Privacy.

Who we are

NBK Media FZ-LLC, Dubai, United Arab Emirates, operating as NBK Social from Dubai and Manchester. For anything about your data: contact@nbksocial.com.

What we collect, and when

Enquiry and contact forms. Name, email and whatever you write. Submissions are relayed by Web3Forms straight to our inbox; we use them to reply to you and for our business records.

Booking a call. Handled on Google's appointment page; Google processes what you enter there under its own terms.

Buying an Account Review. Payment is processed by Stripe; we never see or store your card details. We receive your name, email, billing country and order details from Stripe. Your intake answers (the profile link and the context you give us) reach our inbox and are used solely to deliver the review. Order references and buyer emails also appear in our private internal alerts channel so the founders see new orders immediately.

The newsletter. The sign-up form on our newsletter page is served by Beehiiv, which runs the list. Your email goes to Beehiiv, not to this site; Beehiiv may set its own cookies inside that form and sends a confirmation email before you are added. Every issue carries a one-click unsubscribe.

Analytics. Vercel Web Analytics, which is cookieless and aggregate. It tells us which pages are read and which buttons are clicked; it does not identify you, and we keep names, emails and intake content out of it.

The ViralCash waitlist

ViralCash is an app we are building for people who work in social media. Joining its waitlist is the one place on this site where we ask you about yourself, so it gets its own section. This notice is version waitlist-privacy-2026-09-v1, and the form records which version you agreed to.

What we ask for. Your name, email, country and an age band, then one question: whether you work in social media. If you do, we ask your role, who you work for, how long you have been doing it, the size of the largest account you personally manage, and optionally the platforms you work on. If you do not, we ask the closest description of what you do instead and whether you would like to work in social media one day. You are only ever asked one of those two sets, and only the one you answered is stored. We deliberately ask for an age band rather than your date of birth. It is worth the same to us and much less damaging to you if we are ever breached. We do not ask for your phone number, your address, a CV or a social login.

Why. Two things: to work out which tasks suit you, and to answer a brand's question in the aggregate. What a brand receives is crosstabs and a written report, for example how one thumbnail performed against another among 25 to 34 year olds in the United Kingdom. Any group of fewer than three people is suppressed, so nobody can be picked out of a thin slice. No individual answers, no names and no email addresses leave ViralCash. We hold a row-level export internally to produce those reports; it is not shared with clients. We do not sell or rent the list. If that ever changes, this notice changes first and we ask you again: consent given under this version does not carry over to a use it did not describe.

The lawful basis is your consent, given by the unticked box on the form, separately from confirming you are 18 or older. Your sign-up only counts once you click the link we email you. Until then we hold an unconfirmed record and delete it if it is never confirmed.

Leaving. Write to contact@nbksocial.com and we will delete your details outright, not merely stop the emails. If someone referred you, we record the code they shared so we can pay them, never who they are to you.

Who handles it. This website passes your answers to ViralCash, which is run by the same company and holds the waitlist itself; the list is stored in Supabase and the confirmation email is sent by Resend. Cloudflare Turnstile checks the form is being filled in by a person. To limit abuse, a one-way hash of your IP address is stored, never the address itself.

Who processes it for us

Vercel (hosting and analytics), Web3Forms (form relay), Stripe (payments), Google (booking and email), Beehiiv (the newsletter list and its sign-up form), ViralCash and its own processors Supabase and Resend (the waitlist and its confirmation email), Cloudflare (the waitlist form's bot check), Discord (internal order alerts, private staff channel), and the service hosting your delivered report and walkthrough links. Each processes data under its own security terms; none of them get more than their job requires.

What we never do

We do not run advertising trackers, set marketing cookies, or ask for platform passwords. Ever. We do not sell or rent your personal data either; if that ever changes, this notice changes first and we ask you again.

Keeping and deleting

Correspondence, enquiries and intake answers are kept as ordinary business records for as long as we plausibly need them (for example while you are a client or an open enquiry, and for our legal and accounting obligations). Payment records are retained by Stripe under its rules.

Your rights

Ask us any time what we hold about you, ask us to correct it, or ask us to delete it, at contact@nbksocial.com. We answer quickly and without drama. If you are in the UK or EU you may also have rights to complain to your local data authority.