Privacy Policy

Effective date: 29th June 2026 Last updated: 29th June 2026

Who We Are
Information We Collect
How We Use Your Information
Legal Basis for Processing
Third-Party Platforms and API Services
Sharing Your Information
International Data Transfers
Data Retention
Your Rights
Cookies and Tracking Technologies
Security
Children’s Privacy
Changes to This Policy
Contact Us

1. Who We Are

Bates Pan Gulf LLC, trading as BPG Group, is a fully integrated communications agency providing advertising, media activation, public relations, branding, and customer experience (CX) services. We have been operating since 1980 and are headquartered in Dubai, United Arab Emirates.

Registered entity: Bates Pan Gulf LLC

Primary office: Publishing Pavilion, Unit 118, 1st Floor, Me’aisem First, Dubai Production City, Dubai, UAE

Phone: +971 4 556 3600
Website: https://www.bpggroup.com

We operate additional offices in Abu Dhabi (UAE), Riyadh (Kingdom of Saudi Arabia), and Kuwait City (Kuwait). For the purposes of this Privacy Policy, Bates Pan Gulf LLC is the data controller for personal information collected via our website and internal tools.

2.Information We Collect

We collect personal information in the following contexts:

2.1 Information you provide to us

Contact and enquiry forms: Name, email address, phone number, company name, and any message content when you use our “Work with us” or general contact forms.
Job applications: Name, contact details, CV, employment history, qualifications, and any other information you choose to include in your application.
Client engagements: Business contact information (name, title, email, phone) when you become a client or participate in a project briefing.
Correspondence: Any information you include when communicating with us by email or other channels.

2.2 Information collected automatically

Usage data: Pages visited, time spent on pages, referring URLs, browser type, operating system, and device type.
IP address: Collected automatically when you visit our website for security and analytics purposes.
Cookies and similar technologies: See Section 10 for full details.

2.3 Information from third-party advertising platforms

As part of our media and advertising services for clients, BPG Group operates internal tools that interact with third-party advertising platforms via their official APIs, including:

Google Ads API (via Google LLC)
Meta Ads API (via Meta Platforms, Inc.)

Through these integrations, BPG accesses campaign performance data, audience segment data, and advertising metrics on behalf of our clients. This data is used exclusively for the purpose of managing and optimising our clients’ paid media campaigns. No personal data of end-users (consumers) is directly stored by BPG through these API integrations beyond what is necessary to provide the service.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

Purpose	Description
Responding to enquiries	To respond to questions or requests submitted via our website or direct communication channels.
Providing services	To deliver advertising, media, PR, and CX services to our clients as agreed under contract.
Recruitment	To assess job applications, conduct interviews, and manage our hiring process.
Campaign management	To access, analyse, and optimise client advertising campaigns via third-party platform APIs (Google Ads, Meta Ads) on behalf of our clients.
Website analytics	To understand how visitors use our website and to improve content and user experience.
Legal and compliance	To comply with applicable legal obligations, resolve disputes, and enforce our agreements.
Security	To monitor for fraud, protect our systems, and ensure the security of our website and internal tools.
Marketing communications	With your consent, to send news, thought leadership, or service updates. You may opt out at any time.

4.Legal Basis for Processing

Where the GDPR or UAE PDPL applies, we process your personal data under one or more of the following legal bases:

Contractual necessity: Processing required to perform a contract with you or your organisation, or to take pre-contractual steps at your request.
Legitimate interests: Processing necessary for our legitimate business interests (e.g. responding to enquiries, improving our services, operating internal tools for client campaigns), provided those interests are not overridden by your rights and interests.
Legal obligation: Processing required to comply with a legal or regulatory obligation.
Consent: Where we rely on your consent (e.g. for marketing emails or non-essential cookies), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

5. Third-Party Platforms and API Services

BPG Group uses official APIs provided by third-party platforms to deliver media and advertising services to our clients. The key platforms and their data practices are as follows:

5.1 Google Ads API

We use the Google Ads API, provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), to query campaign performance, manage budgets, and report on advertising activity for our clients. Access is restricted to authorised BPG personnel only. Data accessed via the Google Ads API is used solely for internal campaign management purposes. Google’s own privacy practices are described in the Google Privacy Policy (https://policies.google.com/privacy).

5.2 Meta Ads API

We use the Meta Marketing API, provided by Meta Platforms, Inc. (1 Hacker Way, Menlo Park, CA 94025, USA), to access campaign insights, audience data, and advertising performance for our clients. Access is restricted to authorised BPG personnel only. Meta’s own privacy practices are described in the Meta Privacy Policy (https://www.facebook.com/privacy/policy/).

5.3 Data accessed via these APIs

The data accessed through these API integrations relates primarily to aggregated or pseudonymised advertising performance metrics (impressions, clicks, conversions, spend). BPG does not use this data for any purpose other than managing the advertising accounts of our clients. We do not sell, rent, or otherwise disclose this data to any third party.

