Privacy Policy

Last updated: 6 October 2026

Backlink (“we”, “us”, or “our”) respects your privacy. This Privacy Policy explains how personal information is collected, used, disclosed, and retained in connection with backlink.ae, enquiries, customer accounts, orders, and our digital services.

Our services include backlink and editorial outreach, SEO, Generative Engine Optimization (GEO), website and application design, website optimization, and related digital marketing services.

This notice describes our own processing. Where we handle personal information on a client’s behalf, the arrangements explained in Section 8 also apply.

1. Who is responsible for your information?

The business responsible for personal information collected for our own website, customer relationships, and business administration is:

  • Trading name: Backlink
  • Legal operator: [INSERT FULL LEGAL ENTITY OR INDIVIDUAL OPERATOR NAME]
  • Registered business address: [INSERT VERIFIED REGISTERED ADDRESS]
  • Privacy contact email: [INSERT MONITORED PRIVACY EMAIL]
  • Contact page: backlink.ae/contact

References to personal information include information that identifies you or can reasonably be linked to you. Business contact details can also be personal information.

2. Information you provide

The information we receive depends on how you interact with us.

Enquiries and project discussions. This can include your name, email address, telephone number and country code, brand name, website address, social media handle, subject, message, project requirements, and correspondence. The website’s contact form requests a name, email address, subject, and optional message. The “Connect your brand” form requests a brand, website or social channel, email address, and mobile number.

Customer accounts. If you use a customer account, we process the account identifiers, email address, authentication information, account details you supply, and associated order history. Password-reset requests use your username or email address to support account recovery.

Orders and billing. When you purchase a service, we process the information requested during checkout or invoicing. Depending on the transaction, this can include your name, business details, billing address, country, email address, telephone number, selected services, order notes, invoice information, and payment status.

Project materials and authorized access. You may provide briefs, content, brand assets, reports, and access to your website, analytics, search, advertising, or social media accounts. Those materials and systems may contain personal information. The information required should be limited to the agreed service.

Customer reviews. If you submit a service review, we receive the name, email address, review text, and any rating you provide. Your review and submitted display name may appear publicly. The review form states that your email address will not be published.

Please avoid including payment credentials, passwords, identity documents, sensitive personal information, or unnecessary information about other people in enquiry forms, order notes, reviews, or ordinary messages. Where a project requires protected information, agree an appropriate transfer method with us first.

3. Technical information and cookies

When you visit the website, technical information may be processed by the website and the infrastructure used to deliver it. This can include an IP address, browser and device information, requested pages, access times, referring pages, session identifiers, and error or security information.

Cookies and similar browser storage can support shopping-cart sessions, account login, preferences, and security. The review form also offers an option to remember your details in your browser for a later submission.

The cookies used depend on the features you use and the website’s active configuration. A cookie’s lifetime is separate from the retention period of the associated account or order record.

Cookie and tracking details: [INSERT A VERIFIED COOKIE NOTICE OR INVENTORY, INCLUDING ACTIVE PROVIDERS, PURPOSES, AND LIFETIMES; STATE WHETHER OPTIONAL ANALYTICS OR ADVERTISING TRACKING IS USED.]

If optional analytics, advertising, or other non-essential technologies are used, we describe them in that notice, together with the relevant choices. Where applicable law requires prior consent, we obtain that consent before activating those technologies.

You can delete or block cookies through your browser settings. Blocking cookies needed for a requested feature may prevent the cart, login, or related functionality from working. Where website consent controls are provided, you can use them to change optional cookie choices.

4. Why we use personal information

We use relevant information to:

  • Respond to enquiries, discuss requirements, prepare proposals, and communicate with you.
  • Process orders, administer accounts, issue invoices, confirm payments, and handle support, cancellations, refunds, or payment disputes.
  • Deliver agreed services, coordinate project work, and provide reports.
  • Display and moderate submitted reviews.
  • Operate the website, maintain requested sessions, investigate technical issues, and protect against misuse or fraud.
  • Maintain necessary business records, comply with applicable obligations, and establish, exercise, or defend legal claims.
  • Send optional promotional communications only where legally permitted and with any required separate consent.

