Nakhla Press — Privacy Policy

Last updated: May 11, 2026

Welcome to Nakhla Press (nakhlapress.com). This Privacy Policy explains how we collect, use, disclose and retain personal data in connection with our regional news site (the “Site”). The policy is informed by principles aligned with the EU General Data Protection Regulation (GDPR) and other applicable privacy laws.

Data controller

Nakhla Press is the data controller responsible for personal data collected through the Site. Our primary contact point for privacy matters is the Site contact form at /contact/ and our privacy mailbox at [email protected]. Our registered operational location is Dubai, United Arab Emirates.

Personal data we collect

We collect only the personal data necessary to operate the Site and provide services. Categories include: - Account and registration information (name, email address, password hashes) when you create an account or subscribe. - Contact form and correspondence data (messages you send via /contact/). - Newsletter subscription data (email address and subscription preferences). - User-generated content (comments, forum posts) you choose to publish. - Usage and technical data (IP address, device and browser information, pages viewed, timestamps) via server logs and analytics tools. - Cookies and similar technologies used for session management, preferences, analytics and advertising identifiers. - Payment or billing details only when you purchase a paid product or subscription (processed by third-party payment providers; we do not store full card details).

We do not sell personal information.

Lawful basis for processing

We process personal data under one or more lawful bases including: - Consent: for non-essential cookies, direct marketing (newsletter), and optional features where you give clear consent. - Performance of a contract: to deliver paid subscriptions, process payments and provide requested services. - Legitimate interests: to operate and improve the Site, detect and prevent fraud or abuse, personalize content and perform analytics, provided these interests are balanced against your privacy rights. - Legal obligation: to comply with applicable laws, legal process or regulatory requests.

When we rely on legitimate interests, we will document and make reasonable efforts to protect your rights and privacy. Where processing relies on consent, you may withdraw consent at any time.

We use personal data to: - Provide, maintain and improve the Site and our content. - Communicate with readers, process inquiries and deliver newsletters. - Administer accounts, billing and subscriptions. - Analyze site usage and performance to improve content and user experience. - Enforce our terms, prevent abuse and comply with legal obligations.

We may share personal data with: - Service providers and processors (hosting providers, analytics platforms, content delivery networks, email and payment processors). - Third parties when required by law or to protect rights, property or safety. - Affiliates or potential buyers in the event of a business transfer, subject to privacy safeguards.

Third-party services (for example analytics or social platforms) may set their own cookies and collect data independently; their processing is governed by their privacy policies.

Cookies and similar technologies

We use cookies, local storage and similar technologies for: - Strictly necessary functions (session management, security). - Preferences and functionality (language, display settings). - Analytics and performance (to measure site use and improve content). - Advertising and personalization (for readers who see targeted content or adverts).

On first visit you will see a cookie banner explaining categories and asking for consent where required. You can manage cookie choices via the cookie settings available on the Site and by adjusting your browser settings to block or delete cookies. Note that disabling certain cookies may limit features or performance.

International transfers

Data collected on the Site may be processed or stored in jurisdictions outside the United Arab Emirates and outside the European Economic Area. When personal data is transferred internationally, we implement appropriate safeguards such as: - Standard contractual clauses approved for international transfers, - Transfers to countries with an adequacy decision where applicable, - Reliance on documented agreements and security measures with processors.

If you have concerns about a specific transfer, contact us using the /contact/ form and [email protected].

Data retention

We retain personal data only as long as necessary for the purposes described: - Contact form messages: typically retained for up to 3 years unless a different period is required. - Newsletter subscription data: retained until you unsubscribe, or until you request deletion. - Account information: retained while the account is active and for a reasonable period afterward (commonly up to 2 years of inactivity) to allow recovery and fraud prevention. - Comments and user-generated content: retained until you request removal, subject to moderation and legal obligations. - Server logs and analytics: retained in identifiable form for up to 12 months; aggregated or pseudonymised analytics may be retained longer (typically up to 25 months).

Retention periods are governed by business needs, legal obligations and legitimate interests. You can request deletion or restriction as described below.

Your rights

Depending on applicable law, you may have rights including: - Right of access: request a copy of personal data we hold about you. - Right to rectification: correct inaccurate or incomplete data. - Right to erasure: request deletion of your personal data where lawful. - Right to restriction: request restriction of processing in certain circumstances. - Right to data portability: receive a copy of certain personal data in a structured, machine-readable format. - Right to object: object to processing based on legitimate interests or direct marketing. - Right to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us via the Site contact form at /contact/ and by email to [email protected]. We will verify your identity before responding. We generally respond within one month; in complex cases we may extend by up to two further months and will inform you of any extension and the reason.

If you are in the EU/EEA, you also have the right to lodge a complaint with a supervisory authority in your member state.

Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. These measures include access controls, encryption where appropriate, and regular security assessments. No internet transmission or electronic storage is completely secure; we cannot guarantee absolute security.

Changes to this policy

We may update this Privacy Policy to reflect changes in practices, law or our services. When we do, we will revise the “Last updated” date at the top of this page. Significant changes affecting your rights will be communicated through the Site or by email where appropriate.

Contact and privacy requests

To ask questions, exercise your rights, withdraw consent, or make a privacy-related request, please use the Site contact form at /contact/ and send an email to [email protected]. Please include sufficient detail about your request and any account identifiers so we can locate relevant records. We will respond in accordance with applicable law.

Nakhla Press Dubai, United Arab Emirates

Last updated: May 11, 2026.