PRIVACY POLICY
PRIVACY & COOKIE POLICY
Effective Date: 13 August 2026
Last Updated: 13 August 2026
This Privacy & Cookie Policy explains how Be Vibrant FZ-LLC, a Free Zone Limited Liability Company registered and licensed in the Ras Al Khaimah Economic Zone (“RAKEZ”), United Arab Emirates, operating under the BeVibrant brand (the “Company,” “BeVibrant,” “we,” “us,” or “our”), collects, uses, discloses, transfers, retains and protects personal data in connection with https://BeVibrant.co (the “Website”).
Where BeVibrant determines why and how personal data is processed, Be Vibrant FZ-LLC is the data controller or equivalent responsible organization under applicable law.
BeVibrant may send official music, product-launch, creative-project, brand-announcement and other campaign communications from info@BeVibrant.co. This address is a campaign sender, not a customer-support channel, and support requests sent to it may not be processed or answered. For customer support, Store-order assistance, complaints, security concerns or privacy questions and requests, contact support@BeVibrant.co. These are the only public email addresses controlled directly by BeVibrant.
This Policy describes our data practices. It is not a request for blanket consent. Merely visiting the Website or reading this Policy does not constitute consent where applicable law requires a specific affirmative choice. When consent is required, we request it through an appropriate mechanism, such as the Website’s cookie controls.
1. Scope of This Policy
The Website is BeVibrant’s main brand, creative and media hub. It may display BeVibrant’s story, products, garments, accessories, designs, creative projects, YouTube videos, music, Spotify and Apple Music content, links to social-media channels, a contact and support form called “Contact Ur Boy,” and an informational “Contribution to This World” or similar transparency page.
This Policy applies to personal data that BeVibrant controls through the Website, its contact and support functions, and communications sent to the contact details published on the Website.
Products or content may be displayed or promoted on the Website, but purchases are currently completed through a separate Fourthwall-powered storefront (the “Store”). Product and purchase links may direct visitors to the Store, where product selection, checkout, payment, fulfilment, shipping, delivery of digital products and transaction-related communications occur. The Store has its own BeVibrant privacy notice and terms, and Fourthwall’s own terms and privacy policy apply according to the parties’ respective roles.
Returns, exchanges, cancellations, refunds and remedies for Store purchases are governed by the Store Terms and Returns Policy displayed for the Store, Fourthwall’s applicable terms and any mandatory rights under applicable law. This Privacy & Cookie Policy does not create, limit or replace those purchase rights or obligations.
The contributions and transparency page describes contributions or donations made by BeVibrant. It does not currently accept visitor donations or collect visitors’ payment information.
Paid videos, memberships and other restricted-content services are not currently offered through the Website. Before activating a feature that materially changes how personal data is processed, we will review and update the relevant notices and controls.
This Policy does not govern the independent privacy practices of websites, streaming services, social networks, stores or other platforms that BeVibrant does not control.
2. Personal Data We Collect
“Personal data” means information relating to an identified or identifiable natural person, or the equivalent term under applicable law. The information collected depends on how you use the Website.
2.1 Contact and support information
The “Contact Ur Boy” form currently asks for:
first name and last name;
email address;
subject;
message; and
an optional file upload, including the contents of the file and related information such as its filename and file type.
The first name, last name, email, subject and message fields are required for the form to be submitted. The file-upload field is optional.
If you contact support@BeVibrant.co, we receive your email address, the contents of your message, attachments and any other information you choose to provide. If your request concerns a Store order, you may also choose to provide an order number and relevant order details so we can understand the request and assist or direct you appropriately.
Do not submit passwords, one-time verification codes, full payment-card numbers, CVV/security codes, government identification, health information or other unnecessary sensitive information through the form or ordinary email. If sensitive information is genuinely required, we will request it through an appropriate method.
Submitting a contact or support request does not automatically subscribe you to marketing communications.
2.2 Campaign and subscription information
If BeVibrant provides a campaign or mailing-list signup and you choose to subscribe, we may collect and retain:
your email address;
your signup source, date and time;
the campaign categories or communication preferences you select;
records of consent, withdrawal and unsubscribe requests; and
delivery, bounce, open and link-interaction information where provided by the campaign service and permitted by applicable law.
