Legal

Privacy Policy

Last updated: April 27, 2026

1. Introduction

Runway Fy ("we", "our", "us"), located at The Pearl-United Arab Emirates, Tower 1, Floor 15, Dubai, United Arab Emirates, is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with United Arab Emirates's Law No. 13 of 2016 on Personal Data Protection and all applicable regulations issued by the Ministry of Transport and Communications (MOTC) and the Compliance and Data Protection Department.

2. Data Controller

Runway Fy is the data controller for the personal data collected through this website and our services. For any enquiries regarding data protection, contact us at [email protected] or call +971 50 412 7313.

3. Information We Collect

We may collect the following categories of personal data:

3.1 Information You Provide

  • Full name, email address, phone number, and postal address
  • Company name and job title
  • Event details and booking preferences
  • Portfolio materials including photographs, measurements, and professional history (for talent applicants)
  • Payment and billing information
  • Messages, feedback, and correspondence

3.2 Information Collected Automatically

  • IP address and browser type
  • Device information and operating system
  • Pages visited, time spent, and navigation patterns
  • Referring website and search terms
  • Cookies and similar tracking technologies (see our Cookie Policy)

4. How We Use Your Data

We process your personal data for the following purposes:

  • To respond to enquiries and process booking requests
  • To provide talent management and event coordination services
  • To manage talent applications and maintain our roster
  • To process payments and issue invoices
  • To communicate service updates, event information, and promotional materials (with your consent)
  • To improve our website, services, and user experience
  • To comply with legal obligations under United Arab Emiratesi law
  • To protect our legitimate business interests and enforce our terms

5. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds as outlined in United Arab Emirates's Law No. 13 of 2016:

  • Consent: Where you have given explicit consent for specific processing activities
  • Contractual necessity: Where processing is necessary to fulfil a contract or take pre-contractual steps at your request
  • Legal obligation: Where we are required to process data to comply with United Arab Emiratesi law
  • Legitimate interests: Where processing is necessary for our legitimate business purposes, provided your rights are not overridden

6. Data Sharing and Transfers

We may share your personal data with:

  • Our contracted talent, models, and freelance professionals for booking fulfilment
  • Payment processors and financial institutions for transaction processing
  • IT service providers and hosting companies for website and systems maintenance
  • Legal and regulatory authorities when required by United Arab Emiratesi law
  • Professional advisers including lawyers, accountants, and auditors

In the event of international data transfers outside United Arab Emirates, we ensure that appropriate safeguards are in place as required by United Arab Emirates's data protection legislation. We will only transfer your data to countries that provide an adequate level of protection or where contractual safeguards are in place.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy:

  • Client booking records: 7 years from the last transaction (as required by United Arab Emiratesi commercial law)
  • Talent application data: 3 years from last contact, unless you are on our active roster
  • Website analytics data: 26 months
  • Marketing consent records: Until consent is withdrawn, plus 12 months for record-keeping

8. Your Rights

Under United Arab Emirates's data protection framework, you have the following rights:

  • Right of access: Request a copy of the personal data we hold about you
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data where there is no compelling reason for its continued processing
  • Right to restrict processing: Request that we limit how we use your data
  • Right to object: Object to the processing of your personal data for direct marketing purposes
  • Right to withdraw consent: Withdraw your consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • SSL/TLS encryption for all data in transit
  • Encrypted storage for sensitive personal data
  • Access controls and authentication measures
  • Regular security assessments and staff training
  • Physical security measures at our office premises

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor without parental consent, we will delete it promptly. For minors represented by our agency, all processing is conducted with explicit parental or guardian consent.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Material changes will be communicated via email where possible.

13. Contact and Complaints

For any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, please contact:

Runway Fy — Data Protection
Al Sunbolah St, Al Sufouh, Al Sufouh 2, Dubai, UAE
Email: [email protected]
Phone: +971 50 412 7313

If you are not satisfied with our response, you may lodge a complaint with the Compliance and Data Protection Department of United Arab Emirates's Ministry of Transport and Communications.

14. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of United Arab Emirates. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of United Arab Emirates.