Who we are
This website and the services described on it are operated by [Company legal name] (“TFC”, “we”, “us”, “our”), a company registered in Dubai, United Arab Emirates, with trade licence number [Trade licence number]. Our registered office is at [Registered address].
TFC is the controller of the personal data described in this policy: we decide why and how it is used, and we are responsible for protecting it. Where we handle personal data for a client, such as a guest list for the client’s own event, we act on the client’s instructions and its own privacy notice also applies.
You can reach us at [Email address] or [Phone number]. Full details are under Contact us.
Scope
This policy applies to personal data we process when you:
- visit [Website domain] (the “website”);
- contact us by email, by phone or through the contact form;
- work with us as a client, partner, sponsor or supplier, or on behalf of one;
- are represented by us as an athlete or performer;
- attend an event or experience that we organise, or buy tickets or experience packages directly from us.
The website is informational. It has no user accounts and no online checkout.
We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and other applicable UAE laws. Where the EU General Data Protection Regulation (GDPR) or the UK GDPR applies to you, we respect the rights they give you.
This policy does not cover services run by others, such as third-party ticketing platforms or payment service providers. Their own privacy policies apply. Please read this policy together with our Terms & Conditions and Cookie Policy.
Personal data we collect
We collect only the personal data we need for the purposes set out in this policy. The main categories are listed below.
| Category | Examples | Source |
|---|---|---|
| Enquiries | Name, email address, phone number, organisation and the content of your message | You, when you email or call us, including emails prepared with the contact form |
| Clients, partners and suppliers | Names, job titles, business contact details, correspondence, and contract and invoicing details | You, your organisation or publicly available business sources |
| Talent and athletes we represent | Identity and contact details, professional information, contract details, image and likeness where agreed, and travel documents where required for event logistics | The individual, their authorised representatives or, for anyone under 18, a parent or legal guardian |
| Event guests and attendees | Names, contact details, booking details, dietary or accessibility needs when you choose to share them, and photographs or video recordings of events in which you appear | You, or the client or organisation that invited you |
| Billing and payments | Billing name and address, invoice details, and transaction records such as amount, date, payment reference and status | You, your bank or card issuer, and the payment service provider that processes your payment |
| Marketing preferences | Your opt-in consent and the choices you make about the news you receive from us | You |
| Technical data | IP address, browser and device type, pages requested, and the date and time of each request | Collected automatically in server logs by our hosting and infrastructure providers |
Dietary and accessibility needs can reveal health information. We use it only to look after you at the event and share it only with the people who need it for that purpose.
If you give us personal data about someone else, for example when booking for a group, please make sure they have seen this policy.
The contact form does not send or store anything itself. It opens your own email application with a pre-filled message, so we receive only what you choose to send.
How we use personal data
Under UAE law, we use personal data with your clear permission (consent) or where the law allows us to process it without consent: to perform a contract with you or take steps you ask for before one (contract); to comply with the law (legal obligation); or to establish, exercise or defend legal claims (legal claims). Where the EU GDPR or UK GDPR applies to you, we may also rely on our legitimate interests, where these are not overridden by your rights.
| Purpose | Legal ground |
|---|---|
| Replying to enquiries and preparing proposals | Steps taken at your request before entering into a contract |
| Agreeing and delivering services under written agreements with clients, partners and suppliers | Contract |
| Representation and career management of athletes and performers, including the use of image and likeness where agreed | Contract; consent where the law requires it, including the written consent of a parent or legal guardian for anyone under 18 |
| Organising events and experiences, including guest lists, access arrangements, travel and hospitality | Contract; consent for dietary or accessibility needs you share with us |
| Photographing and filming events to document them and to report to the clients and partners involved | Consent, which you can decline by telling our team at the event; legitimate interests where the GDPR applies; your specific consent before we use images in which you can be identified to promote our services |
| Issuing invoices, processing payments and refunds, handling payment disputes and chargebacks, and keeping accounting records | Contract; legal obligation; legal claims where a payment is disputed |
| Complying with the law, responding to lawful requests from authorities and preventing fraud | Legal obligation; legal claims |
| Keeping the website secure and available | Legal obligation to keep personal data secure; legitimate interests where the GDPR applies |
| Sending news about our services and events | Consent |
| Establishing, exercising or defending legal claims | Legal claims; legal obligation |
Where we rely on consent, you can withdraw it at any time; this does not affect earlier processing. We do not make decisions about you based solely on automated processing, including profiling.
Website and cookies
Fonts and other assets are self-hosted. There are no third-party embeds such as maps, video players or social media widgets.
Our hosting and infrastructure providers process technical data in server logs: your IP address, browser and device type, the pages requested and the date and time of each request. This data is used only to deliver the website and keep it secure.
Our Cookie Policy explains what cookies are, how to control them in your browser and what we would do if this changes.
Payments
Paid services are agreed in writing and invoiced. Payment is made by bank transfer or, where offered, by card through a third-party licensed payment service provider.
When you pay by card, you enter your card details directly with the payment service provider. TFC does not store full card numbers or security codes. We receive only what is needed to confirm and record the payment, such as the amount, date, reference and status.
Payment service providers may also use your data for their own purposes, such as fraud prevention and their regulatory obligations. For that processing their own privacy policies apply.
