Privacy Policy

1. Who we are

Vibes We Bring (“VWB”, “we”, “us”) is a music and culture brand based in Dubai, United Arab Emirates. We produce events built around UK Garage, 2-step, UK Funky, garage house, 90s house, soulful house and Drum & Bass, and we operate the website at vibeswebring.com.

We decide how and why the personal data described in this policy is used, which makes us the controller of that data under the PDPL. You can contact us about anything in this policy at connect@vibeswebring.com.

2. The laws that apply

We operate in the UAE and hold our events in Dubai, so this policy is governed by UAE law. The principal laws that shape it are:

• Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the PDPL), which sets the rules for collecting and using personal data and the rights of the people it concerns;
• Federal Decree-Law No. 34 of 2021 on Combatting Rumours and Cybercrimes, which protects privacy online, including in photographs and recordings of people; and
• the rules of the UAE telecommunications regulator on unsolicited electronic communications, which require clear consent before marketing messages are sent.

This website and our events are directed at people in the UAE. If you are in another country, you may have rights under your local law, and we will consider any request you make in good faith.

3. What we collect and why

We collect only what we need for the purposes below.

Community registration

Data: your first name, email address, mobile number (optional), music preferences (optional), your confirmation that you are 21 or over, a record that you ticked the consent box, the wording of the consent you were shown, and the date and time you submitted the form.

Why: to add you to the VWB community list; to tell you about events, artist announcements, exclusive experiences and future releases; to decide which announcements are likely to interest you, based on the music preferences you chose; and to keep proof of your consent.

Basis: your consent, which you give by ticking the box. The box is never pre-ticked, and you can withdraw consent at any time (see sections 10 and 11).

Messages you send us

Data: your name, email address and whatever you choose to tell us.

Why: to reply to you and to keep a record of what we discussed.

Basis: your request.

Technical and security data

Data: our web host records standard server logs, which include your IP address, the date and time of each request, the pages requested and your browser and device type. The registration form also creates a short-lived technical record built from a one-way hash of your IP address, so that we can limit repeated submissions. The hash is not your IP address and cannot be reversed to reveal it.

Why: to run the website, keep it secure and protect it from spam and abuse.

Basis: this processing is necessary to operate and secure the website.

Photographs and video at our events

Data: images, video and sound of people attending or performing at our events.

Why: to document events and to share and promote them on this website and our social media accounts.

Basis: your consent, given by entering the event as set out in section 4.

Tickets and merchandise

At the date of this policy we do not sell tickets or merchandise through this website. If that changes, we will update this policy before we collect any purchase data. Where tickets are sold by a ticketing partner, that partner collects your purchase data under its own privacy policy.

4. Photography and filming at events

Our events are photographed, filmed and recorded. UAE law protects people’s privacy in their image and requires consent before a person is photographed or filmed or their image is published. This section sets out how we obtain that consent and what it covers.

• Entry is consent. Entering any Vibes We Bring event, whether you hold a paid ticket, are on a guest list or enter free of charge, is an express opt-in. By entering, you consent to being photographed, filmed and recorded, including your image and your voice, and to that material being used as described below. If you do not consent, please do not enter.
• Signage. We display clear signage stating that filming is taking place at the entrance to the venue, and we repeat the notice on the event information we publish.
• What the material is used for. Documenting the event, and publishing and promoting it on this website, on social media and in other promotional and advertising material, online and offline. The material may include identifiable people, and we may use it prominently, including in advertisements, without asking for further permission.
• Who may use it, where and for how long. We, and the venues, partners and service providers who help us produce and promote our events, may use the material anywhere in the world, with no fixed end date.
• Limits we set ourselves. We do not photograph or film people in private areas such as toilets and changing areas. We do not publish, and we do not alter, any image or recording with the intention of harming, mocking or defaming a person. If you believe we have breached these limits, email connect@vibeswebring.com and we will review it.
• Withdrawing consent. You may withdraw your consent by emailing connect@vibeswebring.com, giving details of the event and, if you can, where you appear. From the date we act on your request we will stop using your identifiable image in new material, and we will remove it from material we control where the law requires us to. Withdrawal does not affect use made before then, and we cannot recall material that has already been published, printed or shared by others.

5. What we do not do

• We do not sell your personal data, and we do not rent or trade our community list.
• We do not use your data for automated decisions that have legal or similarly significant effects on you.
• We do not use tracking or advertising tools on this website (see section 6).
• We do not knowingly collect data from anyone under 21 through the community list (see section 13).

6. Cookies and third-party services on this website

This website does not set cookies of its own, does not use analytics or advertising tools, and does not store information in your browser.

Two third-party connections are worth knowing about:

• Google Fonts. The site loads its typefaces (Anton, DM Serif Display and Inter) from Google. When a page loads, your browser connects to Google’s servers, which receive technical information such as your IP address and browser type. Google’s own privacy policy applies to that connection.
• Social media links. The Instagram and TikTok links in the footer take you to those platforms only if you click them. Nothing is shared with them by merely visiting this site, and their privacy policies apply once you are on their services.

