through your browser settings. Where required in the UAE, we will present a cookie banner to capture your preferences and obtain consent for optional cookies.

8) Data Retention

We retain personal data for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Project files and website content may be retained for backup and audit logs for a reasonable period after cancellation unless you request deletion (subject to legal exceptions).

9) Security

We implement administrative, technical, and physical safeguards designed to protect your information. However, no method of transmission or storage is 100% secure.

10) International Transfers

Your data may be processed in countries outside the UAE. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses or equivalent mechanisms) to protect personal data transferred internationally.

11) Your Rights

• UAE (PDPL): rights include access, correction, deletion, and restriction of processing, subject to applicable exceptions.

• EU/UK: GDPR rights including access, correction, deletion, data portability, and the right to lodge a complaint with your supervisory authority.

• California: Rights under CCPA/CPRA (access, delete, correct, opt-out of certain sharing/sales).

To make a request, email contact@sidekick.tech. We may verify your identity before responding.

12) Children’s Privacy

Our Services are not directed to children under 13 (or the age defined by local law). We do not knowingly collect personal data from children. If you believe a child has provided data, contact us to remove it.

13) Third-Party Links

Our site may contain links to third-party sites. Their privacy practices are governed by their own policies; please review them.

14) Satisfaction Guarantee & 14-Day Refund

If you purchase a SideKick subscription and are not satisfied within 14 calendar days from the charge date, you may cancel for a full refund — no questions asked. After the 14-day window, you can cancel anytime; charges already paid are non-refundable, and standard handover terms apply. For complete details, see our Refund Policy. Refunds and cancellations are subject to applicable UAE consumer protection regulations where relevant.

15) Governing Law & Jurisdiction

This Policy and any disputes arising out of or related to it are governed by the laws of the United Arab Emirates. Subject to any mandatory consumer protection rights, exclusive jurisdiction shall lie with the competent courts in Dubai, UAE (unless otherwise agreed in writing).

16) Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a new “Last Updated” date and, where appropriate, notify you via email or dashboard.

17) Contact Us

Questions or privacy requests? Contact us:
Email: contact@sidekick.tech
SideKick, Dubai, United Arab Emirates