Effective date: 1 January 2026

Last updated: 1 January 2026

This Privacy Policy explains how Liène (referred to as “Liène”, “we”, “us”, “our”) collects, uses, discloses, transfers, and protects personal data when you interact with us, including through our website, downloadable materials, newsletters, business development activities, and event and brand experience services.

Liène is a UAE-based company, licensed as an LLC through Sharjah Media City (Shams Free Zone), and we primarily serve clients across the UAE and the GCC.

Scope

This Privacy Policy applies to personal data collected through:

• Our website (including contact forms, newsletter signup, downloadable PDFs, cookies and similar technologies).
• Communications with us by email, phone, WhatsApp Business, social media messaging, and in-person meetings.
• Business development interactions, including referrals, networking, and industry
• Client servicing and delivery of brand experiences, activations, pop-ups, exhibitions, and related event production work.

This Privacy Policy does not apply to third-party websites, platforms, or services that we do not control, even if we link to them or you interact with us through them (for example, social media platforms or embedded tools). You should review their privacy policies separately.

Data controller and contact details

Liène is the controller of personal data described in this policy where we determine the purpose and means of processing.

Contact: office@liene.ae

If you contact us regarding privacy, include enough detail for us to locate your data (for example, the email or phone number used to contact us and the relevant time period).

Personal data we collect

We may collect and process the following categories of personal data, depending on how you interact with us:

A)  Identity and contact data

• Name, email address, phone number, job title, company name, business address, country, and preferred communication channel.

B)  Enquiry, proposal, and relationship data

• Your enquiry details, brand or project brief, event objectives, timelines, indicative budgets, stakeholder details, meeting notes, proposal and contract communications, and feedback.

C)  Client and vendor management data

• Professional contact details for client team members and third-party partners involved in delivery (venues, production partners, fabrication workshops, AV, caterers, security, couriers, photographers and videographers, RSVP or ticketing providers, and similar service suppliers).

D)  Guest, attendee, and RSVP data (event delivery)

• Guest lists, RSVP status, attendance, seating or access logistics, and limited preference data necessary to deliver the event responsibly (for example, accessibility needs) when provided to us.

E)  Marketing and communications data

• Newsletter subscriptions, marketing preferences, opt-in or opt-out status, and interactions with our emails or campaigns.

F)  Technical and usage data (website and digital)

• IP address, device identifiers, browser type, pages visited, timestamps, referral source, approximate location derived from IP, cookie identifiers, and engagement signals.

G)  Visual and media data

• Photos, videos, and other content captured during activations and events, including content that may identify individuals, subject to the usage and permissions framework described in this policy and any client-specific contractual terms.

Sensitive personal data

We do not seek to collect sensitive personal data. We ask that you do not send us sensitive personal data through our website forms, email, or messaging channels unless it is necessary for an agreed purpose.

In an events context, limited health-related or preference information (such as dietary requirements or accessibility needs) may be shared with us so we can deliver the experience safely and appropriately. When this occurs, we use it only for delivery, share it only with parties

who need it for execution, and retain it only as long as necessary for the purpose described in this policy.

Children

Our services and website are not directed to children, and we do not knowingly collect personal data of children.

How we use personal data and our purposes

We use personal data for the following purposes:

A)  To respond to enquiries and manage relationships

• Responding to messages, arranging calls, conducting discovery, preparing proposals, and maintaining our communications.

B)  To deliver our services

• Planning, producing, coordinating, and executing brand experiences and events, including supplier coordination and project management.

C)  To administer our business

• Managing records, internal reporting, budgeting, invoicing, payment reconciliation, auditing, and maintaining business documentation.

D)  To maintain and improve our website and operations

• Troubleshooting, analytics, performance monitoring, security monitoring, and improving our services and client experience.

E)  To market and grow our business

• Sending newsletters and announcements, conducting outreach, and running targeted advertising and campaign measurement, including profiling for marketing purposes.

F)  To comply with legal obligations and protect rights

• Complying with applicable legal requirements, responding to lawful requests, preventing fraud, and protecting our rights and the rights of others.

Legal bases and UAE compliance framing

Where applicable, we process personal data based on lawful grounds recognized under applicable UAE data protection requirements, including processing necessary for providing services, fulfilling contractual steps, complying with legal obligations, protecting legitimate interests, and using consent where required. UAE law recognizes rights relating to direct marketing and profiling, including the ability to object in certain cases.

Marketing, outreach, and opt-out

Newsletters and promotional messages: If you subscribe to our newsletter or provide your details to receive updates, we may send you marketing communications. You can opt out at any time using the unsubscribe link in emails or by contacting us at office@liene.ae.

