Last updated: 25 August 2026
Twenty Three Seven Communications DMCC (“237 Communications”, “we”, “us”) respects your privacy. This policy explains what personal data we collect through this website, why we collect it, who we share it with and what rights you have.
We are the data controller for the personal data described here. You can reach us at [email protected].
1. Data we collect
| Category | Examples | How we get it |
|---|---|---|
| Identity and contact data | Name, job title, organisation, email address, telephone number, country | You provide it when registering for an event or submitting an enquiry form |
| Registration data | Event registered for, delegate preferences, dietary or accessibility requirements, professional credentials where an event is restricted to healthcare professionals | You provide it at registration |
| Transaction data | Amount paid, currency, date, order reference, the outcome of the authorisation and the last four digits and brand of the card | Received from our payment provider after you pay |
| Technical data | IP address, browser type and version, device type, operating system, referring page | Collected automatically by our server and analytics tools |
| Usage data | Pages viewed, time on page, links clicked, navigation path | Collected automatically by analytics cookies where you consent |
| Correspondence | The content of emails, WhatsApp messages and form submissions you send us | You provide it |
We do not collect or store your full payment card details. Card data is entered directly into the secure, PCI-DSS compliant environment of our payment service provider, PayTabs, and is never transmitted to or held on our systems.
We do not knowingly collect data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
2. Why we use it
- To process your registration and payment — confirming your booking, issuing joining details and materials, and handling refunds. This is necessary to perform our contract with you.
- To run the event — producing delegate lists and badges, catering for dietary requirements, and providing accessibility support. Necessary for our contract with you, and in some cases based on your explicit consent where health-related information is involved.
- To communicate with you — answering enquiries and sending operational updates about an event you have registered for. Necessary for our contract or in our legitimate interests.
- To send marketing — news about our work and future events, but only where you have opted in. You can withdraw consent at any time.
- To improve the website — understanding which content is useful and diagnosing technical problems, based on your consent to analytics cookies.
- To prevent fraud and secure our systems — in our legitimate interests and those of our payment provider.
- To meet legal and accounting obligations — including UAE tax and commercial record-keeping requirements.
3. Who we share it with
We do not sell your personal data. We share it only with:
- PayTabs, our payment service provider, to process transactions and refunds.
- Event venues, hotels and logistics suppliers, where access lists, catering or accommodation arrangements require it — limited to the minimum data needed.
- Clients or sponsors of an event, where an event is run on their behalf and this was disclosed to you at registration. Where a delegate list is shared with a sponsor, we tell you at the point of registration and, where required, ask for your consent.
- Technology providers who host our website and provide email, analytics and CRM services under contract to us.
- Professional advisers and authorities, where we are required to disclose by law or to establish or defend legal claims.
All our suppliers are required to keep your data secure and to use it only for the purposes we specify.
4. International transfers
We operate across the UAE, Saudi Arabia, Egypt and the wider region, and some of our service providers are located outside the UAE. Where personal data is transferred abroad we take reasonable steps to ensure it remains protected to a standard consistent with this policy and with applicable UAE data protection law, including contractual safeguards with the recipient.
5. How long we keep it
- Event registration records: for the duration of the event and for up to five (5) years afterwards, to meet accounting and audit obligations.
- Transaction records: five (5) years, as required by UAE tax and commercial law.
- Marketing contact data: until you unsubscribe or ask us to delete it.
- Enquiry correspondence: up to two (2) years from the last contact.
- Analytics data: as configured in Google Analytics, typically 14 months.
6. Cookies and analytics
This website uses cookies. Strictly necessary cookies keep the site working and cannot be switched off. We also use Google Analytics to understand how visitors use the site; these analytics cookies are optional and set only where you consent.
Google Analytics collects information such as pages visited, session duration and approximate location derived from IP address, and processes it on Google’s infrastructure. You can opt out across all websites using Google’s browser add-on, and you can block or delete cookies through your browser settings — though doing so may affect how parts of this site function.
7. Security
We maintain appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including encrypted connections (HTTPS) across the site, access controls limiting who can view registration data, and the use of a PCI-DSS compliant payment provider so that card data never reaches our systems.
No transmission over the internet can be guaranteed completely secure. If a data breach occurs that is likely to affect your rights, we will notify you and the relevant authority as required by law.
8. Your rights
Subject to applicable law, you may ask us to:
- confirm what personal data we hold about you and provide a copy;
- correct data that is inaccurate or incomplete;
- delete data where we no longer have a valid reason to keep it;
- restrict or object to our processing, including for direct marketing;
- transfer your data to another provider in a structured, machine-readable format; or
- withdraw consent, where our processing relies on consent.
To exercise any of these rights, email [email protected]. We respond within thirty (30) days. There is no charge, and we may ask you to verify your identity before we act on a request.
9. Marketing preferences
Every marketing email we send includes an unsubscribe link that takes effect immediately. You can also email us to opt out. Unsubscribing from marketing does not stop operational messages about an event you have already registered for.
10. Changes to this policy
We may update this policy from time to time. Any change takes effect when published on this page, and the date at the top shows when it was last revised. Where a change is significant, we will tell you directly.
11. Contact and complaints
Twenty Three Seven Communications DMCC
Unit 412, DMCC Business Centre, Level No 5
Jewellery & Gemplex 2, Dubai, United Arab Emirates
Email: [email protected]
WhatsApp (UAE): +971 55 853 7225
If you are not satisfied with how we have handled your personal data, please contact us first so that we can put it right. You also have the right to complain to the relevant data protection authority in your jurisdiction.