BeVibrant may use info@BeVibrant.co as the visible sender address for campaigns concerning music, releases, garments, accessories, launches, creative work, contributions, events or other BeVibrant news. info@BeVibrant.co is not a support channel. Support, complaint, security, order-assistance and privacy requests must be sent to support@BeVibrant.co.
You may unsubscribe from marketing at any time by using the unsubscribe method in the message. You may also contact support@BeVibrant.co if the provided unsubscribe method does not work. We may retain a limited suppression record so that we can respect the unsubscribe request and avoid adding the address back to the same marketing list unintentionally.
2.3 Website, device and usage information
Squarespace hosts the Website and provides Website functionality, security and analytics. Depending on the live Website configuration, your cookie choices, browser or device settings and applicable law, information processed during a visit may include:
IP address;
browser type and version;
device, network and operating-system information;
language and regional settings;
approximate location inferred from an IP address;
referring page or URL;
pages viewed and the date and time of a visit;
clicks, scrolling, internal links and searches;
loading errors, performance information and security events; and
cookie identifiers, local-storage identifiers and consent preferences.
Squarespace may also process information automatically received from visitors for its own purposes, including maintaining the security and integrity of its services. Squarespace’s own privacy policy applies when it processes information independently.
2.4 Google reCAPTCHA information
The contact form includes an optional file-upload function. Squarespace requires Google reCAPTCHA for form-block file uploads and may also use it to reduce spam, fraud and automated abuse.
Google reCAPTCHA may process technical, device, interaction and security information to assess whether a submission is legitimate. Google determines certain aspects of this processing under its own terms and privacy policy.
2.5 Embedded-media information
The Website may display or link to content from Google/YouTube, Spotify and Apple/Apple Music. When embedded content loads or you interact with it, the relevant provider may receive information such as:
your IP address;
browser, device and operating-system information;
cookies or similar identifiers;
the Website page containing the media;
referring-page information; and
viewing, playback or interaction information.
If you are signed in to the relevant provider, it may associate the interaction with your account according to its own privacy practices. BeVibrant does not receive your Google, YouTube, Spotify or Apple password merely because their content is embedded or linked.
2.6 Store and order information
BeVibrant does not currently ask visitors to enter payment-card information on the Website. Purchases of garments, accessories, music or other physical or digital products are completed through the separate Store.
Fourthwall and its payment, fraud-prevention, fulfilment, shipping and other partners may collect the information required to process an order. BeVibrant may receive or access limited customer, order or support information through Fourthwall where necessary to operate the Store or assist customers. That processing is addressed in the separate Store privacy notice.
If you voluntarily provide an order number or order details through the Website’s contact form or support email, we use that information to respond to your request.
2.7 Sensitive personal data
The Website is not designed to collect special-category, highly sensitive or confidential personal data. Please do not provide such information unless it is genuinely necessary and an appropriate secure process has been provided.
3. How We Collect Personal Data
We collect personal data:
directly from you when you submit the contact form, upload a file or email us;
directly from you when you choose to subscribe to a BeVibrant campaign or mailing list;
automatically through Squarespace and technologies used to operate, secure and measure the Website, subject to applicable consent requirements;
through Google reCAPTCHA when it protects the form;
through embedded-media providers when their content loads or is used; and
from service providers where reasonably necessary to respond to a request, protect the Website, comply with law or resolve a support matter.
4. How and Why We Use Personal Data
We may use personal data to:
operate, maintain and display the Website and its content;
provide requested Website features and remember privacy preferences;
receive, investigate and respond to contact or support requests;
assist with or appropriately direct Store-related support matters;
send BeVibrant campaigns that you requested, or that we are otherwise legally permitted to send, and administer campaign preferences and unsubscribes;
protect the Website, BeVibrant and visitors from spam, fraud, malicious activity, security threats and misuse;
diagnose technical problems and maintain Website performance;
understand Website traffic and improve content and usability, using consent where required;
comply with applicable legal, accounting, regulatory and law-enforcement requirements;
establish, exercise or defend legal claims; and
carry out another compatible purpose disclosed when information is collected or authorized by valid consent where consent is required.
