Privacy Policy
Last updated 27 September 2026
XII Labs ("we", "us") is a marketing and technology studio serving clients in Dubai, Abu Dhabi and the wider United Arab Emirates. This policy explains what happens to your information when you use xiilabs.com and its free tools. If you have any question about it, write to info@xiilabs.com.
What we collect
- Messages you choose to send us. The Project Builder and the brief form prepare an email in your own email app. Nothing is sent until you press send there. We then receive whatever you decided to include, such as your name, email address, phone number, company, website and project details.
- Server logs. Like every website, our web server records standard technical details for each request: IP address, date and time, the page requested, browser type and the referring page. We use them only to keep the site running and secure, and they are deleted automatically after about 14 days.
- Analytics, only with your consent. We use Google Analytics 4 and Microsoft Clarity to understand how visitors use the site so we can improve it. A banner asks for your choice. Until you accept, Google Analytics runs in a cookieless mode (Google Consent Mode) that stores nothing on your device, and Clarity does not load at all. If you accept, Google Analytics sets its cookies (such as _ga), and Clarity records how pages are used, such as clicks, scrolling and mouse movement, to produce heatmaps and session replays, with typed text masked. You can change your choice at any time with the Analytics settings link at the bottom of every page. We do not use advertising pixels.
Our free tools
- Brand Lab. The logo you upload and the brand kit you create are processed entirely inside your browser. They are never uploaded to our servers. To show your chosen typefaces, the tool loads them from Google Fonts, so Google receives your IP address for those requests under the Google Privacy Policy.
- Website Audit. The web address you enter is sent from your browser directly to Google PageSpeed Insights, which analyses that page and returns the scores. We do not receive or store the address or the results. Google's privacy policy applies to that request. If you then choose to email us your results, we receive what you send.
How we use your information
We use what you send us to reply to your enquiry, prepare proposals and deliver the services you ask for, and we use server logs to protect the website from abuse. We process your data with your consent, or where it is needed to act on your request or to perform a contract with you. We do not sell or rent personal data, and we do not use it for automated decisions about you.
Who we share it with
Only with the service providers that help us run the business, and only as far as they need it to provide their service: our hosting provider (Hostinger), our email provider, and, if you accept analytics, Google (Google Analytics, under the Google Privacy Policy) and Microsoft (Clarity, under the Microsoft Privacy Statement). We may also disclose information where the law requires it.
Where it is stored
The website runs on a server in Mumbai, India, provided by Hostinger. Emails are held by our email provider, and analytics data by Google and Microsoft, which may store it outside the UAE. Wherever your data is processed, we take reasonable steps to keep it protected.
How long we keep it
We keep enquiries for as long as we need them to handle your request and any work that follows, then delete them within a reasonable time unless the law requires us to keep them longer. Server logs are deleted after about 14 days. Analytics data is kept for the periods set in our Google Analytics and Clarity accounts.
Security
The site is served only over encrypted HTTPS, server access is restricted, and software is kept up to date. No method of transmission or storage is completely secure, but we work to protect your information.
Your rights
Under the UAE Personal Data Protection Law (Federal Decree Law No. 45 of 2021), you can ask us to tell you what personal data we hold about you, correct it, delete it, restrict or stop how we use it, or give you a copy. Email info@xiilabs.com and we will respond as soon as we reasonably can. You can also raise a concern with the UAE Data Office.
Children
This website is meant for businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children.
Other websites
Links to other websites are provided for convenience. Their privacy practices are their own, so please read their policies.
Changes
We may update this policy from time to time. The date at the top always shows the latest version.