Privacy policy
This Privacy Policy explains how EMDRA MARKETING - FZCO (“EMDRA”, “we”, “us”, “our”) collects, uses, stores, and shares personal data when you visit emdra.co, submit an application for a free review audit, or otherwise contact us.
1. Who is responsible
The company responsible for your personal data is:
EMDRA MARKETING - FZCO
DSO IFZA, IFZA Properties
Dubai Silicon Oasis, Dubai
United Arab Emirates
Contact for privacy requests
Email: info@emdra.co
We are a free zone company established in the United Arab Emirates. We offer Google Reviews growth services and related marketing services to local service businesses across the United States and other countries. This policy is written to comply with applicable data protection laws, including the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). Where you are located in a jurisdiction with its own data protection laws, such as the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) or the EU/UK GDPR, we will honor those rights as described here.
2. What this policy covers
This policy covers:
- https://emdra.co and its pages
- Application and audit-request forms on those pages
- Email, phone, and messaging that follow from an application or enquiry
- Cookies and similar technologies on the site
It does not cover third-party websites we link to (including Google and Meta). Those sites have their own policies.
3. Personal data we collect
We only collect what we need to run the site, review applications, and deliver our services.
3.1 Data you give us
On our free review audit application form we currently collect:
- First name and last name
- Email address
- Phone number
- Business name and website
- Type of local service business (roofing, HVAC, plumbing, dental, med spa, etc.)
- City and service area
- Current number of Google reviews
- Where you currently rank in the local map pack
- What you would like to improve
- Other yes/no or multiple-choice answers on that form
If you email, call, or message us, we also store the content of that conversation and any files you send.
If you become a client, we additionally process contract details, invoices, payment references, Google Business Profile access, and the project materials needed to do the work.
3.2 Data collected automatically
When you visit the site, our hosting and security tools typically log:
- IP address
- Date and time of the request
- Pages and URLs visited
- Referrer
- Browser type and version
- Device and operating system
- Approximate location derived from IP
- Cookie and pixel identifiers (see section 6)
3.3 Data from ads and analytics
The site uses Google Analytics (property ID G-W1V4Z7PYY9) and the Meta (Facebook) Pixel, ID 2543281939508421. These tools may collect or receive pixel identifiers, pages viewed, browser and device data, and hashed submission data.
If we add other advertising or analytics trackers, we will update this policy.
3.4 Data we do not intentionally collect
We do not ask for sensitive personal data (such as health, religion, political views, sexual orientation, or biometric information). Please do not send it. We do not knowingly collect personal data from children under 18.
4. Why we use your data (purposes and legal bases)
| Purpose | Examples | Legal basis | Why we use it |
|---|---|---|---|
| Run and secure the website | Hosting, firewall, abuse prevention, error logs | Business operations and security | Necessary to operate and protect the site |
| Review applications | Read your form, decide if we take a call, reply | Pre-contract / prospective business relationship | To respond to your enquiry |
| Deliver services | Review Engine setup, reputation workflow, project communication | Contract with clients | To perform our agreement with you |
| Invoicing and tax records | Invoices, bookkeeping, tax records | Legal obligation | UAE and applicable record-keeping requirements |
| Measure and improve ads | Google Analytics, Meta Pixel, campaign reporting, retargeting | Consent where required; otherwise legitimate business interests | To measure and improve our own marketing |
| Send follow-up about your application | Email or phone after you apply | Pre-contract; consent for marketing not related to your application | To follow up on your request |
| Defend legal claims | Keep records if there is a dispute | Legitimate business interests | To establish, exercise, or defend legal claims |
You can refuse non-essential cookies at any time. Where consent is the basis, you can withdraw it without affecting processing that already happened.
5. Who we share data with
We do not sell your personal data. We share it with service providers who process it for us under contract, only as needed:
| Recipient | Role | Location |
|---|---|---|
| Hosting & Platform Infrastructure | Website hosting, forms, CRM, automations, file storage | United States and other hosting regions |
| Cloudflare, Inc. | Security and bot challenge on some pages (including the application form) | United States / Global |
| Google LLC / Google Ireland Ltd. | Google Analytics and Google Fonts loaded on the site | United States / Ireland |
| Meta Platforms, Inc. / Meta Platforms Ireland Ltd. | Facebook / Instagram ads and Meta Pixel | United States / Ireland |
| Email and phone providers we use to answer you | Delivery of messages and calls | Depends on the tool in use |
| Professional advisers (lawyer, accountant) | Only if needed for a matter that involves you | As required |
| Government authorities | Only if the law requires it | As required |
Team members and contractors who help run EMDRA may see application and client data, only as needed for their work, under confidentiality obligations.
6. Cookies and similar technologies
The site, Google Analytics, and the Meta Pixel set cookies and similar identifiers. Strictly necessary cookies keep the site secure and operational. Analytics and advertising cookies help measure and improve our marketing.
You can manage cookie settings in your browser or through:
7. Retention and storage
We are based in the United Arab Emirates. Several processors store or access data in the United States and other countries. We keep personal data only as long as needed for the purposes described here or as required by law.
| Data | Typical retention |
|---|---|
| Server / security logs | A short technical period (usually days to a few months), unless needed for security |
| Google Analytics and Meta Pixel events | As long as the relevant provider retains them under its own policy and our account settings |
| Unsuccessful or unused applications | Up to 24 months after the last contact, then deleted unless you ask us to delete sooner or we must keep them for a claim |
| Successful applications that become clients | For the term of the contract, then as long as tax and commercial law require (commonly up to 7 years for accounting records) |
| Correspondence | Kept with the related application or client file |
You can ask us to delete your data sooner. We will do that unless we must keep the record for legal reasons.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or restrict the use of your personal data, to receive a copy of it, and to object to certain processing. California residents may exercise the rights provided under the CCPA and CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information.
- Access and Portability — request a copy of your data
- Correction — fix inaccurate data
- Deletion — ask us to delete your data
- Opt-out — opt out of targeted advertising
- Non-discrimination — equal service whether or not you exercise these rights
How to exercise your rights: email info@emdra.co with the subject “Privacy request”. We may verify your identity before responding.
If you are not satisfied with our response, you may contact your state attorney general or the relevant data protection authority.
9. Security
We use HTTPS, strict platform access controls, and firewall and bot protection. Access to personal data is limited to authorized personnel. No method of transmission or storage is fully secure, but we work to protect your data.
10. Children
The site is intended for adults and businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, email us and we will delete it.
11. Automated decisions
A human reviews all applications. We do not make solely automated decisions that produce legal or similarly significant effects.
12. Third-party links
emdra.co is not endorsed by or affiliated with Google, Meta, or any other third-party platform. When you navigate to external platforms, their privacy policies apply.
13. Changes to this policy
We will update this page when our data practices change. The “Last updated” date at the top will reflect any updates.
14. How to contact us
Privacy and data requests: info@emdra.co
EMDRA MARKETING - FZCO
DSO IFZA, IFZA Properties
Dubai Silicon Oasis, Dubai
United Arab Emirates