Last updated: 8 September 2026
This policy explains what personal data NBT 360 FZE (“NBT360”, “we”, “us”) collects when you use nbt360.com or work with us, why we collect it, and the choices you have. We keep it short and specific to what we actually do.
NBT 360 FZE is a Shopify design and development agency registered in Sharjah Publishing City Free Zone, United Arab Emirates. We are the data controller for the personal data described here. You can reach us at info@nbt360.com.
Information you give us. When you request a quote or contact us, we collect what you enter: your name, email address, phone or WhatsApp number, your store URL, the service you are interested in, an optional budget range and your message.
Information collected automatically. We use Google Analytics 4 to understand how the site is used. It records pages viewed, approximate location (country or city), device and browser type, referring site and how long you stay. Google Analytics uses cookies and may assign a pseudonymous identifier. It does not tell us who you are.
Information from working together. If you become a client, we hold the details needed to deliver the project: your contact details, your business and store information, access credentials you choose to share (for example staff accounts on your Shopify store), project communications and invoices.
We do not collect payment card details on this website. We do not knowingly collect data from anyone under 18.
nbt360.com sets only the cookies needed to run the site and the Google Analytics cookies described above. We do not run advertising or retargeting pixels. You can block or delete cookies in your browser settings; the site will keep working. If you are visiting from the EU or UK, analytics cookies are set only after you accept them in the cookie notice.
We do not sell personal data. We share it only with providers we need to run the business, each bound by their own data-protection terms:
Some of these providers process data outside the UAE, including in the United States and the European Union. Where required, transfers rely on the provider’s standard contractual protections.
Enquiries we do not take forward are deleted within 24 months. Client records are kept for the length of the engagement and then for as long as UAE tax and commercial law requires (currently five years for accounting records). Analytics data is retained by Google Analytics for 14 months.
Under the UAE Personal Data Protection Law and, where it applies to you, the EU/UK GDPR, you can ask us to access, correct, delete or export the personal data we hold about you, to restrict or object to certain processing, and to withdraw consent where processing is based on it. Email info@nbt360.com and we will respond within 30 days. You also have the right to complain to your local data-protection authority.
We limit access to personal data to the people who need it, use two-factor authentication on the accounts that hold it, and remove store access credentials when a project ends. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take it seriously.
If we change this policy in a way that affects you, we will update the date at the top and, for material changes, tell existing clients by email.
NBT 360 FZE, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates · info@nbt360.com