Privacy Policy

Date of entry into force: 01/03/2025
Last Updated: 12/01/2026

Introduction

Please read this Privacy Policy carefully before accessing or using the ArtsDAO website and any related services (the “Services”).

This Privacy Policy (the “Privacy Policy”) governs the processing of Personal Data by MAISON ARTSDAO RESTAURANT L.L.C, a company registered in accordance with the laws of the United Arab Emirates under Trade Licence No. 1541230 (“ArtsDAO”, “We”, “Us”, “Our”), in relation to individuals who apply for membership, use our website, attend the premises, participate in events, or otherwise interact with our Services (“You”, “User”, “Data Subject”).

By accessing or using the Services, You acknowledge that You have read, understood, and agreed to the Processing of Personal Data as described in this Privacy Policy. If You do not agree, You should discontinue use of the Services.

This Privacy Policy is intended to comply with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and applicable regulations.

I. Terminology

  • Controller: The entity that determines the purposes and means of Processing Personal Data.
  • Data Subject: A natural person whose Personal Data is processed.
  • Personal Data: Any data relating to an identified or identifiable natural person.
  • Processing: Any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.
  • Processor: A party that processes Personal Data on behalf of the Controller.
  • Services: The ArtsDAO website, membership application process, membership administration, communications, and related services including events, experiences, and digital experiences.
  • Stripe: Stripe or its affiliates, as payment processor for membership-related transactions.

II. Information about the Controller

Controller: MAISON ARTSDAO RESTAURANT L.L.C
Trade Licence No.: 1541230
Address: Umm Suqeim 2, Dubai, United Arab Emirates
Email: contact@artsdao.io

III. Personal Data being Processed

ArtsDAO may Process certain Personal Data to operate the Services and administer memberships. This may include:

1) Identity & Contact Data

  • Full name
  • Email address
  • Telephone number
  • Date of birth (for age eligibility verification)
  • Government-issued identification (where required for verification or compliance)

2) Membership & Usage Data

  • Membership applications and approval status
  • Membership history, renewals, and proration records
  • Guest access records
  • Event, experience, and digital-experience registrations
  • Communications with ArtsDAO

3) Payment & Transaction Data

  • Payment amounts, currency, and transaction references
  • Subscription and renewal data

ArtsDAO does not store full payment card details. Payment card processing is handled securely by Stripe.

4) Technical & Website Data

  • IP address
  • Browser and device information
  • Website usage data
  • Cookies and similar technologies

5) On-Premises & Security Data

  • CCTV recordings in common areas for security, safety, and operational purposes

IV. Sources of Personal Data Collection

ArtsDAO collects Personal Data:

  • Directly from You, when You apply for membership, make payments, contact us, attend events, or visit the premises;
  • Automatically, through website usage, cookies, and security systems;
  • From third parties, such as payment processors or service providers, where permitted by law.

V. Basis for Processing of Personal Data

ArtsDAO processes Personal Data on one or more lawful bases under UAE law, including:

  • Contractual necessity (to administer memberships and provide the Services)
  • Legal obligations (to comply with applicable laws and regulatory requirements)
  • Legitimate interests (to operate a private members’ club, ensure security, manage the community, and improve Services)
  • Consent (where required, including for certain marketing communications)

VI. Processors and Third Parties

ArtsDAO may share Personal Data with:

  • Payment processors (e.g., Stripe)
  • Technology and service providers (hosting, CRM, email, analytics)
  • Professional advisers (legal, accounting, compliance)
  • Regulatory or governmental authorities, where required by law

ArtsDAO does not sell Personal Data.

VII. Advertising and Marketing

ArtsDAO may send marketing or promotional communications only where permitted by law or with Your consent.

You may opt out at any time by using unsubscribe mechanisms or contacting contact@artsdao.io. Withdrawal of consent does not affect prior lawful Processing.

VIII. Processing Time (Retention)

ArtsDAO retains Personal Data only for as long as necessary to:

  • fulfil the purposes for which it was collected;
  • comply with legal, regulatory, and accounting requirements; and
  • resolve disputes and enforce agreements.

CCTV recordings are retained for limited periods unless required for investigation or legal purposes.

IX. Transfer of Personal Data (including Cross-Border Transfers)

Some service providers (including Stripe) may process Personal Data outside the UAE.

Where cross-border transfers occur, ArtsDAO implements appropriate safeguards consistent with UAE data protection requirements, including contractual protections and security measures.

X. Data Subject Rights

Subject to applicable UAE law, You may have the right to:

  • request access to Your Personal Data;
  • request correction of inaccurate or incomplete data;
  • request deletion where legally permissible;
  • restrict or object to certain Processing activities;
  • withdraw consent where Processing is based on consent.

XI. Data Subject Rights Enforcement

To exercise any rights, You may submit a request by contacting contact@artsdao.io.
ArtsDAO may request information to verify Your identity before responding.

XII. Protection of Personal Data (Security Measures)

ArtsDAO implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, loss, misuse, alteration, or disclosure.

Access to Personal Data is limited to authorised personnel on a need-to-know basis.

XIII. Data Breach Notification

If a personal data breach occurs that poses a risk to Your rights or privacy, ArtsDAO will:

  • take steps to contain and mitigate the breach;
  • notify the relevant UAE authority where required; and
  • notify affected individuals in accordance with applicable law.

XIV. Contact Information

For questions, requests, or complaints regarding Personal Data processing:

Email: contact@artsdao.io

You may also have the right to lodge a complaint with the UAE Data Office, subject to applicable procedures.

XV. Other Conditions

1) Updates

ArtsDAO may update this Privacy Policy from time to time. The updated version becomes effective upon publication on our website.

2) Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of the United Arab Emirates. The courts of Dubai shall have exclusive jurisdiction.

3) Severability

If any provision of this Privacy Policy is held invalid or unenforceable, the remaining provisions shall continue in full force and effect.