We do not treat an enquiry, a purchase, or acceptance of this notice as permission for unrelated marketing.

Information required for an enquiry, order, or project is identified through the relevant form or service requirements. If you choose not to provide necessary information, we may be unable to respond, complete the transaction, or deliver that part of the service.

5. Grounds for processing

We rely on the grounds available under the law that applies to the processing. These can include your consent, steps you request before entering a contract, performance of a contract, compliance with legal obligations, and other exceptions expressly permitted by applicable law.

Where UAE Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data applies, we rely on consent or an applicable statutory exception, including necessary contractual or legal-obligation processing where the relevant conditions are met.

If processing relies on consent, you can withdraw that consent through the contact details in this notice. Withdrawal does not invalidate earlier lawful processing. Information may still need to be retained or processed where a separate lawful ground applies.

This notice provides information about our practices; it does not itself obtain consent for every activity described.

6. WhatsApp communications

The website includes WhatsApp links and a form that prepares an enquiry message for WhatsApp. The form describes the action as opening WhatsApp with your message ready to send.

Using that link or form sends the prepared details to WhatsApp as part of opening its service. We receive the message when you send it to us through WhatsApp. Opening a prepared message and sending it are separate actions.

Your enquiry may contain the brand, website or social handle, email address, telephone number, and any additional information you include. Once received, we use the correspondence to respond and manage the enquiry or project.

WhatsApp processes information under its own Privacy Policy, including information needed to operate its service. Its processing and international operations are separate from our handling of the business messages we receive.

You can use the website’s contact form instead if you prefer another enquiry channel.

7. Payments

Payment-related processing depends on the method selected and the provider handling the transaction.

Payment provider details: [INSERT THE ACTUAL PAYMENT PROVIDER NAME(S) AND LINK(S) TO THEIR PRIVACY NOTICE(S).]

Where checkout redirects you to an external payment page, payment credentials entered on that page are handled by the relevant provider under its terms and privacy notice. The provider may also process billing details, device information, and information needed for authentication or fraud prevention.

For order administration, we process the transaction information made available to us, such as payment status, amount, transaction reference, billing details, and information needed to handle refunds or disputes. The exact information depends on the payment method and integration.

Do not send full card details, security codes, banking passwords, or one-time authentication codes through our contact forms or WhatsApp messages.

8. Information handled for clients

For some projects, a client determines why and how personal information is used, while we handle it on the client’s instructions. Examples can include access to customer enquiries in a client’s website, campaign data, account-user information, or information within a client’s authorized analytics or social media systems.

In those circumstances, the client may act as the controller and we may act as a processor, depending on the actual arrangement. Our responsibilities, permitted access, use of service providers, security requirements, and return or deletion of project data should be addressed in the applicable service agreement and, where required, a data-processing agreement.

Client-controlled personal information is handled for the agreed work and lawful instructions. It is not made available for unrelated use merely because we have access to a client’s system.

A request concerning information controlled by a client should normally be sent to that client. If we receive such a request, we will direct it to the appropriate controller and provide assistance as required by the agreement and applicable law.

9. Who can receive information?

Information may be disclosed where necessary and lawful to:

  • People working on an enquiry, order, support request, or agreed project.
  • Providers used for website hosting, delivery, security, email, business communications, storage, or other relevant operations.
  • Payment providers, banks, and advisers handling transactions, accounting, disputes, or legal obligations.
  • Publishers, outreach partners, or campaign platforms where their involvement is part of an agreed service.
  • Authorities, courts, or other recipients where disclosure is legally required or necessary for an applicable legal claim.

For editorial outreach or publication, we limit the information shared to the agreed brief, approved public business information, and necessary coordination details. We do not include access credentials, private customer lists, or internal billing records in published material.

We require recipients acting on our behalf to meet appropriate confidentiality and data-handling requirements. Some recipients, including payment providers and communications platforms, act independently for parts of their processing and have their own privacy notices.

