CORPORATE PRIVACY POLICY

MediaMasters FZ-LLC, trading as THE APEX MEDIA GROUP ("APEX", "we", "us"), respects the privacy of individuals whose personal data is handled in the course of its business.

This Corporate Privacy Policy explains how we collect, use, disclose, retain and protect personal data in connection with our architectural media business, commercial relationships and website.

It applies to individuals acting for advertisers, agencies, property owners, developers, suppliers, consultants and other business partners; people who contact us; job applicants; and visitors to our website.

It is intended to explain our practices and does not replace a contract or create commercial payment or liability terms.

MediaMasters FZ-LLC is responsible for personal data where it determines the purposes and means of processing.

In some projects another party, such as an advertiser or agency, may independently determine how personal data in advertising materials is used. The parties' respective roles depend on the facts and any applicable data-processing agreement.

Privacy enquiries may be sent to info@theapexmediagroup.com or to our business address above.

Depending on your relationship with us and the information you provide or that is needed for a particular transaction, the relevant categories of personal data handled may include:

Communications, project photographs or campaign materials may contain images or other information identifying individuals.

Technical data associated with website access may also be processed by our hosting or security infrastructure; the specific tools and cookies in use must be confirmed from the deployed website.

We do not ask you to provide sensitive personal data unless there is a genuine and lawful need.

We receive information directly from you when you enquire, correspond, provide artwork, submit a proposal, enter into an agreement or apply for a position.

Information may also come from your employer, authorised agency, advertiser, developer, property owner, contractor, professional adviser, publicly available professional sources, or the technical operation of our website.

Where another organisation provides information, it must have an appropriate basis for doing so.

We process personal data only to the extent reasonably necessary for specific operational and commercial objectives:

We limit processing strictly to what is reasonably necessary for the relevant legitimate purpose.

In connection with APEX's General Terms & Conditions, we may process personal data of authorised client, advertiser and agency representatives to establish contractual authority, administer binding bookings, document campaign commencement, issue production invoices and media invoices, reconcile payments and manage legitimate disputes.

The General Terms & Conditions govern the commercial obligations, including production prepayment, media-payment timing and cancellation; this Policy only explains related personal data processing.

We do not describe or require storage of full payment card credentials as part of our standard contractual process.

Advertisers, agencies, developers or other contracting parties may supply artwork or content containing personal data or identifiable images. Their contractual content warranties and intellectual property responsibilities are addressed in the General Terms & Conditions and relevant booking documents.

APEX's technical receipt, inspection or processing of supplied materials does not itself determine the legal basis on which the supplying party collected or used personal data.

Where APEX uses project or installation photographs for its own communications, it will assess applicable privacy, image, contractual and intellectual property requirements before publication.

When a visitor accesses our website, technical infrastructure may necessarily handle connection information, such as an IP address, browser details and request timestamps, to deliver pages and protect the service.

Any optional analytics, advertising pixels, third-party embeds, marketing cookies or consent technologies must be identified from the live configuration and disclosed accurately before activation.

This Policy does not represent that a particular analytics platform, cookie banner, CRM or tracking supplier is installed. Where consent is required for a technology, it should not be enabled before the necessary consent mechanism is implemented.

Users may also control cookies through their browser settings, although this may affect website functionality.

We may respond to requests for information, send service-related communications and, where legally permitted, communicate about APEX's services or business developments. Promotional communications must comply with applicable privacy and electronic marketing requirements.

Where consent is required, we seek it before sending marketing.

Recipients may ask to stop promotional communications by contacting info@theapexmediagroup.com or using an available unsubscribe mechanism. We may retain limited suppression information to respect such requests.

An enquiry or exchange of business contact details is not treated as unrestricted permission for marketing.

Relevant personal data may be shared, where appropriate and justified, with the following categories of recipients:

Depending on the arrangement, recipients may act as independent controllers or as processors under appropriate contractual terms. We do not treat every third party as our processor merely because it receives information.

Our work may involve international clients and service providers. Where personal data is accessed from or transferred outside the UAE, we assess the applicable transfer conditions and safeguards under UAE Federal Decree-Law No. 45 of 2021, including its provisions on cross-border transfers, and any other applicable laws.

The locations of individual hosting, email, analytics and business systems are not specified here until verified. We will not claim that data is exclusively hosted in the UAE unless this has been confirmed.

We aim to use reasonable and proportionate organisational and technical measures to protect personal data against unauthorised access, misuse, alteration, loss and disclosure.

The appropriate measures depend on the sensitivity of the information, the systems used and the relevant risk. No electronic transmission or storage method is entirely free of risk.

Specific technical certifications, encryption products or independent audits are not claimed in this Policy unless separately verified.

We retain personal data only for as long as reasonably needed for the purpose for which it was collected, including ongoing commercial relationships, contractual performance, financial record-keeping, compliance with applicable retention obligations and the establishment, exercise or defence of legal claims.

Different record categories may require different periods. When information is no longer needed and retention is not legally required, we will take appropriate steps to delete, anonymise or securely dispose of it.

Precise retention periods must be set in APEX's internal records schedule following verification of applicable legal requirements.

If you apply for a position or professional opportunity with APEX, we may use the details you choose to provide to evaluate your application and communicate about recruitment.

We will not assume that information provided for one recruitment process may be retained indefinitely or reused for unrelated purposes.

Additional notices may be provided where a recruitment process requires more specific information.

Our services and website are directed at businesses and professional audiences, not children. We do not intentionally solicit personal data from children through ordinary business enquiries.

If you believe information about a child has been submitted inappropriately, contact us.

Please do not include sensitive or unnecessary personal information in unsolicited correspondence or artwork submissions.

Our website and communications may link to third-party websites or social media services. Their collection and use of personal data are governed by their own notices and practices.

We encourage users to review those notices before sharing information. A link does not mean APEX controls the third party's privacy practices.

We will assess suspected personal data incidents and take steps appropriate to the facts and applicable legal obligations, including notification where required by law.

Questions, requests and concerns should be directed to info@theapexmediagroup.com.

Please avoid sending sensitive identity documents unless we specifically request them through an appropriate secure process.

We may revise this Policy to reflect legal, operational or technological changes. The current version will be made available on our website.

Material changes will be communicated where required by applicable law.

Publication of a revised notice does not itself replace any consent required for a new processing activity.