Privacy Policy | Vexora Media

This policy explains how we handle personal data when you visit our website, complete a marketing audit, or contact us. It also explains your choices about cookies and marketing.

1. Who is responsible for your data

Vexora Media W.L.L., C.R. 200664-1, is the data controller for personal data we collect for our own business purposes. Our address is The Collective Hub, Adliya, Manama, Kingdom of Bahrain.

Contact us about privacy at info@vexora-media.com or +973 3203 2727. If we process data on behalf of a client, the client's own privacy notice and our agreement with that client may also apply.

2. Information collected through the audit and WhatsApp

Audit details: your name, WhatsApp number and selected country code, industry, monthly advertising budget range, and main marketing challenge.
Optional business details: company, role, market served, and business stage, if you choose to provide them.
Contact information and communications you send by WhatsApp, email, or phone, including message contents, attachments, and information needed to respond to your inquiry.

The audit currently prepares your brief in your browser. Opening WhatsApp passes the pre-filled text to WhatsApp; we receive the message when you send it to us. Opening WhatsApp alone does not mean that a message has been sent. WhatsApp processes data under its own privacy policy.

Please do not include passwords, payment-card details, identity documents, patient information, or other sensitive personal data in the audit or an initial message. Only share information about other people if you are authorised to do so.

WhatsApp Privacy Policy

3. Website, cookie and device information

Website infrastructure and tracking tools may collect IP addresses, browser and device information, referring pages, pages visited, timestamps, cookie identifiers, advertising click identifiers, and interactions such as inquiry-link clicks. Language preferences may be stored in your browser's local storage.

Cookies and similar technologies can support essential website functions, audience measurement, advertising attribution, remarketing, and customer relationship management. Tools and cookies vary by page, browser settings, and which integrations are enabled. We do not intend to include your audit answers or message contents in ordinary advertising or analytics event parameters.

4. Google Ads, Google Analytics, Meta Pixel and HubSpot

Google Ads: the Google tag supports advertising measurement and attribution and may use cookies or click identifiers to connect a visit or conversion to an advertisement. Depending on configuration, it may also support remarketing.
Google Analytics, including GA4 when enabled: measures visits, traffic sources, pages and interactions to help us understand and improve the website. Analytics cookies such as _ga may distinguish browsers. Its availability depends on the active analytics configuration.
Meta Pixel: on pages where it is installed, it measures page visits and lead or contact interactions for ad attribution, audience measurement and, where configured, remarketing. Meta cookies such as _fbp and _fbc may be used. Meta may associate activity with a Meta account under its own policies.
HubSpot: the tracking script measures website visits and supports inquiry management. Cookies such as hubspotutk and __hstc identify a browser or visit. If a connected HubSpot form is used, its visitor token (hutk) can associate submitted contact details with visit history, subject to the applicable settings and permissions.

Not every tool or conversion event is active on every page. In particular, describing Google Analytics or a connected HubSpot form here does not mean that those integrations are currently configured on the audit. Consent is required wherever applicable law requires it; this notice is not itself a request for consent.

5. Why we use personal data

To respond to your request, prepare a preliminary recommendation, and discuss services you have asked about.
To take steps at your request before a service agreement, deliver agreed services, and manage customer communications.
To maintain website security, improve our services, and measure marketing performance where lawfully permitted.
To meet legal obligations, retain necessary business records, and establish or defend legal claims.
To send optional marketing communications where we have a lawful basis, including consent when required. An inquiry does not automatically give blanket consent to unrelated marketing.

Depending on the activity, processing may rely on your consent, steps toward or performance of a contract, a legal obligation, or a legitimate interest that does not override your fundamental rights and freedoms. You may withdraw consent for future processing where consent is the basis.

6. Sharing and transfers outside Bahrain

Relevant staff and service providers may access the data needed to handle your inquiry, host and secure the website, provide communications, support CRM systems, or carry out lawful analytics and advertising. These providers may include Google, Meta, WhatsApp and HubSpot when their services are used. We may disclose data when required by law or necessary to protect lawful rights.

These providers may process data outside Bahrain. Transfers must meet the requirements of Bahrain's Personal Data Protection Law and its implementing decisions, including applicable safeguards or authorisations. Provider privacy policies explain their own processing; contact us for information about a particular use or transfer.

We do not sell your audit answers or WhatsApp conversations. Advertising providers may process identifiers and browsing activity as described above.

7. Retention and security

Personal data should be kept only for as long as needed for the purpose for which it was collected. Inquiry and communication records are retained while needed to respond, follow up on your request, or manage an ongoing relationship. Contractual, accounting and legal records may need to be kept longer under applicable law or for legal claims.

When information is no longer needed, it should be deleted or anonymised, subject to lawful retention requirements. Backup copies may remain until the relevant backup cycle expires. Cookies have their own expiry periods, and provider-held data is subject to the provider's retention rules. We do not apply one fixed retention period to every type of data; you may ask us about the period relevant to your record.

We seek to limit access to authorised people and use appropriate safeguards for personal data. No internet transmission or electronic storage system is completely secure.

8. How to opt out

Use your browser's controls to block or delete cookies, restrict third-party cookies, or clear site storage. Blocking essential storage may affect website functions. Deleting cookies alone does not prevent them from being set again on a later visit.
Manage personalised advertising through Google My Ad Center and Meta Ad Preferences. These controls do not necessarily stop all measurement or remove information already collected.
For Google Analytics, use Google's supported opt-out browser add-on where available. Browser privacy tools can also restrict tracking scripts.
To stop marketing from us or request removal of an inquiry record, email info@vexora-media.com or tell us in the WhatsApp conversation. Use an unsubscribe link if one is included in an email. We may still send necessary replies about a service you requested.
To restrict HubSpot tracking, block the relevant cookies or tracking script through your browser or privacy tools. For a contact record we hold in HubSpot, contact us directly.

The website does not currently provide an on-site cookie-preference panel. Browser and provider controls are separate from withdrawing consent from us and do not undo past processing. Where you withdraw consent, its withdrawal does not affect the lawfulness of processing carried out beforehand.

9. Bahrain law and your rights

Our handling of personal data is subject to Bahrain's Personal Data Protection Law (Law No. 30 of 2018) and applicable implementing decisions. Subject to the law's conditions, you may request information about whether and how we process your data, access the relevant information, and request rectification, blocking or erasure of data processed in breach of the law. You may also object to direct marketing free of charge and withdraw consent where applicable.

Send requests to info@vexora-media.com. We may reasonably verify your identity and clarify the request, and will respond within the periods required by applicable law. Some records may be retained where a legal obligation or a permitted exception applies.

You may raise a concern with Bahrain's competent Personal Data Protection Authority. Using your rights does not require accepting unrelated marketing.

10. Changes and contact

We may update this policy as our services, tools or legal requirements change. The last-updated date identifies the current version. Please contact Vexora Media W.L.L. at info@vexora-media.com or +973 3203 2727 if you have a privacy question.

Postal address: The Collective Hub, Adliya, Manama, Kingdom of Bahrain.