Privacy Policy

1. Introduction

Arabian CEO Ltd. ("Company", "we", "us", or "our") is a company registered under the Companies Act 1981 of Bermuda, with its registered address at 22 Victoria Street, Hamilton HM 12, Bermuda. We operate the website https://arabian.ceo (the "Platform") and provide Google review delivery services to businesses worldwide.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access or use our Platform or purchase our services. By using our Platform, you consent to the practices described herein.

2. Information We Collect

2.1 Information You Provide Directly

• Identity: Full name, business name, job title
• Contact: Email address, phone number, business address
• Business: Business website URL, Google Business Profile URL, business identifiers
• Payment: Billing address, card details (processed by third-party processors; we do not store full card numbers)
• Communications: Messages, inquiries, and correspondence

2.2 Information Collected Automatically

• Usage Data: IP address, browser type, pages visited, time on page, clickstream data
• Device Information: Device type, screen resolution, hardware identifiers
• Log Data: Server logs, access times, error reports

3. How We Use Your Information

Service Delivery: To process orders, fulfill review delivery, manage your account, and communicate order status.

Billing and Payments: To process payments, issue invoices, manage disputes, and comply with financial record-keeping obligations.

Customer Support: To respond to inquiries and troubleshoot issues.

Communications: To send transactional emails and, where permitted, marketing communications. You may opt out at any time by contacting [email protected].

Fraud Prevention: To detect and prevent fraudulent transactions and unauthorized activity.

Legal Compliance: To comply with applicable laws, regulations, and lawful government requests.

4. Legal Basis for Processing (EEA and UK Users)

For EEA/UK users under GDPR or UK GDPR, our legal bases are: Contractual Necessity (fulfilling your order), Legitimate Interests (fraud prevention, security, service improvement), Legal Obligation (compliance with law), and Consent (marketing communications, withdrawable at any time).

5. Sharing of Information

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share information with: service providers (payment processors, hosting, analytics); legal and regulatory authorities when required by law; professional advisors (lawyers, accountants); and business successors in a merger or acquisition.

6. Cookies

We use strictly necessary cookies (session management, security) and analytics cookies (aggregate, anonymous usage data via tools such as Google Analytics). We do not use advertising or behavioral profiling cookies. You can manage cookies through your browser settings.

7. Data Retention

We retain your personal information for the duration of your account plus three (3) years after account closure or last transaction, to comply with legal obligations, resolve disputes, and enforce agreements. Financial records may be retained longer as required by applicable law. Data is securely deleted or anonymized after the applicable retention period.

8. Data Security

We implement commercially reasonable technical and organizational measures to protect your information, including TLS/SSL encryption, access controls, and secure server environments. No method of transmission is 100% secure. If you believe your account has been compromised, contact [email protected] immediately.

9. Your Rights (EEA and UK — GDPR/UK GDPR)

EEA and UK residents have rights of access, rectification, erasure, restriction, data portability, objection to processing, rights relating to automated decision-making, and the right to withdraw consent. To exercise any right, contact [email protected]. We will respond within 30 days. You may also lodge a complaint with your local supervisory authority.

10. California Residents (CCPA/CPRA)

California residents have rights to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell or share personal information with third parties for cross-context behavioral advertising. To submit a request, contact [email protected]. We respond within 45 days (extendable by 45 days where necessary).

11. International Data Transfers

Our servers may be located outside Bermuda. For EEA/UK users, cross-border transfers rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or UK equivalent mechanisms.

12. Children's Privacy

Our Platform is not directed to individuals under 18. We do not knowingly collect information from minors. If we learn we have collected such information, we will delete it promptly. Contact [email protected] to report any such concern.

13. Third-Party Links

Our Platform may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies independently.

14. Changes to This Policy

We may update this Privacy Policy at any time. Material changes will be indicated by updating the "Last Updated" date. Your continued use of the Platform after changes constitutes acceptance.

15. Governing Law

This Privacy Policy is governed by the laws of Bermuda, without regard to conflict of law provisions.