Legal

Privacy Policy

Last updated: 10 July 2026

Who we are

This website, www.coverpageagency.com (the "Site"), is operated by Capital Prime FZE, trading as Cover Page Agency, a Free Zone Establishment registered with Fujairah Creative City – Media Free Zone, United Arab Emirates, under license No. 11134/2017 (activity: Event Management, Business Consultancy).

Registered address: Fujairah – Twin Towers, P.O. Box 4422, Fujairah, United Arab Emirates.
Privacy contact: info@coverpageagency.com · WhatsApp: +971 52 401 8887.

For the purposes of the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL") and, where applicable, the EU General Data Protection Regulation ("GDPR"), Capital Prime FZE is the data controller for personal data collected through this Site.

What data we collect

  • Contact and quote requests: name, email address, phone number, company, event details and the content of your message (contact form, email, phone or WhatsApp).
  • Client and booking data: billing details, contractual information and event briefs, where you engage our services.
  • Talent, model and staff applications: name, contact details, date of birth, nationality, physical characteristics, photographs, videos, portfolio and work history — provided voluntarily by applicants.
  • Marketing data: email address, if you opt in to receive our communications.
  • Technical and usage data: IP address, browser and device information, pages visited and interactions, collected via cookies and similar technologies (see Section 8) only where permitted by your consent choices.

We do not knowingly collect data from anyone under 18. Talent applications from minors are accepted only through a parent or legal guardian.

Why we use it and on what legal basis

PurposeLegal basis (GDPR / UAE PDPL)
Responding to inquiries and preparing quotesSteps prior to a contract / legitimate interest
Delivering our services: event planning and production, photography and videography, entertainment and artist management/booking, models, event staff hiring, decoration, catering coordination, furniture and AV equipment rental, location scouting, and SEO/GEO marketing packagesPerformance of a contract
Reviewing talent, model and staff applicationsConsent and steps prior to a contract
Invoicing, accounting and legal obligationsLegal obligation
Newsletter and marketing communicationsConsent (opt-in; withdraw at any time)
Analytics, advertising and remarketing cookiesConsent (via the cookie banner)
Security, fraud prevention and defence of legal claimsLegitimate interest

Photography and filming at events

We produce photo and video content at events on behalf of our clients, in accordance with UAE regulations. Commercial filming and photography in the UAE may require official permits and authorisations. The agency operates under its UAE media free zone license and arranges filming permits where this is included in the agreed scope of work; otherwise, the client or event organiser is responsible for obtaining venue permissions and any required filming permits, and for informing attendees, as set out in each quotation.

The same approach applies when we shoot in Europe: filming takes place with the authorisation of the venue or event organiser and, where local rules require it, under permits obtained in advance, engaging licensed local professionals where applicable law so requires.

Drone footage. Aerial filming is carried out only where drone operations are lawful and authorised. In the UAE, commercial drone operations are subject to the GCAA framework (UAS Operator Certificate, registered aircraft, licensed remote pilots, third-party insurance) and, in Dubai, to additional DCAA permits. In the European Union, drone operations comply with EASA Regulations (EU) 2019/947 and 2019/945 and are performed by pilots registered in an EU member state. Drone images in which individuals are identifiable are treated as personal data and handled in accordance with this policy.

Where we publish event content on our own channels (website, Instagram, YouTube, LinkedIn), we do so based on legitimate interest or on the consent/agreements obtained for that event. To request removal of content in which you appear, write to info@coverpageagency.com — we action removal requests within 30 days.

Who we share data with

  • Service providers (processors): Webflow Inc. (website hosting, USA), Google LLC (analytics and advertising), Meta Platforms (advertising, WhatsApp Business), TikTok Technology Limited (advertising), Vimeo Inc. (video hosting), and our accounting and IT providers.
  • Clients and venues: limited talent/staff details strictly necessary to deliver a booked event (e.g. names for venue security clearance).
  • Authorities: where required by law.

We do not sell personal data.

International transfers

We are based in the United Arab Emirates, so data submitted through the Site is processed in the UAE. In line with EDPB Guidelines 05/2021, data that you provide to us directly and on your own initiative (forms, email, WhatsApp) does not constitute an "international transfer" within the meaning of Chapter V GDPR. Where we receive personal data from individuals in the European Economic Area, the transfer is necessary for the performance of a contract or of pre-contractual steps taken at your request (Art. 49(1)(b) GDPR), or is carried out with your explicit consent. Our processors established in the United States (Webflow, Google, Meta, Vimeo) rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

EU visitors — scope of our processing

Capital Prime FZE is not established in the European Union. Our processing of EU residents' data is occasional, does not involve large-scale processing of special categories of data, and — with all non-essential tracking disabled by default until you consent — is unlikely to result in a risk to your rights and freedoms. On that basis we rely on the exemption in Article 27(2)(a) GDPR from the obligation to designate an EU representative. EU residents may exercise all rights described in Section 9 directly at info@coverpageagency.com.

Cookies and tracking

On your first visit, a consent banner lets you accept or refuse non-essential cookies. Non-essential scripts do not load until you accept. We use Google Consent Mode v2. You can change your choices at any time via the "Cookie Settings" link in the footer.

CategoryToolsPurposeBasis
EssentialWebflow, consent managerSite operation, storing your consent choiceAlways active
AnalyticsGoogle Analytics 4Aggregated statistics on Site usageConsent
AdvertisingGoogle Ads, Meta Pixel, TikTok PixelMeasuring campaigns, remarketingConsent
MediaVimeo (Do-Not-Track)Embedded video playbackLegitimate interest / consent

Full details are in our Cookie Policy; the updated list of cookies is available in the banner's "Details" panel.

Your rights

Under the GDPR and the UAE PDPL you may request: access to your data, a copy (portability), correction, deletion, restriction of processing, and you may object to processing based on legitimate interest or withdraw consent at any time. Marketing emails always include an unsubscribe link.

To exercise any right, email info@coverpageagency.com. We respond within 30 days and may ask you to verify your identity. You may also lodge a complaint with your supervisory authority — for example the CNIL (France), the Garante (Italy) or the UAE Data Office.

Retention

  • Inquiries that do not become contracts: 24 months.
  • Client and contractual records: duration of the relationship + the period required by UAE commercial and tax law (5 years minimum).
  • Talent/model applications: 24 months, unless you join our roster or ask for earlier deletion.
  • Newsletter data: until you unsubscribe.
  • Cookie data: per the durations shown in the cookie banner (max. 13 months for analytics identifiers).

Security

We apply appropriate technical and organisational measures: encrypted connections (TLS), access controls, reputable hosting (Webflow/AWS) and staff confidentiality obligations. In the event of a data breach likely to result in a risk to your rights, we will notify the competent authority within 72 hours where required, and affected individuals without undue delay.

Changes

We may update this policy to reflect legal or operational changes. The date at the top indicates the latest version. Material changes will be signalled on the Site.