Who We Are
BIGBANG ITS FZE (“BIGBANG”, “we” or “us”) is a Free Zone Establishment registered in the United Arab Emirates, providing information technology services since 2003. Our head office is at SRTIP, Block B-B57-196, Sharjah, and our Dubai branch at Business Bay, Metropolis Tower, Office 2102-2202. Reach us at info@its.ae or on +971 4 378 2255. BIGBANG ITS FZE is the controller of the personal data described here.
What This Policy Covers
This policy explains what personal data we collect through our website its.ae and our billing portal portal.its.ae, why, who receives it, how long we keep it and what rights you have under Federal Decree-Law No. 45 of 2021 of the United Arab Emirates on the Protection of Personal Data. Read it with our Cookie Policy and our Terms of Services, clause 10 of which incorporates it by reference. Job applications, including the curriculum vitae and the IP address they came from, are covered by our separate Candidate and Employee Privacy Notice. This version takes effect on 24 September 2026.
Information We Collect
Information you give us: your contact and billing details (name, company, e-mail and postal address, city, country, telephone number, tax registration number, billing currency, security question); your orders, invoices, quotations and tickets; the registrant details a domain registration requires; and, for the services you buy, account names and settings, name server and IP assignments, the credentials issued to you and the data needed to validate and configure SSL certificates.
Forms and newsletter: our contact, quotation, partner, domain request and consultation forms collect your name, company, telephone number, e-mail address and message, stored with the IP address, browser and page they came from. For our mailing list we hold your e-mail address, name, telephone number, language, country and city, the source, date and status of the subscription, opens and clicks, and any unsubscribe date.
Messages and automatic records: for SMS and WhatsApp, your telephone number, the message, its delivery and read status and your messaging preferences; and automatically your IP address, browser and device identification, the referring page and, in the portal, your logins, account actions and copies of the e-mails we send you.
Payment details: we do not store complete card numbers. A saved card is held by our payment processor, which returns a token; we keep that token with the card type, last four digits and expiry date. For bank transfer, cryptocurrency and cash we keep only the payment reference.
Information from other sources: Google sends us your account details if you sign in with Google; our e-mail delivery provider sends delivery, open, click, bounce and complaint records; payment processors confirm whether a payment succeeded; registrars and registries return your domains’ registration data.
Why We Use Your Information, and Our Legal Basis
We use personal data to run your account and services, register and renew domains, invoice and collect payment, answer your requests, send service messages such as renewal reminders and security notices, prevent abuse and fraud, meet accounting and tax obligations, and send newsletters and offers.
Our legal bases are: performance of our contract with you, or steps taken at your request; legal obligations, including accounting and tax rules, registry and ICANN requirements and lawful requests from authorities; our legitimate interests in securing our systems and preventing abuse, where they do not override your rights; and your consent, where we ask for it, for marketing messages — which you may withdraw at any time through the unsubscribe link, your portal preferences or info@its.ae, without affecting earlier processing.
Cookies, Analytics and Advertising Tools
What is placed on your device: our own server sets no cookie for a visitor merely browsing its.ae, and your display preference is kept in your browser’s local storage. Before you make a choice, the only cookies written are the ones the site needs to work: the record of your cookie choice itself, your language, a small record kept by our chat button and, in the portal, the session cookie that keeps you signed in. The measurement and advertising cookies — among them _ga and _ga_ followed by the property identifier, and _fbp — are written only after you accept. Our Cookie Policy lists these cookies and their lifetimes.
Third-party tools on our pages, and when they run: when you accept, its.ae loads a Google tag manager and analytics service, and both sites load an advertising pixel operated by Meta. The pixel reports your page views and certain actions — clicking a telephone, WhatsApp or e-mail link, starting a checkout, sending a quotation request and the text you type into our domain search — which Meta may use to measure our advertising and to build advertising audiences. None of these run before you accept. Separately, tools the site needs in order to work are not part of that choice and always load: the Google sign-in button, Google reCAPTCHA on our forms, Google-hosted fonts and an embedded map. Each of them receives a request from your browser, including your IP address, as the page loads.
Your choices: on your first visit a banner asks you to accept or decline measurement and advertising cookies, and nothing of that kind runs until you accept. If you decline, we also delete any such cookies already on your device. Your choice is stored for one year in a cookie named bb_consent and covers both its.ae and portal.its.ae, so you are not asked twice. You can change it at any time from the link in our Cookie Policy, and you can always block or delete cookies in your browser settings and use the tracking limits offered by your browser, your device or your account with the advertising platform.
Who We Share Your Information With
We do not sell your personal data, and we disclose it only to these recipients, each only so far as it needs it.