We seek to use only the personal data reasonably necessary for the relevant purpose. We do not currently use personal data controlled through the Website to make solely automated decisions that produce legal or similarly significant effects on visitors.
5. Legal Grounds for Processing
The legal ground depends on the processing activity and the law that applies.
Where the UAE Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data (“UAE PDPL”) applies, we obtain consent where consent is required. We process personal data without consent only where, and to the extent, a specific statutory exception or another permission under applicable law applies, subject to the conditions of that exception or permission. Depending on the activity, this may include processing necessary to comply with applicable legal obligations, protect data and information systems, or establish, exercise or defend legal claims.
Where the EU GDPR or UK GDPR applies, our legal bases may include:
Consent, including for non-essential cookies, similar technologies and electronic marketing where consent is required;
Contract or steps requested before a contract, where processing is necessary to provide something you request or handle a contractual matter;
Legal obligation, where processing is necessary to comply with a law that applies to us; and
Legitimate interests, where recognized by applicable law and not overridden by your rights and interests, including Website administration, security, abuse prevention, responding to non-contractual inquiries and establishing or defending legal claims.
We do not treat passive use of the Website as consent to every processing activity. Where processing is based on consent, you may withdraw that consent as provided by applicable law. Withdrawal operates going forward and does not affect the lawfulness of processing performed before withdrawal.
Where another jurisdiction applies, we use the legal ground required or permitted by that jurisdiction.
6. Contact-Form Storage and Communications
Because the contact form includes a required email field, Squarespace stores the submitter and submission details in the Website’s Contacts / Form Submitters area under Squarespace’s current documented functionality.
The form is also connected to support@BeVibrant.co, a business inbox hosted through Google Workspace. Form submissions and subsequent support communications may therefore be transmitted to and stored in Squarespace and Google Workspace systems.
Optional uploaded files are processed through Squarespace and made available with the relevant submission. Information included in form-notification emails and related correspondence may also be processed through Google Workspace.
Google reCAPTCHA protects the form against spam and automated abuse and supports the optional file-upload feature.
The contact form is used for inquiries and support. It does not add a person to a campaign or marketing audience merely because they submit the form. Any BeVibrant campaign or mailing-list signup will use a separate, clearly identified choice and the consent, confirmation and unsubscribe controls required by applicable law.
7. Cookies and Similar Technologies
Cookies and similar technologies, including local storage, help operate the Website, protect it from abuse, remember visitor choices, measure performance and enable embedded services.
7.1 Types of technologies used
Strictly necessary technologies support essential Website functions, security, spam prevention and privacy preferences. Where applicable law permits, these may operate without optional-cookie consent because they are required for the requested function.
Analytics and performance technologies help measure Website traffic, distinguish visitors or sessions and populate analytics reports. Where consent is legally required, these technologies are used only after the required choice is obtained.
Embedded and third-party technologies may be used by YouTube/Google, Spotify, Apple and other embedded services. Their behavior may depend on the visitor’s location, cookie choice, account sign-in status, device settings and how the content is configured.
7.2 Squarespace analytics and preference cookies
Depending on the live Website configuration and the visitor’s choices, Squarespace cookies may include:
ss_cid — identifies unique visitors and tracks sessions; documented duration: two years;
ss_cpvisit — identifies unique visitors and tracks sessions; documented duration: two years;
ss_cvisit — identifies unique visitors and tracks sessions; documented duration: 30 minutes;
ss_cvr — identifies unique visitors and tracks sessions; documented duration: two years;
ss_cvt — identifies unique visitors and tracks sessions; documented duration: 30 minutes;
ss_performancecookiesAllowed — remembers a visitor’s performance and analytics cookie choice when cookie restriction is enabled; documented duration: 30 days; and
ss_marketingcookiesAllowed — remembers a visitor’s marketing-cookie choice when cookie restriction is enabled; documented duration: 30 days.
