Privacy Policy

Effective 30 September 2026, updated 17 October 2026 · Modern Marketing Lab ("MML", "we"), Dubai, United Arab Emirates · mmlmarketingae@gmail.com

1. Who we are

Modern Marketing Lab is a creative marketing, systems and AI studio based in Dubai, UAE. We are responsible for the personal data described in this policy. We follow the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, where it applies, the EU/UK General Data Protection Regulation.

2. What we collect

Project ideas and enquiries — what you type into our forms: your name, company, email, WhatsApp or phone number, project details, timeline, budget range, links, preferred language and how you would like to be contacted.
AI assistant demo calls — if you start a live call, your voice is processed in real time to generate the assistant's replies, and a transcript is created. If you ask the assistant to pass on your details, it records your name, the service you are interested in, timing and contact details, and sends them to our team.
Messages — what you send us by email, WhatsApp, Instagram or Facebook.
Public posts and personal demo pages — when a business publicly posts that it is looking for services we offer (for example on Threads), we may read that public post to write to them and to prepare a personal demo page and PDF for them. We keep the post text, the public username and our notes. Personal pages are reachable only by their link and are not indexed by search engines. When someone opens one, we record what they do on it (opening the page or the PDF, starting the demo, tapping to book or to message us) so we can follow up.
Website statistics — privacy-friendly, cookie-free statistics from Cloudflare Web Analytics (pages viewed, referrer, country, device type). We do not use advertising trackers on this website.

3. How we use it

To read your idea or enquiry and contact you personally about it.
To run the AI assistant demo and follow up on any request you make during it.
To prepare proposals, deliver our services and keep records of our conversations.
To contact businesses that publicly ask for services we offer, and to prepare their personal demo page.
To keep the website secure and prevent spam and abuse.

4. Legal bases

We rely on your consent (forms and demo calls), on steps you ask us to take before entering into a contract, and on our legitimate interest in running and protecting our business, including replying to businesses that publicly ask for the services we offer. You can withdraw consent at any time.

5. Who processes data for us

Cloudflare — website hosting, security (including Turnstile spam protection) and cookie-free analytics.
Resend — delivering form submissions to our inbox by email.
ElevenLabs — real-time voice AI for the assistant demo, including audio processing and transcripts.
Google — our email inbox.
Anthropic — AI that helps us read public posts and draft our first message and demo page.
Telegram — internal notifications to our team about new leads and activity on personal demo pages.
Meta — if you contact us on WhatsApp, Instagram or Facebook, under Meta's own terms.

These providers may process data outside the UAE. We use providers that offer appropriate safeguards for international transfers. We do not sell your personal data.

6. How long we keep it

Enquiries and project ideas: up to 24 months after our last contact, unless we start working together. Demo call recordings and transcripts: retained by our voice provider for a limited period (no longer than 30 days) for quality and safety, then deleted. Personal demo pages, the public posts behind them and activity on those pages: up to 90 days, then deleted automatically. Website statistics are aggregated.

7. Your rights

You can ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent. Email mmlmarketingae@gmail.com and we will respond within 30 days. You may also complain to the UAE Data Office or your local data protection authority.

8. Security

Data is transmitted over encrypted connections, access is limited to the people who need it, and forms are protected against automated abuse.

9. Children

Our services are for businesses. We do not knowingly collect data from children under 18.

10. Changes

We will update this page if our practices change. The effective date above shows the latest version.