Privacy Policy

Effective date: 31 August 2026

This Privacy Policy explains how Sweet Secrets Dubai handles personal data when you browse the directory, register or sign in, submit a listing application, contact support or use a managed contact route. It should be read together with our Terms of Use.

1. Who is responsible for the data

Sweet Secrets Dubai operates the website and is responsible for personal data processed for the directory's own purposes. Privacy questions, correction requests and rights requests can be directed to the website administration using the published administration details. Please identify the relevant account, submission, profile or URL without including unnecessary sensitive information.

2. Adults only

The website is intended only for adults aged 18 or older. We do not knowingly collect personal data from minors. If you believe a minor's data or image has been submitted, contact us so it can be investigated and removed promptly.

3. Information we may process

Account information

When an independent provider or agency registers, we process the selected account type, name, email address, optional phone number, account creation date and security information. Passwords are stored as salted hashes rather than readable passwords. Password-reset records contain a hashed, time-limited token.

Listings and applications

A listing or work application may include a name, age, city, physical details, Telegram handle, experience, description, photos and other material you choose to provide. Published profiles may also contain provider-supplied descriptions, locations, schedules, prices, services, media and contact methods.

Support requests

The contact form stores the contact detail you provide, an optional name, selected city, message and submission time. This information is visible to authorised administrators and is used to review and answer the request.

Technical and security information

When the website receives a request, its hosting and security systems may process an IP address, request time, requested page, browser or device information, referrer and error or security signals. Short-lived identifiers may be used for rate limiting, abuse prevention and service reliability.

Information kept on your device

Your age confirmation and favourites are saved in your browser's local storage. Favourites remain on your device and are not attached to your public account by the website. You can remove them by clearing favourites or the website data in your browser.

4. Why we use personal data

We process data to:

• operate, maintain and secure the directory;
• create accounts, authenticate users and provide password recovery;
• review applications and publish, update or remove authorised listings;
• answer support, correction, privacy and safety requests;
• resolve a managed contact route, select its current destination and pass the page context needed to identify the listing;
• detect spam, fraud, automation, prohibited content and security incidents;
• comply with legal duties and protect users, rights and the integrity of the website.

5. Legal grounds

Depending on the activity and applicable law, processing is based on your consent, the steps needed to provide a feature you request, compliance with a legal obligation, or legitimate interests such as website security, accurate directory administration, fraud prevention and responding to enquiries. Where consent is the basis, you may withdraw it for future processing.

6. When information is shared

We do not sell personal data. Information may be disclosed only as reasonably necessary to:

• hosting, infrastructure, security and content-delivery providers;
• managed contact-routing, messaging or password-reset delivery providers when you use the related feature;
• professional advisers where legal or operational advice is required;
• courts, regulators or law-enforcement bodies where disclosure is required or lawfully requested;
• a successor operator as part of a legitimate business transfer, subject to appropriate safeguards.

A public listing is, by nature, visible to website visitors. Do not submit information for publication unless you have authority and are comfortable with it being public.

7. Managed contact routes and external messengers

Before the page is sent to your browser, the directory resolves each contact route on the server. Depending on configuration and availability, the server may request the current destination from a managed contact-routing platform or use an approved local fallback. The page then contains a direct external link to WhatsApp or Telegram; pressing it does not send a route code to a same-origin contact resolver. The destination can change and is not guaranteed to belong to the person shown or the profile owner.

The current page address is used as listing context and, for WhatsApp, may be inserted into a prefilled message. Once an external messenger opens, that service and the selected recipient process the information you choose to send under their own terms and privacy rules. Check the destination and who is replying before communicating or sharing sensitive information.

8. International processing

Some infrastructure or service providers may process data outside the UAE. Where this happens, we seek to use reasonable contractual, technical and organisational safeguards appropriate to the information and the applicable legal requirements.

9. Retention

We keep information only while it is needed for the purposes described above, security, dispute handling and legal obligations. In particular:

• account information is kept while the account remains active and for any limited period required to close requests or meet legal obligations;
• work applications and their photos are automatically limited to 90 days and the 100 most recent applications, and can be deleted earlier by an administrator;
• support requests are limited to the 500 most recent messages and can be deleted by an administrator when no longer required;
• password-reset tokens expire after 30 minutes, and session cookies expire after the selected session period;
• rate-limit and security records are retained only as long as reasonably necessary for abuse prevention and reliability;
• published listing material remains until it is replaced, withdrawn or removed, subject to legitimate legal or safety retention needs.

10. Cookies and similar storage

The website uses essential cookies for signed-in account sessions and administrative security. A public account session normally lasts up to 12 hours, or up to 30 days when the persistent sign-in option is used. The age confirmation and favourites use local storage as described above. The current website does not require advertising cookies to provide its core features.

You can remove cookies and local storage through your browser settings. Doing so may sign you out, show the age confirmation again and clear your saved favourites.

11. Your choices and rights

Subject to applicable UAE law and any lawful exceptions, you may ask for access to personal data about you, correction of inaccurate data, deletion, restriction of processing, information about processing, or withdrawal of consent. You may also object where processing relies on legitimate interests.

Direct requests to the website administration using the published administration details. We may ask for proportionate evidence that you are the account holder, submitter or person depicted before disclosing, changing or removing data. We may retain limited information where the law, safety, fraud prevention or another person's rights require it.

12. Security

We use measures designed to protect personal data, including HTTPS in production, access controls, signed session cookies, password hashing, input validation, rate limiting, restricted administrative access and backups. No website or storage method can be guaranteed completely secure, so please avoid sending information that is not needed for your request.

13. Third-party links

Listings and managed contact routes may open websites, messengers or services that Sweet Secrets Dubai does not control. The current destination may change as routing settings are updated. Those third parties and the selected recipient decide how they process information after the redirect. This Policy does not cover their processing, and you should review their terms before sharing information.

14. Changes to this Policy

We may update this Policy when the website, our providers or legal requirements change. The current text and effective date will remain available on this page. Material changes apply from the date stated in the updated version.