5.4 Website analytics

Our website may use analytics services such as Google Analytics 4 to collect anonymised or pseudonymised usage data. This data is used to understand visitor behaviour and improve our website. You may opt out of analytics tracking via our cookie consent tool.

6. Sharing Your Information

We do not sell or rent personal information to third parties. We may share your information in the following limited circumstances:

Service providers: Trusted third-party vendors who assist us in operating our business (e.g. cloud hosting providers, email platforms, project management tools). These providers are contractually bound to process data only on our instructions and in accordance with applicable data protection law.
Clients: Where you are a contact person at a client organisation, we may share relevant information with other BPG personnel and systems in order to manage the client relationship and deliver services.
Group companies: We may share data within the BPG Group of companies (including our offices in Abu Dhabi, Riyadh, and Kuwait) for internal administrative and operational purposes.
Legal requirements: We may disclose personal information where required by law, court order, or government authority, or where necessary to protect the rights, property, or safety of BPG, our clients, or others.
Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred to the relevant third party, subject to confidentiality obligations.

In all cases, we take appropriate steps to ensure that any sharing of personal data is proportionate, lawful, and subject to adequate safeguards.

7. International Data Transfers

BPG Group is headquartered in the UAE and operates across the Middle East. Some of the third-party platforms and service providers we use (including Google and Meta) are headquartered in the United States or operate globally. Where personal data is transferred outside the UAE or the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as:

Standard contractual clauses approved by the relevant data protection authority;
Transfers to countries deemed to provide an adequate level of data protection; or
Other legally recognised transfer mechanisms.

You may request further information about the specific safeguards applied to any international transfer by contacting us using the details in Section 14.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention periods are as follows:

Data type	Retention period
Website enquiry and contact form data	Retained only for as long as necessary to respond to and follow up on the enquiry, after which it is deleted or anonymised.
Job application data (unsuccessful candidates)	Retained only for as long as necessary to assess the application and complete the recruitment process, after which it is deleted.
Client relationship data	Retained for the duration of the client relationship and for a reasonable period afterward to meet contractual and legal obligations, after which it is deleted or anonymised.
Advertising platform API data (campaign metrics)	Retained for the duration of the active client engagement and deleted upon termination of the relevant client contract.
Website analytics data	Retained only for as long as necessary to analyse website performance and improve user experience, in line with the retention settings of the analytics tool used.
Financial and contractual records	Retained for as long as required to meet applicable legal, tax, and accounting obligations.

After the applicable retention period, personal data is securely deleted or anonymised.

9. Your Rights

Depending on your location and the applicable data protection law, you may have the following rights with respect to your personal data:

Right of access: To request a copy of the personal data we hold about you.
Right to rectification: To request correction of inaccurate or incomplete data.
Right to erasure: To request deletion of your personal data, subject to legal or contractual obligations that may require us to retain it.
Right to restriction: To request that we limit the processing of your personal data in certain circumstances.
Right to data portability: To receive a copy of your data in a structured, commonly used format (where processing is based on consent or contract and carried out by automated means).
Right to object: To object to processing based on legitimate interests, including direct marketing.
Right to withdraw consent: Where processing is based on your consent, to withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us using the details in Section 14. We will respond within the timeframe required by applicable law. We may need to verify your identity before processing your request.

If you are in the EU/EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. If you are in the UAE, you may contact the UAE Data Office.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to operate, improve, and analyse our website. Cookies are small text files placed on your device when you visit a website.

Types of cookies we use

Strictly necessary cookies: Essential for the website to function. These cannot be disabled.
Analytics cookies: Used to collect anonymised data about how visitors use our website (e.g. pages visited, time on site).
Functional cookies: Allow the website to remember your preferences (e.g. language, region).
Marketing cookies: Used to deliver relevant advertising and measure the effectiveness of campaigns. These are only set with your consent.

When you first visit our website, you will be presented with a cookie consent banner allowing you to accept or decline non-essential cookies. You can change your preferences at any time via the cookie settings link in the website footer.

You may also control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

11. Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. These measures include:

Encrypted data transmission (HTTPS/TLS) on all pages of our website;
Access controls and authentication requirements for internal systems and API integrations;
Regular review of our security practices and systems;
Staff training on data protection and information security.

While we take all reasonable steps to protect your data, no transmission over the internet or electronic storage method is completely secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals in accordance with applicable law.

12. Children’s Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child without appropriate parental consent, we will take steps to delete that information promptly. If you believe we may have collected data from a child, please contact us using the details in Section 14.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes your acknowledgement of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal data, please contact us:

Bates Pan Gulf LLC (BPG Group)
Publishing Pavilion, Unit 118, 1st Floor
Me’aisem First, Dubai Production City
Dubai, United Arab Emirates

Email: bpggroupadmin@bpggroup.com
Phone: +971 4 556 3600
Data Protection Contact: [to fill: name and title of DPO or privacy contact, if applicable]

We aim to respond to all requests within 30 days of receipt. If the matter is complex or we receive a high volume of requests, we may extend this by a further two months, in which case we will inform you.