10. International processing

Providers, communications platforms, and project participants may operate outside the UAE or your country of residence. This can involve international access, transmission, or storage of personal information.

Where applicable law restricts international transfers, we make transfers only where the relevant legal conditions are satisfied, such as an appropriate protection mechanism or a specifically permitted exception. Your use of the website is not treated as blanket consent to unrestricted international transfers.

You can contact us for information about the recipients and transfer arrangements relevant to your information, subject to lawful limits on disclosure.

11. Retention

Personal information is kept for the period needed for its stated purpose and any applicable legal, accounting, contractual, or dispute-related requirement.

Retention is assessed by category:

  • Enquiries and correspondence: the time needed to address the enquiry and any related project or reasonably necessary follow-up.
  • Accounts: the period needed to administer the account, with necessary order or legal records considered separately after closure.
  • Orders, invoices, and payment records: the period required for administration and applicable accounting, tax, refund, dispute, or legal obligations.
  • Project information and access: the agreed service period and relevant handover, support, contractual, or legal requirements.
  • Reviews: while the review serves its publication purpose, subject to moderation and applicable removal rights.
  • Technical records: the period justified by operational, troubleshooting, or security needs.

Information subject to a legal hold may need to be kept until the relevant matter is resolved. Backup copies may remain until their scheduled replacement or deletion and remain protected during that period.

When retention is no longer justified, we delete, anonymize, or securely dispose of the information. You can request the retention period or criteria that apply to your information.

12. Security

We apply technical and organizational safeguards appropriate to the information, the processing, and the associated risks. These include controlling access and requiring appropriate handling by people and providers involved in our work.

Please protect your account credentials and use authorized account-access methods for project work. Do not share authentication codes or unrestricted access where a narrower permission will meet the project’s needs.

No website, communication channel, or storage system can guarantee absolute security. Where a personal-data incident triggers notification duties, we notify affected individuals and relevant authorities as required by applicable law.

13. Your rights and choices

Depending on the applicable law and circumstances, you may have rights to:

  • Obtain information about processing and access your personal information.
  • Correct inaccurate or incomplete information.
  • Request deletion where the legal conditions are met.
  • Restrict or stop certain processing.
  • Withdraw consent for processing based on consent.
  • Object to direct marketing or other processing where a right to object applies.
  • Receive or transfer certain information in a portable format.
  • Request review of qualifying decisions based solely on automated processing, where such rights apply.
  • Complain to a competent data-protection authority.

Contact us using Section 1 to make a request. Identify the relevant account, enquiry, or order and describe what you want us to do. We may request proportionate information to verify your identity or authority before disclosing or changing personal information.

We will handle requests within the time required by applicable law. Rights can be subject to exceptions, including legally required retention and the protection of other people’s information. If a request cannot be fulfilled, we will explain the relevant reason where required.

To stop optional promotional messages, use an available unsubscribe method or contact us. Essential communications about an active order, account security, or a project may still be necessary.

14. Public content and third-party services

Reviews and other material you choose to make public may be accessible to visitors, search engines, and third-party services. Avoid placing confidential information in public submissions.

Links to external websites, social platforms, publishers, and payment services take you to services governed by their own terms and privacy notices. External images or embedded resources may also cause your browser to contact another provider and disclose technical information needed to load that content.

GEO work concerns content prepared for discovery through AI-assisted search. Publication of business content can make that content available to search and AI systems. An agreement to perform GEO work is not permission to disclose private personal information to those systems. Any proposed project tool that processes non-public personal information should be assessed and addressed in the relevant project arrangement.

15. Children and policy changes

Our services are intended for businesses and adults able to enter the relevant service arrangements. They are not directed at children. If you believe a child has supplied personal information without appropriate authorization, contact us so we can assess the situation and take appropriate action.

We may update this notice to reflect changes in services, practices, or legal requirements. The updated version will show a revised date. Where a change requires additional notice or renewed consent, we provide the relevant notice or obtain the required consent.

For privacy questions, requests, or concerns, use the privacy contact details in Section 1.