Payment processors: your name, billing details, e-mail address and invoice amount, to take payment, make refunds and prevent fraud; they, not we, hold the full card number.
Registrars, registries, ICANN and certificate authorities: the registrant’s details, because registration is a contract with the registry and ICANN rules require them to be collected, verified, transferred and in part published through WHOIS and RDAP; privacy protection is not applied by default, and you may ask us to enable it where supported. A certificate authority receives the domain and applicant details to validate a request, part of which appears in public transparency logs.
Messaging and e-mail providers: mobile network operators and SMS intermediaries receive your number and the content of a text message or verification code, since delivery passes through their networks; WhatsApp messages are delivered instead by the messaging platform provider and its accredited business solution provider. Our e-mail delivery provider receives the recipient’s address, the subject and content, and the delivery, open and click records.
Hosting, analytics and advertising platforms: our hosting provider operates the servers holding everything above, and the analytics and advertising platforms receive the website activity described above.
Professional advisers and authorities: auditors, accountants and lawyers bound by confidentiality, and authorities and courts where disclosure is required by law or necessary to defend a legal claim.
Where Your Information Is Stored, and International Transfers
The servers that run its.ae and portal.its.ae, and the databases behind them, are located in Germany, in the facilities of our hosting provider.
Several recipients above operate from other countries — a payment processor, a registry, a certificate authority, a network operator, our e-mail delivery provider and an analytics or advertising platform — so a limited part of your data goes outside Germany and the Emirates. We transfer only where it is necessary to perform our contract with you or take steps at your request, to conclude or perform a contract made in your interest with a third party such as a registry or certificate authority, to comply with a legal obligation, or with your consent, and never more than that purpose requires.
How Long We Keep Your Information
We keep account, invoice and payment records while your account is open and then for the periods accounting, tax and commercial rules require; domain and certificate records for the life of the registration and any period the registry or certificate authority requires; and tickets, service e-mails, form submissions, consultation requests and activity logs for as long as we need them to evidence what was agreed and protect the service. Newsletter data is kept until you unsubscribe, after which a minimal record of the withdrawal remains so that we do not contact you again.
When your account is closed we deactivate it, keep what the law requires or what we need to establish, exercise or defend a legal claim, and delete or anonymise the rest at your request. A payment method you remove in the portal is marked as deleted and no longer used, but the record — card type, last four digits and expiry date, never the full card number — stays in our database for accounting and dispute purposes.
How We Protect Your Information
Traffic to and from our website and billing portal is encrypted in transit with current versions of the TLS protocol. Signing in to the portal requires a password, and two-step verification is available there; we recommend enabling it. Full card numbers are held by our payment processor, not by us. No method of electronic storage or transmission is completely secure. If a personal data breach occurs we act without delay and notify those affected and the competent authority to the extent the law requires.
Your Rights, and How to Exercise Them
Federal Decree-Law No. 45 of 2021 gives you, over the data we hold about you: the right to be informed about the processing (Article 13); to portability of the data you gave us, where processing rests on consent or a contract (Article 14); to correction and erasure, subject to the retention obligations above (Article 15); to restriction of processing in the cases the law allows (Article 16); to stop processing, including direct marketing and statistical surveys (Article 17); and to object to decisions based on automated processing with legal or similarly significant effects (Article 18).
To exercise them, write to info@its.ae or open a ticket at https://portal.its.ae/submitticket.php. We will ask you to confirm your identity, so that we do not disclose your data to someone else, and we answer without undue delay. The first request is free; a manifestly unfounded, repetitive or excessive request may be refused or carry a reasonable fee, with reasons given.
Customers in the European Union and the United Kingdom
Where we offer services to, or monitor the behaviour of, individuals in the European Union or the United Kingdom, the General Data Protection Regulation or the UK GDPR may also apply, and those laws give rights of the same kind as those above. Requests are made and handled in the same way, and you may also complain to the data protection authority of your country of residence.
Children
Our services are intended for businesses and adults, and our Terms of Services require you to be at least eighteen years old. We do not knowingly collect children’s personal data, and if we learn that we hold it we delete it.
Changes to This Policy
We may update this policy when our services, our systems or the law change. The current version is the one published on this page, with its effective date above, and we will draw your attention to any material change before it takes effect.
How to Contact Us, and How to Complain
For any question about this policy or your personal data, write to info@its.ae, telephone +971 4 378 2255, open a ticket at https://portal.its.ae/submitticket.php, or write to BIGBANG ITS FZE at either of the addresses given above.
If you believe that we have not handled your personal data properly, please tell us first so that we can put it right. You also have the right to complain to the UAE Data Office, the federal authority responsible for personal data protection in the United Arab Emirates.