Squarespace may use other necessary cookies or local-storage items depending on the Website features enabled. Squarespace’s current cookie information is available at:
https://support.squarespace.com/hc/en-us/articles/360001264507-The-cookies-Squarespace-uses
7.3 Third-party services
The Website currently uses or may load services from:
Squarespace for Website hosting, functionality, forms, security and analytics: https://www.squarespace.com/privacy
Google/YouTube for embedded or linked video and music content: https://policies.google.com/privacy
Google reCAPTCHA for form security and the optional file-upload feature: https://policies.google.com/privacy
Google Workspace for business email and support communications: https://policies.google.com/privacy
Spotify for embedded or linked music and audio content: https://www.spotify.com/legal/privacy-policy/
Apple/Apple Music for embedded or linked music and media content: https://www.apple.com/legal/privacy/
Fourthwall for the separate Store and order-related services: https://fourthwall.com/privacy-policy
Squarespace’s cookie controls may interact with certain integrations, including YouTube/Google, but may not automatically block every third-party integration or custom technology. Where legally required, we use available consent controls appropriate to the technology involved.
7.4 Your cookie choices
Where the Website displays cookie controls, visitors can accept or decline non-essential cookies and use the Manage Cookies control to change their preferences. Visitors can also block or delete cookies through browser or device settings. Blocking necessary technologies may prevent parts of the Website from operating correctly.
Withdrawing cookie consent affects future optional-cookie use. It does not automatically erase information processed lawfully before withdrawal. You may contact us to exercise an applicable right concerning information already held.
7.5 Services not currently active
As of the Last Updated date, the Website does not currently use Google Analytics 4, Meta Pixel, TikTok Pixel, Mailchimp, Zapier or custom advertising or tracking code. Planning or considering a service does not mean that the service currently receives visitor data.
Before activating a new analytics, advertising, marketing or automation service, BeVibrant will review the data flow, update this Policy and cookie disclosures where necessary, and implement any consent or opt-out controls required by applicable law.
8. When and With Whom We Disclose Personal Data
We disclose or make personal data available only where reasonably necessary for the purposes described in this Policy and subject to applicable law. Recipients may include:
Squarespace, which hosts the Website and provides forms, Contacts storage, security, analytics and related functionality;
Google Workspace, which hosts BeVibrant’s business inboxes used for campaign sending and support communications;
Google reCAPTCHA, which helps protect the form from automated abuse;
YouTube/Google, Spotify and Apple, which provide embedded or linked media;
Fourthwall, where information is relevant to a Store order or support matter;
professional advisers, insurers, auditors and service providers where reasonably necessary and subject to suitable protections;
courts, regulators, law-enforcement bodies or other authorities where disclosure is legally required or permitted; and
appropriate advisers and counterparties if the business or relevant assets are reorganized, financed, sold, transferred or acquired, subject to applicable law and suitable confidentiality protections.
Some providers may act as processors or service providers for information processed on BeVibrant’s instructions and as independent controllers for processing undertaken for their own purposes. Their own privacy notices apply when they process information independently.
Under the practices described in this Policy, BeVibrant does not sell or rent personal data to data brokers and has not activated advertising pixels on the Website for cross-context behavioral advertising or targeted advertising. Embedded-media providers may independently process information for their own purposes under their own privacy policies.
9. Store, External Services and No Corporate Affiliation
When you follow a product link to the Store, you leave the Squarespace Website and enter a separate service. Fourthwall processes checkout, payment and other Store information according to the Store privacy notice, Fourthwall’s privacy policy and the applicable Store and Fourthwall terms.
The Website may also link to or embed content from social networks, streaming platforms, music services, retailers, charities and other third-party services. When you follow an external link, the destination service may receive referring-page information and other information normally transmitted by your browser. BeVibrant does not control that service’s independent processing.
Squarespace, Fourthwall, Google, YouTube, Spotify, Apple and other named third parties are independent organizations. BeVibrant uses or links to their services but is not their parent, subsidiary, agent, employee, joint venturer or corporate affiliate. A reference, link or embed does not by itself mean that either party sponsors, endorses or guarantees the other, except where a relationship is expressly stated.