7. Who we share your data with

We share personal data only where it is needed for the purposes in this policy:

• Service providers. Our website hosting provider and the email service that receives your registration process data on our behalf. If we adopt a newsletter or messaging service to send community updates, it will process your name and contact details for us and only on our instructions, and we will update this policy to say so.
• Event and ticketing partners. We do not pass your community registration details to venues, promoters or sponsors for their own marketing. If you buy a ticket from a ticketing partner, that partner handles your purchase data under its own policy.
• Authorities and advisers. We may disclose data where a UAE law, court order or competent authority requires it, to protect people’s safety at an event, or to our professional advisers where needed.
• A change of ownership. If the Vibes We Bring business is transferred, your data may be transferred with it, and the new owner will be bound by this policy or must obtain your consent to any change.

8. Transfers outside the UAE

Our website hosting, and the mailbox that receives your registration, are on servers located in Europe. Data you submit through this website is therefore transferred from the UAE to Europe and processed there by our hosting provider on our behalf. Google (see section 6) may also process data outside the UAE.

We rely on the conditions the PDPL sets for cross-border transfers, such as transfer to a jurisdiction that provides an adequate level of protection, appropriate contractual safeguards or your consent, and we take reasonable steps to keep your data protected.

9. How long we keep your data

• Community registration details: until you withdraw your consent or ask us to delete them, or until we stop running the community list. We review the list at least once a year and remove details that are no longer needed.
• After you unsubscribe: we keep only your email address and the date you withdrew, so that we do not contact you again and can show that your request was honoured.
• Messages you send us: for as long as needed to deal with your enquiry and any follow-up, then deleted unless the law requires us to keep them.
• Server logs: for the period set by our hosting provider.
• The registration rate-limit record: only entries from the last hour are counted, and the record is overwritten or cleared by the server in the ordinary course.
• Event photographs and video: kept in our event archive for as long as they remain useful for documenting and promoting the brand, subject to section 4.

10. Your rights

Under the PDPL you have the following rights, each subject to the conditions and exceptions the law sets:

• to be informed about, and to obtain a copy of, the personal data we hold about you and how we use it;
• to have inaccurate data corrected or incomplete data completed;
• to have your data erased, for example where you withdraw consent or where the processing is unlawful;
• to ask us to restrict processing, for example while you dispute the accuracy of your data;
• to receive data you gave us in a structured, machine-readable form and to ask that it be transferred to another controller where that is technically feasible;
• to object to processing, including at any time to the use of your data for direct marketing;
• to withdraw your consent at any time, as easily as you gave it, without affecting processing that took place before; and
• not to be subject to a decision based solely on automated processing that significantly affects you.

How to exercise them. Email connect@vibeswebring.com, preferably from the address you registered with. We may ask for information to confirm your identity so that we do not disclose data to the wrong person. Requests are free of charge. We aim to respond within 30 days. If we cannot meet a request, for example because the law requires us to keep the data, we will tell you why.

Event images. Photographs and video taken at events are handled as described in section 4, including how you can withdraw your consent. This does not limit any right the law gives you that cannot be excluded.

Complaints. Please contact us first so that we can try to put things right. You may also complain to the competent UAE data protection authority, currently the UAE Data Office.

11. Marketing messages and unsubscribing

• We send marketing only to people who have opted in. We do not buy or import contact lists.
• Marketing emails come from Vibes We Bring and include a clear way to unsubscribe. You can also unsubscribe at any time by emailing connect@vibeswebring.com with the word “Unsubscribe”.
• If you give us a mobile number, we may send you event and release updates by text or messaging app, at reasonable hours, and you can opt out in the same way.
• Unsubscribing from marketing does not stop us sending a message that is strictly necessary, such as a reply to something you asked.

12. Keeping your data secure

We use measures proportionate to the data we hold. The website is served over an encrypted (HTTPS) connection. The registration form validates what it receives on the server, uses an anti-spam check and limits repeated submissions. Registrations are delivered to a mailbox with restricted access and are not kept in a public location. No system is perfectly secure, so we cannot guarantee absolute security.

If a personal data breach occurs that is likely to harm you, we will notify the competent UAE authority and affected individuals as the PDPL requires.

13. Age limit

The community list is for people aged 21 or over, and you confirm this when you register. Each event has a minimum age, which we publish. We do not knowingly collect personal data from anyone under 21 through the community list. If you believe someone under 21 has registered, email us and we will delete the data.

14. Changes to this policy

We may update this policy as our activities, our providers or the law change. The date at the top shows when it was last revised. If a change materially affects how we use the data of people on our community list, we will tell them by email.

15. Contact

Vibes We Bring, Dubai, United Arab Emirates
Email: connect@vibeswebring.com