Business development and cold outreach: We may contact business representatives using professional contact details obtained through public sources, referrals, or professional interactions. If you do not want to receive such communications, you can request that we stop, and we will honor your request subject to record-keeping needs.

Targeted advertising and profiling: We may use tracking technologies and advertising partners to measure campaign performance, build audiences, and deliver ads that are more relevant to users. You can manage these preferences using cookie tools and platform-level settings, as described below.

Cookies and similar technologies

We use cookies and similar technologies on our website to:

• Enable essential site
• Analyze website traffic and
• Measure marketing effectiveness and support targeted advertising, if enabled on our

Depending on your website configuration, cookies may include first-party cookies (set by our website) and third-party cookies (set by service providers). You can control cookies through:

• Our cookie banner or preference center, if
• Your browser settings, including blocking or deleting

If you disable certain cookies, parts of the website may not function properly, and your experience may be affected.

Sharing and disclosure of personal data

We may share personal data only where necessary for the purposes described above, including with:

A)  Service providers and professional advisers

• Website hosting providers, analytics and marketing technology providers, email and communications tools, cloud storage tools (for example, Microsoft OneDrive or similar), CRM platforms, and invoicing/accounting systems (such as Zoho or similar tools).
• Professional advisers such as lawyers, accountants, auditors, and insurers when

B)  Delivery partners for events and activations

• Production partners, venues, fabrication workshops, AV suppliers, caterers, security providers, couriers, photographers and videographers, RSVP and ticketing providers, and similar vendors involved in delivering a project.
• As a rule, vendors communicate through Liène, and we share only the information necessary for execution.

C)  Legal and regulatory disclosures

• Courts, regulators, law enforcement, and other competent authorities when required by law or to protect rights and safety.

D)  Corporate transactions

• If Liène undergoes a merger, acquisition, reorganization, sale of assets, or similar transaction, personal data may be disclosed as part of due diligence and transferred as part of that transaction, subject to appropriate safeguards.

We do not sell personal data as a business model.

Event photography, videography, and public-facing content

Events and brand experiences may involve photography, videography, and content capture for operational documentation and marketing purposes.

Client projects: Where content is created for a client, usage rights are governed by the client agreement, project scope, and any consents obtained through the client’s channels or event notices.

Public events and attendee notice: For public-facing activations, we may implement reasonable notice methods such as signage or event communications stating that filming or photography may occur, alongside a channel for individuals to raise concerns.

If you believe you appear in content published by us and you have a legitimate objection, contact office@liene.ae with the relevant details and links, and we will assess your request in line with applicable law and our legitimate interests.

International data transfers

Some of our service providers may host or process data outside the UAE (for example, cloud hosting, analytics, email, or CRM providers). When cross-border transfers occur, we take reasonable steps to ensure appropriate protections are applied in line with applicable requirements.

Data security

We maintain administrative, technical, and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. No method of transmission over the internet and no method of storage is completely secure, and we cannot guarantee absolute security.

Data retention

We retain personal data only for as long as necessary for the purposes described in this policy, including legal, accounting, tax, and operational requirements. As a comprehensive default framework for an event and brand experience business, we apply the following retention approach unless a longer period is required by law or justified by legitimate business needs:

• Enquiries that do not become clients: up to 36 months from last
• Active client projects: for the duration of the
• Client project records (including proposals, contracts, project files, key correspondence): 6 to 8 years after project close, aligned with common business record-keeping practice.
• Invoices, payment records, and tax/accounting records: at least 5 years and longer where required by applicable regulations or audit needs.
• Guest lists and RSVP data: typically deleted or anonymized within 3 to 12 months after the event, unless needed for dispute handling, security, or legal obligations.

• Photo/video archives: retained based on project scope, client terms, and operational needs; marketing content may be retained longer if it remains relevant and lawfully

Where possible, we may anonymize data so it can no longer identify individuals, and we may keep anonymized data for analytics and business improvement.

Your rights

Subject to applicable UAE data protection laws and any lawful exemptions, you may have rights to:

• Request access to your personal
• Request correction or updating of inaccurate
• Request deletion or erasure in appropriate
• Request restriction or cessation of certain processing, including objections to direct marketing and profiling for direct marketing.

To exercise your rights, contact office@liene.ae. We may request verification information to protect your data and prevent unauthorized access.

Complaints

If you have concerns about how we handle personal data, contact us at office@liene.ae so we can address the issue.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, tools, legal requirements, or business operations. The updated version will be posted on our website with a revised “Last updated” date.