Business Outreach Privacy Notice

Boost My Business AI Innovation Limited · DIFC Licence CL11954 · Effective 3 September 2026

1. Who we are

Boost My Business AI Innovation Limited is the controller of the personal data described in this notice. We are a company registered in the Dubai International Financial Centre (DIFC) under trade licence CL11954, at Office IH-00-01-03-OF-05, Floor 3, DIFC Innovation Hub, Dubai, United Arab Emirates.

You can reach us in either of these ways, and you may use whichever you prefer:

• by email at contact@boostmylocalbusiness.ai;
• by telephone on +971 52 714 8075.

You can also write to us at the DIFC address above, or simply reply to any email you have received from us. We have not appointed a Data Protection Officer; at our size the DIFC Data Protection Law does not require one.

2. The brands this notice covers

We contact businesses under two trading brands. Both are the same company. There is one controller, one set of records and one set of rights, whichever brand wrote to you.

If you received an email signed Get More Restaurant Customers, this is the right notice, and Boost My Business AI Innovation Limited is the company responsible for it. That company name and licence number appear in the signature of every message we send under either brand.

3. What this notice covers, and what it does not

This notice covers only the outreach activity described here: business contact details that we obtained from public sources and used to send a business a small number of emails. It does not cover the information you send us if you fill in a form on one of our websites, become a customer, or apply for a job. Our general website privacy policy at boostmylocalbusiness.ai/privacy-policy covers that. Where the two differ about outreach, this notice is the one that applies to outreach.

4. The information we hold

For a business we have not dealt with before, we hold business contact details and public business information only:

• the business name, its website address and its trading location;
• a business email address, and in some cases a business telephone number;
• where a public listing names one, a person's name and business role;
• public facts about the business's own website and public listing, for example whether the site uses a secure connection, how quickly it loads, and its public review count;
• the sector we have recorded the business in, and our own record of the messages we have sent and any reply we have received.

We do not seek out or knowingly hold special categories of personal data for this purpose, and we do not hold payment details, identity documents or private contact details.

5. Where we got it

We did not get it from you. We obtained it from sources that are open to the public:

• the business's own website;
• the business's public Google Maps and Google Business Profile listing;
• other public business directories and public company information.

This is why this notice exists. Under Article 30 of the DIFC Data Protection Law, when personal data is not obtained from the person it relates to, the controller must say where it came from and set out the rights that follow. That is what this page does.

6. Why we use it, and our lawful basis

We use it to offer a service to your business: to identify businesses whose public online presence suggests our service may be relevant, to send a small number of company-specific emails, to answer any reply, to keep a suppression record when someone asks us not to write again, and to keep an audit trail of what we sent and when.

Our lawful basis is legitimate interest under Article 10(1)(f) of the DIFC Data Protection Law. The interest is our own business development. We have weighed it against the rights and reasonable expectations of the people concerned, and the outreach is limited accordingly: we write to a business at a business contact point it has published for the purpose of being contacted, we contact one address per business, we say in the first message where the details came from and how to stop, and we stop immediately when asked.

We do not rely on your consent for this outreach, and we do not claim that you gave it.

7. Direct marketing, and your right to object

You have the right to object to this direct marketing at any time, and you do not have to give a reason. The quickest way is to reply to any email from us with the word STOP. You can also email contact@boostmylocalbusiness.ai or telephone +971 52 714 8075.

When you object we stop sending, across both brands, not only the one that wrote to you. To make that stick we keep a minimal suppression record of the address and, where appropriate, the business domain. That record exists so we never contact you again; it is not used to market to you, and asking us to delete it would remove the very thing that keeps you off our list.

8. Who else processes it

We keep the number of parties involved small. Categories of service provider that may process this information on our instructions are:

• cloud hosting and database services;
• outbound email delivery and mailbox services;
• business contact-data research, quality and verification services;
• language-model services used to help draft message text;
• security, logging and technical support services.

They act as processors on our instructions and under terms that require them to protect the information and use it only for the agreed service. We do not sell, rent or trade this information, and we do not share it for anyone else's marketing.

9. Processing and transfers outside the DIFC

Some of this processing happens outside the DIFC and outside the United Arab Emirates. Our primary database is hosted in India, parts of our hosting are in the European Union, and some service providers process information in the United States. Where a transfer out of the DIFC requires it, we rely on the grounds permitted by Articles 26 to 28 of the DIFC Data Protection Law, including contractual safeguards with the provider.

10. How long we keep it

We apply the following retention periods, measured from the last real event rather than the last time a record happened to be touched:

A scheduled daily process applies these periods. If you ask us to delete your details sooner, we will, subject only to keeping the minimal suppression record described in section 7.

11. Automated decisions

We use software to shortlist businesses and to help draft message text. It does not make a decision that produces legal effects for anyone or similarly significantly affects anyone, and no message is sent without a person approving it first.

12. Your rights, including the right to complain

Under the DIFC Data Protection Law you have the right to:

• access the personal data we hold about you and obtain a copy of it;
• have it corrected if it is inaccurate or incomplete;
• have it deleted;
• restrict how we use it, and where it applies, receive it in a portable form;
• object to our use of it on the basis of legitimate interests, and to object at any time to direct marketing.

To exercise any of these, reply to any message from us, email contact@boostmylocalbusiness.ai, or telephone +971 52 714 8075. We do not charge for this and we will answer within the time the law allows.

13. Tracking on this page

This page loads no analytics, no advertising tags, no chat widget and no third-party files at all, so reading it tells us nothing about you. Other pages on boostmylocalbusiness.ai do load Google Tag Manager and are covered by our general privacy policy.

14. Changes and contact

We will update this notice when our processing, our providers or our legal obligations change, and the effective date at the top of the page will change with it. For anything to do with this notice, contact contact@boostmylocalbusiness.ai or +971 52 714 8075.