Third-party services may change their features, terms, privacy notices and data practices independently. Their current notices govern processing for which they are responsible. BeVibrant is not able to control those independent changes, but we will update this Policy where a change materially affects how BeVibrant processes personal data through the Website.
Review the relevant third party’s privacy notice before providing personal data to it.
10. International Data Transfers
BeVibrant is based in the United Arab Emirates, while Squarespace, Google, embedded-media providers and other service providers operate internationally. Personal data may therefore be processed outside your country of residence, including in countries whose privacy laws differ from those in your jurisdiction.
Where BeVibrant is responsible for a restricted international transfer, we use a transfer route permitted by applicable law and take the steps required for that route. Depending on the law and circumstances, this may involve an adequacy mechanism, contractual safeguards, valid consent where legally appropriate, necessity for a permitted purpose or another statutory transfer mechanism.
Different providers may rely on different transfer mechanisms. We do not claim that every international transfer connected with the Website is covered by the EU Standard Contractual Clauses.
Where applicable, you may request information about safeguards used for a particular transfer by emailing support@BeVibrant.co.
11. Data Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, subject to legal, security, dispute-resolution and recordkeeping requirements.
Retention is determined using factors including:
how long information is needed to answer and close an inquiry or support request;
the nature and sensitivity of the information;
whether a complaint, security matter, fraud concern or legal claim remains open;
whether applicable law requires or permits a longer retention period;
whether a limited consent, withdrawal or suppression record is needed to administer campaign preferences and honor an unsubscribe request;
whether a limited record is needed to demonstrate compliance; and
the retention settings and documented lifecycles of the providers used for the processing.
Cookie durations for the identified Squarespace cookies appear in Section 7. Providers may retain information they control independently according to their own policies.
When personal data controlled by BeVibrant is no longer required, we take reasonable steps to delete it, anonymize it or remove it from active use, subject to lawful backup, security and recordkeeping limitations.
12. Security and Anti-Scam Protection
We use reasonable administrative, technical and organizational safeguards appropriate to the nature of the personal data and the risks involved. These may include access restrictions, account-security controls, reputable hosted providers and review of suspected misuse or security incidents.
No website, email system, internet transmission or storage service can be guaranteed to be completely secure. Nothing in this Policy promises that a security incident can never occur.
For your protection:
do not submit passwords, verification codes, full payment-card details, government identification or unnecessary sensitive information through the contact form or ordinary email;
info@BeVibrant.co is BeVibrant’s official sender for music, product-launch, creative-project, brand-announcement and other campaign communications; it is not a customer-support channel;
support@BeVibrant.co is BeVibrant’s official and only direct address for customer support, Store-order assistance, complaints, security concerns and privacy matters; and
these are the only public email addresses controlled directly by BeVibrant.
Store customers may also receive legitimate order confirmations, receipts, customer-service messages, payment notices, fulfilment updates, shipping notices or tracking messages from Fourthwall, the Store-specific support channel displayed on the Store or in the customer’s order, and authorized payment, fulfilment or delivery providers involved in that order. Those providers operate their own systems and may change their sender addresses. Verify an unexpected message through https://BeVibrant.co, the Store, the order-status page or the relevant provider’s official website instead of relying only on the sender’s display name or links in the message.
A message from any other address claiming to be a direct BeVibrant-controlled email address should be treated as unverified unless its authenticity is confirmed through support@BeVibrant.co. BeVibrant does not authorize anyone to request your password, one-time verification code, full payment-card number, CVV/security code, remote access to your device, or payment by gift card or cryptocurrency through an unsolicited email, text message or social-media direct message.
To the fullest extent permitted by applicable law, BeVibrant is not responsible for acts or losses caused solely by an unaffiliated impersonator, phishing sender or scammer whom BeVibrant did not authorize, direct or control. This does not exclude or limit any liability that cannot lawfully be excluded, any mandatory consumer or privacy right, or responsibility for BeVibrant’s own acts or omissions.
If you receive a suspicious message, do not reply, open attachments, follow its links or provide information or payment. Preserve the message if safe to do so and report it to support@BeVibrant.co. If you believe account or payment information has already been exposed, promptly contact the relevant platform, payment provider or card issuer using independently verified contact details.
