Privacy Policy
Last updated: 7 April 2026
Overview
Juka ("we", "us", or "our") is a digital marketing agency operating in Dubai, United Arab Emirates. We are committed to protecting the personal data of our clients, website visitors, and business contacts. This Privacy Policy explains what information we collect, why we collect it, how it is used, and the rights you have in relation to that data.
By using our website at gojuka.com or engaging our services, you acknowledge the practices described in this policy. If you do not agree, please do not use our website or services.
We do not have a designated Data Protection Officer (DPO) but remain fully committed to addressing your privacy concerns. For any questions about how we manage personal data, contact us at info@gojuka.com or +971 55 122 9821.
Scope & Application
This policy applies to all personal data processed by Juka in connection with our website and services, including data collected from:
- Website visitors — anyone browsing gojuka.com, regardless of whether they make an enquiry.
- Prospective clients — individuals who submit an enquiry, book a consultation, or request information about our services.
- Active clients — businesses and individuals engaged in a working relationship with Juka.
- Business contacts — partners, suppliers, and other third parties we interact with in the course of our business operations.
This policy does not apply to third-party websites linked from gojuka.com. We encourage you to review the privacy policies of any external sites you visit.
Data We Collect
We collect personal data in several ways, including when you use our services, submit a form, or simply visit our website:
- Information you provide directly: your name, email address, phone number, company name, and any messages submitted through our contact forms or consultation bookings.
- Usage and technical data: IP address, browsing history on our site, pages visited, time spent, links clicked, browser type and language, device type, and IP-based approximate location — collected automatically via cookies and analytics tools.
- Client account data: billing details, project briefs, account credentials, and communication records shared during the course of our engagement.
- Third-party platform data: data received from advertising platforms (Google, Meta) when you interact with our clients' campaigns, subject to those platforms' own privacy policies.
We only process information that is essential for delivering our services, complying with legal obligations, or improving your experience. We do not collect sensitive personal data such as health information, financial account numbers, or government ID numbers through our website.
How We Use It
We use the data we collect for the following purposes, all aimed at delivering our services and improving your experience:
- To respond to enquiries and book consultations.
- To deliver and manage the services you have contracted us for, including billing and account management.
- To send service-related communications such as reports, invoices, and project updates.
- To authenticate users and maintain the security of our platforms and systems.
- To analyse and improve the performance of our website, content, and marketing campaigns.
- To manage tag-based tools (such as Google Tag Manager) that support analytics and advertising functionality.
- To comply with legal obligations under UAE and applicable international law.
We will only contact you for marketing purposes if you have given explicit consent. You may opt out at any time — see the Direct Marketing section below.
Data Storage & Security
Your personal data is stored on secure cloud servers managed by reputable hosting providers committed to state-of-the-art security standards. Where services require international data transfer, we ensure such transfers comply with all applicable laws and maintain data protection standards equivalent to those in the UAE.
We implement the following technical and organisational measures to protect your data:
- Encryption: all data transmitted between your browser and our website is protected via HTTPS. Data stored on our systems is encrypted at rest where technically applicable.
- Access controls: access to personal data is restricted to authorised personnel on a need-to-know basis.
- Security reviews: we conduct regular reviews of our data handling and security practices.
While we take every reasonable precaution, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but commit to responding swiftly to any identified vulnerabilities or incidents.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law. Client data is typically retained for a minimum of five years following the end of an engagement for accounting and legal compliance purposes. Enquiry data from non-clients is deleted after 12 months if no engagement commences. You may request deletion of your data at any time — subject to any overriding legal retention obligations — by contacting us directly.
Your Rights
In accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws, you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR): request a copy of the personal data we hold about you and information about how we process it.
- Right to rectification (Art. 16 GDPR): request correction of any inaccurate or incomplete personal data we hold.
- Right to erasure — 'right to be forgotten' (Art. 17 GDPR): request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention requirements.
- Right to restriction of processing (Art. 18 GDPR): request that we limit how we use your data under certain conditions.
- Right to data portability (Art. 20 GDPR): receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
- Right to object (Art. 21 GDPR): object to the processing of your personal data under certain conditions, including processing for direct marketing purposes.
- Right to withdraw consent (Art. 7(3) GDPR): where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
- Right to lodge a complaint (Art. 77 GDPR): if you believe our processing violates applicable data protection law, you have the right to lodge a complaint with a relevant supervisory authority.
To exercise any of these rights, contact us at info@gojuka.com or +971 55 122 9821. We will respond within 30 days in accordance with applicable law. We may need to verify your identity before processing certain requests.
Direct Marketing
We may use your contact details to send you marketing communications about our services, promotions, and relevant industry insights — but only where you have given us explicit opt-in consent to do so, as required by GDPR and the ePrivacy Directive.
- Opt-in consent: you will only receive marketing emails from us if you have actively consented. We will never add you to a marketing list based on an enquiry or service relationship alone.
- Unsubscribe: every marketing email includes a clear unsubscribe link. You can also opt out at any time by contacting us directly. We will action all opt-out requests promptly.
- Channels: direct marketing communications are sent by email only. We do not send unsolicited SMS or postal marketing.
Opting out of marketing will not affect any service-related communications we need to send you as part of an active engagement.
Data Breach Notification
We take data security seriously and operate monitoring systems designed to detect and respond to potential breaches promptly. In the event of a data breach, we follow a clear procedure:
- Detection & assessment: upon discovery, we conduct a thorough assessment to determine the nature, scope, and potential impact of the breach, including which types of personal data are involved.
- Regulatory notification: where required by law, we will notify the relevant data protection authorities within 30 days of becoming aware of the breach.
- Individual notification: if a breach poses a significant risk to your rights and freedoms, we will notify you within 30 days, providing clear information about the breach, the data affected, and steps you can take to protect yourself.
- Support: we are committed to providing affected individuals with guidance and assistance to help mitigate any potential risks arising from a breach.
If you believe your data may have been compromised, contact us immediately at info@gojuka.com or +971 55 122 9821.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or industry standards. When we make material changes that affect your rights or how we handle your data, we will provide notice through appropriate channels (such as email or a prominent notice on our website) and update the effective date at the top of this page. We encourage you to review this page periodically. Continued use of our website or services after any changes constitutes acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your personal data is handled, please contact us:
Juka Digital Marketing
Empire Heights A, 16th Floor, Business Bay, Dubai, UAE
Email: info@gojuka.com
Phone: +971 55 122 9821