Dread Agency Privacy Policy

1. Who we are

Dread Agency (“we”, “us”, “our”) is a brand consultancy based in Alexandria, Egypt. We are the controller of the personal data described in this policy.

This policy explains how we collect, use, share, and protect personal data when you visit dread .agency (the “Website”), book a call, contact us, subscribe to our newsletter, download resources, or apply for a role. It does not cover data we process for clients under a signed contract; that is governed by the contract.

We follow the data protection laws that apply to you, including the EU and UK General Data Protection Regulation (GDPR), Egypt’s Personal Data Protection Law No. 151 of 2020, Saudi Arabia’s Personal Data Protection Law, and the UAE’s Federal Decree-Law No. 45 of 2021.

Questions or requests: [email protected]

2. What we collect and why

We collect only what we need for each purpose below.

  • Booking a discovery call. We collect your name, email, company, role, phone number (if given), meeting time, and answers to booking questions. We use them to schedule and hold the call, prepare for it, and follow up. Legal basis: steps taken at your request before a contract.
  • Contacting us or sending a brief. We collect your name, email, company, message,e and any files you attach. We use them to reply and prepare proposals. Legal basis: steps before a contract and our legitimate interests.
  • Subscribing to our newsletter. We collect your email, name (if given), and email open and click activity. We use them to send insights and updates and to improve our emails. Legal basis: consent.
  • Downloading a resource. We collect your name, email, and company (if asked). We use them to send the resource and, if you agree, follow-up emails. Legal basis: consent.
  • Accessing a protected case study. We keep access records and your IP address to protect confidential client work. Legal basis: legitimate interests.
  • Browsing the Website. We collect your IP address, device and browser details, pages viewed, referring site, approximate location and cookie IDs. We use them to run, secure and improve the Website and, with your consent, to measure and target advertising (see Section 4). Legal basis: legitimate interests for essential functions; consent for analytics and advertising.

We only send marketing emails to people who opt in. You can withdraw consent at any time without affecting earlier processing.

We do not collect sensitive personal data, and ask that you don’t send it to us.

3. Job applications

We accept applications through a third-party careers platform linked from the Website. That platform’s privacy policy covers your data while it is held there. When we receive your application, we use your CV, portfolio, contact details and any notes from interviews only to assess you for roles. Our legal basis is steps before a contract and our legitimate interest in recruiting.

4. Cookies and tracking

Cookies are small files stored on your device. Essential cookies run by default. All other cookies load only after you accept them in our cookie banner. You can change your choice at any time through the “Cookie settings” link in the footer.

  • Essential cookies (Dread Agency, WordPress) keep the site working, remember your cookie choice, and protect password-protected pages. Always on.
  • Google Tag Manager (Google) loads our other tools according to your consent. Always on.
  • Google Analytics (Google) shows us how visitors use the Website. Loads only with your consent.
  • Google Ads (Google) measures ad performance and shows our ads to past visitors. Loads only with your consent.
  • Meta Pixel (Meta) measures ad performance and shows our ads on Facebook and Instagram. Loads only with your consent.
  • LinkedIn Insight Tag (LinkedIn) measures campaigns and shows our ads on LinkedIn. Loads only with your consent.

Advertising tools may combine data from our Website with what those platforms already know about you, under their own privacy policies. You can also control ad settings directly in your Google, Meta and LinkedIn accounts, or block cookies in your browser settings.

5. Who we share data with

We do not sell your personal data. We share it only with:

  • Service providers who process it on our behalf: website hosting and WordPress, Google Workspace (email and files), HubSpot (CRM), Cal.com (bookings), MailerLite (newsletter), and the analytics and advertising tools in Section 4.
  • Team members and contracted freelancers who need it to respond to you, bound by confidentiality.
  • Professional advisers, such as lawyers and accountants, where needed.
  • Authorities, where the law requires it or to protect our rights.
  • A successor business, if we restructure or establish a company, under the same protections.

6. International transfers

We are based in Egypt, and our service providers store data in other countries, including the United States and the European Union. When data leaves your country, we rely on safeguards the law recognises, such as Standard Contractual Clauses, adequacy decisions, or your consent where permitted.

7. How long we keep data

  • Enquiries, bookings and CRM records: 24 months after our last contact, unless you become a client.
  • Job applications: 12 months after the role closes, unless you agree to a longer period.
  • Newsletter subscriptions: until you unsubscribe; we then keep a suppression record so we don’t email you again.
  • Analytics data: 14 months.
  • Records we must keep by law: as long as the law requires.

When the period ends, we delete or anonymise the data.

8. Your rights

Depending on where you live, you can ask us to:

  • tell you what personal data we hold about you and give you a copy;
  • correct inaccurate or incomplete data;
  • delete your data;
  • restrict or object to how we use it, including for direct marketing;
  • transfer your data to you or another provider in a portable format;
  • withdraw your consent at any time.

To make a request, email [email protected]. We may ask you to confirm your identity. We respond within the time the law requires, and in any case within 30 days. Requests are free unless they are clearly excessive.

If you are unhappy with how we handle your data, please contact us first. You can also complain to your data protection authority:

  • European Union: your national data protection authority
  • United Kingdom: Information Commissioner’s Office (ICO)
  • Egypt: Personal Data Protection Centre
  • Saudi Arabia: Saudi Data & AI Authority (SDAIA)
  • United Arab Emirates: UAE Data Office

9. Security

We protect personal data with access controls, encrypted connections (HTTPS), password-protected systems,s and confidentiality commitments from everyone who handles it. No system is fully secure, but if a breach puts your rights at risk, we will notify you and the authorities as the law requires.

10. Children

The Website is for businesses and professionals. We do not knowingly collect data from anyone under 18. If you believe a child has sent us data, contact us, and we will delete it.

11. Changes to this policy

We may update this policy as our practices or the law change. The “Last updated” date shows the latest version. If we make significant changes, we will highlight them on the Website or notify subscribers by email.

12. Contact us

Dread Agency
Alexandria, Egypt
[email protected]

To top