If we become aware of a personal-data breach involving information for which BeVibrant is responsible, we will investigate and notify affected individuals and/or competent authorities where required by applicable law.
13. Children and Young People
The Website is a general-audience fashion, brand, music and creative-media Website. It is not designed to solicit personal data from children through its contact or support functions.
We do not knowingly ask a child under 13 to independently submit personal data through the Website. A person under 13 should not submit the contact form or email personal data to us unless a parent, legal guardian or other legally authorized person is involved and the processing is permitted by applicable law. Other minors should use the Website and its contact functions with parent or legal-guardian involvement where required by applicable law.
Where the UAE Federal Decree-Law No. 26 of 2025 Regarding Child Digital Safety or another child-privacy or digital-safety law applies, BeVibrant will apply the age-assurance, age-verification, caregiver involvement, privacy and protective measures required for the Website and its applicable classification.
If we learn that a child’s personal data has been processed in a manner not permitted by applicable law, we will take reasonable legally required steps, which may include restricting processing or deleting the information. A parent, guardian or caregiver may contact support@BeVibrant.co regarding a child’s privacy.
14. Your Privacy Rights
Your rights depend on the law applicable to you and the particular processing. Subject to applicable conditions, exceptions and verification requirements, you may have the right to:
receive information about how your personal data is processed;
request access to personal data concerning you;
request correction of inaccurate or incomplete personal data;
request deletion or erasure where the legal conditions are met;
request restriction or cessation of certain processing;
object to certain processing where a right to object applies;
obtain or transfer certain personal data in a portable format where applicable;
withdraw consent where processing is based on consent, without affecting processing performed lawfully before withdrawal;
object to certain solely automated processing or request human involvement where applicable;
appeal a decision concerning a privacy request where applicable;
receive no discriminatory treatment for exercising a privacy right where applicable; and
lodge a complaint with a competent data-protection authority or regulator.
These rights are not absolute. BeVibrant may be required or permitted to retain information needed to comply with law, protect another person’s rights, maintain security records, or establish, exercise or defend legal claims.
To exercise a right, email support@BeVibrant.co. Using the subject “Privacy Request” may help us route the request, but a specific subject line is not a legal requirement.
Describe the right you wish to exercise and provide enough information for us to understand the request. We may request information reasonably necessary to verify your identity and prevent unauthorized disclosure. We will not intentionally request more verification information than reasonably necessary.
We will respond within the period required by the law applicable to the request. We may extend, limit or refuse a request only where applicable law permits and will provide any explanation or notice required by law.
For personal data controlled independently by Squarespace, Google, YouTube, Spotify, Apple, Fourthwall or another provider, you may need to exercise your rights directly with that provider. BeVibrant will provide reasonable assistance for requests concerning personal data for which it is responsible.
15. Changes to This Policy and Future Features
We may update this Policy when the Website, BeVibrant’s practices, service providers or legal obligations change. The “Last Updated” date identifies the current version.
Where legally required, we will provide additional notice of a material change and obtain consent before applying a materially new use of personal data where new consent is required.
Before launching direct Website sales, paid videos, memberships, customer accounts, newsletters, visitor donations, Google Analytics, advertising pixels, automation services, custom tracking code or another feature that materially changes our data practices, BeVibrant will review and update the relevant privacy disclosures and controls.
16. Contact and Complaints
For privacy questions, requests or concerns, contact:
Be Vibrant FZ-LLC
Operating as: BeVibrant
Licensed in: Ras Al Khaimah Economic Zone (RAKEZ), United Arab Emirates
Website: https://BeVibrant.co
Campaign sender only—not customer support: info@BeVibrant.co
Customer support, Store-order assistance, complaints, security and privacy: support@BeVibrant.co
Suggested subject: Privacy Request
We may verify identity where reasonably necessary to protect personal data, but we do not disregard a legitimate request merely because it does not use a particular subject line or format.
Depending on your location and the law that applies, you may have the right to complain to the competent UAE data-protection authority or another competent supervisory authority in your jurisdiction.