Approved refunds are paid back to the original payment method. Our Refund & Cancellation Policy explains how refunds work.
Sharing personal data
We share personal data only where it is necessary for the purposes described in this policy, and only with:
- Service providers that support our business, such as hosting, email, cloud storage, accounting and IT providers, acting on our instructions;
- Banks and payment service providers that process bank transfers, card payments and refunds, and card issuers where a payment is disputed or a chargeback is raised;
- Ticketing partners, where tickets for an event are issued or checked through their systems;
- Venues and event suppliers, such as caterers, security, transport providers, hotels and airlines, to the extent needed to deliver an event or experience;
- Clients and partners, where needed to perform an agreement, for example sharing a represented athlete’s or performer’s professional details with an event organiser or sponsor, as agreed with them;
- Professional advisers, such as lawyers, accountants, auditors and insurers;
- Authorities, courts and regulators, where the law requires it or where needed to establish, exercise or defend legal claims.
Service providers must keep personal data confidential and use it only to provide their services to us. We do not sell personal data or share it with third parties for their own marketing.
International transfers
TFC is based in the United Arab Emirates. Some of our service providers, such as hosting, email and cloud software providers, may process personal data outside the UAE. When we organise events, travel or experiences abroad, we also share the necessary details with venues, hotels, airlines and other suppliers in the country concerned.
We transfer personal data outside the UAE only with appropriate safeguards as required by law, such as contractual commitments from the recipient, or where the transfer is needed to perform a contract with you. Contact us for details of the safeguards that apply to your data.
Retention
We keep personal data only for as long as we need it for the purpose for which it was collected.
- Contracts, invoices and accounting records are kept for the periods required by UAE commercial and tax law, typically between five and seven years.
- Enquiries that do not lead to an engagement are kept for up to 24 months from our last contact, then deleted.
- Client, supplier and talent files are kept for the duration of the agreement and afterwards for as long as needed to meet legal obligations and deal with any claims.
- Event guest information is kept for as long as needed to deliver the event and handle any follow-up.
- Event photographs and recordings are kept for as long as needed to document the event and report to the clients and partners involved, unless you have consented to a longer use.
- Marketing preferences are kept until you unsubscribe, after which we keep a minimal record so that we do not contact you again.
- Technical data in server logs is kept by our hosting and infrastructure providers for a short period set by them, and longer only where needed to investigate a security incident.
When personal data is no longer needed, we delete it securely or anonymise it.
Security
We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, disclosure or alteration. These include:
- limiting access to personal data to people who need it for their work and who are bound by confidentiality;
- using reputable service providers bound by written obligations to protect the data;
- serving the website over an encrypted connection (HTTPS);
- leaving card processing to licensed payment service providers, so that full card numbers are not held on our systems.
No system is completely secure. If a personal data breach occurs that is likely to affect your rights, we will notify you and the relevant authority where the law requires it.
Your rights
Subject to the conditions and exceptions set by applicable law, you have the right to:
- access the personal data we hold about you and receive a copy of it;
- ask us to correct inaccurate or incomplete data (rectification);
- ask us to delete your data where there is no longer a valid reason to keep it (erasure);
- ask us to limit how we use your data in certain circumstances (restriction);
- object to direct marketing at any time, and to other processing in the cases allowed by law;
- receive data you gave us in a structured, commonly used format, or have it sent to another organisation where technically feasible (data portability);
- withdraw your consent at any time, where we rely on it;
- not be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
How to exercise your rights
Email [Email address] or write to our registered office, saying which right you wish to exercise. We may ask you to verify your identity before we act, so that your data is not disclosed to someone else.
We aim to respond within 30 days. Some rights are limited by law; for example, we cannot delete invoices we are required to keep. If we cannot meet a request in full, we will explain why.
Complaints
If you are unhappy with how we handle your personal data, please contact us first. You also have the right to complain to the UAE Data Office. Where the EU GDPR or UK GDPR applies to you, you may also complain to the data protection authority in the country where you live or work.
Children
The website, tickets and experience packages are not directed at people under 18. Anyone buying tickets, experience packages or services from us must be 18 or over. We do not knowingly collect personal data from children through the website.
Where we represent talent under 18, or people under 18 attend an event, we collect and use their personal data only with the written consent of a parent or legal guardian, who acts on their behalf in matters concerning their personal data.
If you believe a child has given us personal data, please contact us and we will delete it where appropriate.
Marketing
We send news about our services and events only to people who have opted in. We do not buy mailing lists, and we do not share your details with others for their marketing.
You can unsubscribe at any time by using the link in any marketing email or by writing to [Email address]. Unsubscribing does not affect messages we need to send you about an agreement, a booking or an event you are attending.
Changes to this policy
We may update this policy to reflect changes in our services or in the law. The date at the top of this page shows when it was last updated. If we make significant changes, we will let you know by a notice on the website or, where appropriate, by email.
Contact us
For any question about this policy or your personal data, or to exercise your rights, please contact us.
| Company | [Company legal name] |
|---|---|
| Registered office | [Registered address] |
| Trade licence number | [Trade licence number] |
| [Email address] | |
| Phone | [Phone number] |
| Hours | Monday to Saturday, 9:00 – 17:00 (GST) |
You can also reach us through our contact page.