Privacy Policy

This Privacy Policy explains how F&B 360HUB Trading & Manufacturing FZCO (a free-zone company licensed in the United Arab Emirates; trading as 360hub-ae; "we", "us", "our") collects, uses, stores, shares, and protects personal data when you interact with our website at https://360hub.ae, submit a contact form, or engage us for co-packing or market-entry services.

We operate in compliance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and apply the principles of the EU General Data Protection Regulation (GDPR) where European data subjects are involved.

1. Data we collect

Submitted directly by you via the contact form, email, or telephone:

• Full name and job title
• Company name and country of operation
• Business email and phone number
• Free-text message describing your inquiry, project scope, target SKUs, regulatory questions, or other context you choose to share

Collected automatically by the website infrastructure:

• IP address and approximate geographic region (city-level) of visitors — used for security log review and abuse prevention
• Browser type and operating system — used for compatibility diagnostics
• Pages visited and timestamps — minimal aggregate analytics only; no third-party advertising or behavioural-tracking cookies are deployed at this time

Provided during an active engagement, when you become a paying client: corporate documents (trade licence, certificate of incorporation, beneficial-ownership declarations), product formulations and specifications, batch and shipment records, payment account details (for invoicing). The scope of this data is defined in the signed engagement contract.

2. Why we collect it

• Respond to inquiries — to evaluate fit, prepare a proposal, and reply within one UAE business day
• Deliver contracted services — to execute co-packing runs, prepare MOCCAE / Montaji regulatory filings, manage retail and export documentation
• Meet legal obligations — including UAE accounting record-keeping, anti-money-laundering checks, and regulatory filings with MOCCAE, Dubai Municipality, and customs authorities
• Operate the business — for invoicing, payment reconciliation, and internal record-keeping
• Improve the site — aggregate non-personal analytics to refine our content and navigation

3. Legal basis

We rely on one or more of the following lawful bases under PDPL and GDPR:

• Consent — when you submit the contact form or sign up for any optional communication
• Contract performance — when we deliver services under a signed engagement
• Legitimate interest — for security logging, fraud prevention, and operating the business
• Legal obligation — for tax records, customs filings, and regulatory compliance

4. Who we share data with

We do not sell personal data. We do not share it with marketing networks, ad platforms, or data brokers. We share strictly with parties needed to deliver the service:

• Production partner — Majlis / Midtown Factory (UAE) for the operational execution of co-packing runs
• Regulatory authorities — UAE Ministry of Climate Change & Environment (MOCCAE), Dubai Municipality (Montaji), customs and free-zone authorities, for the filings required to manufacture and export your product
• Banking and payment partners — UAE-licensed banks for invoicing and reconciliation
• Professional advisors — auditors, legal counsel, and accountants under written confidentiality terms, only when their involvement is required
• Infrastructure providers — our data is processed by Amazon Web Services (eu-central-1, Frankfurt) and on-premises infrastructure under our direct control; these providers operate as data processors under written agreements
• Government or court order — where compelled by a binding legal order

Each engaged client receives an explicit list of sub-processors as part of their contract.

5. International transfers

Our core systems are hosted on AWS infrastructure in eu-central-1 (Frankfurt, Germany). Customer relationship records are processed in the EU. When data must leave the EU or UAE (for example, to enable an export shipment to your destination country), we rely on contractual safeguards including standard contractual clauses and only transfer what is necessary for the specific purpose.

6. How long we keep data

• Contact form submissions that do not convert — retained for up to 24 months for evaluation and follow-up, then deleted
• Engagement records, contracts, and accounting documents — retained for 7 years from the end of the engagement, as required by UAE accounting and tax law
• Security and access logs — retained for up to 90 days, then rotated
• Marketing-permission records — retained for as long as your permission remains active plus 24 months after withdrawal, to demonstrate prior consent

7. Your rights

Under PDPL and (where applicable) GDPR, you have the right to:

• Request a copy of the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data, subject to our legal record-keeping obligations
• Restrict or object to certain processing
• Withdraw consent at any time, where consent is the basis we relied on
• Request portability of data you provided to us
• Lodge a complaint with the UAE Data Office or, if you are in the EU, with your national data-protection authority

To exercise any of these rights, email hello@360hub.ae with the subject line "Data request — [your full name]". We respond within 30 days.

8. Cookies and tracking

As of the date above, this website uses only the essential session cookies required to operate the contact form. We do not deploy advertising, retargeting, behavioural-analytics, or social-media tracking cookies. Search-engine verification meta tags (Google Search Console, Bing Webmaster Tools) are passive and do not transmit personal data. If this changes, we will update this Policy and, where required, request your consent through a cookie banner before enabling new tracking.

9. Children

Our services are directed at businesses, not individuals under 18. We do not knowingly collect data from minors. If you believe a minor has submitted data through our forms, contact us and we will delete it.

10. Security

We protect personal data using TLS encryption in transit, encryption at rest on our infrastructure, role-based access controls, multi-factor authentication for staff systems, and audit logging of access to sensitive records. No system is perfectly secure, but our practices are calibrated to the sensitivity of the data we hold and reviewed periodically.

11. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes (those that affect your rights or how we use your data) will be communicated by email to known contacts and posted prominently on this page for at least 30 days before taking effect.

12. Contact

F&B 360HUB Trading & Manufacturing FZCO

• Email: hello@360hub.ae
• Phone: +971 4 441 5370
• Address: Dubai, United Arab Emirates