Last updated: 15 October 2026
This Privacy Policy explains how Zain Media (“Zain Media”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal information when you visit our website, contact us, request a consultation, become a client, use our services, or use ZSOS™ and related client-portal or Google-connected functionality.
It should be read together with our Terms of Service, Cookie Policy and Data & Account Requests page.
1. Who we are
Zain Media is a digital marketing agency based in Kuwait.
Our services may include SEO, GEO and AIO through ZSOS™, paid advertising, social media management, creative content production, photography and video, web design and development, branding, marketing strategy, CRM and automation, WhatsApp and omnichannel solutions, and other agreed digital-marketing services.
2. Scope of this Policy
This Policy applies to information processed through:
- the Zain Media website;
- contact and consultation forms;
- phone, WhatsApp and email communications;
- client engagements;
- ZSOS™ and the Client Portal;
- integrations you choose to connect;
- analytics and website technology;
- systems used to administer Zain Media services.
Client agreements may contain additional privacy, confidentiality or security provisions.
3. Information you provide
Depending on how you interact with us, we may collect:
- name;
- business email;
- phone or WhatsApp number;
- company/brand name;
- job role;
- service interest;
- messages and enquiries;
- consultation information;
- optional marketing-budget range;
- project and contractual information;
- billing/administrative information;
- client files and materials;
- account/profile information;
- support requests and communications.
Please do not send sensitive personal information unless it is necessary for the service and Zain Media has requested or agreed to receive it.
4. Client and service data
Clients may provide or authorise access to information required to perform the agreed services, including:
- website data;
- analytics/conversion information;
- advertising accounts;
- social accounts;
- campaign data;
- search-performance data;
- creative/content materials;
- products/services information;
- business information;
- customer/lead information where legitimately required;
- permissions and account access.
We use this information for the agreed services, administration, reporting, security and related legitimate purposes.
5. ZSOS™ Client Portal
ZSOS™ is Zain Media’s managed search operating system for SEO, GEO and AIO. It is part of Zain Media’s services and not a separate legal entity.
If you use the Client Portal, we may process:
- name and business email;
- company information;
- account/profile information;
- authentication/session/security information;
- login/security logs;
- service/project information;
- reports and measurements;
- information from integrations you choose to connect;
- support/account communications.
Where self-service deletion or disconnection functions are unavailable, requests may be submitted to Zain Media through the process described in Data & Account Requests.
6. Information collected automatically
We may receive or generate:
- IP address;
- browser/device/operating-system information;
- date and time;
- pages/features accessed;
- referral/source information;
- site interactions;
- server/security logs;
- approximate location derived from IP;
- cookie and consent-preference information.
7. How we use information
We may use information to:
- respond to enquiries;
- prepare proposals;
- administer client relationships;
- provide agreed services;
- operate and secure our website and systems;
- provide ZSOS™ and reports;
- communicate about projects and approvals;
- manage accounts/access;
- measure website performance where permitted;
- prevent fraud, spam and security abuse;
- maintain contractual, financial and business records;
- enforce agreements;
- comply with legal obligations;
- improve our operations.
We do not sell personal information.
8. Grounds for processing
Depending on the situation and applicable law, processing may be based on:
- your request for information/services;
- performance or preparation of a contract;
- consent;
- legitimate operational/security purposes where permitted;
- legal, accounting, regulatory or contractual obligations.
Where processing depends on consent, that consent can be withdrawn.
9. Website analytics
Zain Media uses Google Analytics 4 to understand website usage and performance.
Under Zain Media’s consent approach, non-essential Analytics measurement is disabled until the visitor gives the relevant consent.
Analytics may include:
- page views;
- session/device data;
- traffic source/referral;
- approximate location;
- website interactions;
- conversion events such as consultation submissions or contact-link clicks.
Zain Media does not intentionally send a visitor’s name, email address, phone number or free-text enquiry message to Google Analytics.
10. Cookies and similar technologies
The website may use:
- Strictly Necessary technologies;
- Functional / Embedded Content;
- Analytics technologies.
If Zain Media introduces advertising/conversion-measurement technologies in the future, the Cookie Policy and consent configuration will be updated before they are enabled where consent is required.
Non-essential technologies are controlled through the website’s consent choices.
See our Cookie Policy and Cookie Settings for more information.
11. Third-party services
Depending on how you interact with us, service providers may include:
- website hosting/infrastructure;
- WordPress and plugins;
- email/communication systems;
- Google;
- Meta/WhatsApp;
- advertising/social platforms used for client services;
- reporting/analytics tools;
- security/caching infrastructure;
- productivity/project-management tools;
- professional providers and contractors.
Third-party platforms also operate under their own terms and privacy policies.
12. International processing
Some providers operate outside Kuwait.
Information may therefore be processed or stored in other countries.
Where applicable law requires safeguards or disclosures for international processing, Zain Media will take appropriate measures.
13. Google integrations and Google OAuth
Zain Media may allow clients to connect supported Google services to ZSOS™ or another Zain Media service.
Examples may include Google Search Console or Google Analytics depending on actual functionality enabled.
Optional connection
Connecting Google is optional.
Google displays requested permissions before the user grants access.
No Google password
Zain Media does not receive or store the user’s Google password through Google OAuth.
Data and permissions
The Google information accessible to Zain Media depends on the permissions approved by the user.
Only permissions needed for the connected user-facing functionality should be requested.
Use of Google user data
Google user data is used only to provide or support functionality requested by the client, such as:
- search-performance reporting;
- analytics reporting;
- search visibility;
- SEO/GEO/AIO analysis;
- diagnostics;
- measurement;
- related connected functionality.
No sale or advertising audiences
Zain Media does not sell Google user data.
Google user data obtained through connected APIs is not used to create behavioural advertising audiences or conduct retargeting.
Limited transfers
Google user data is transferred only where necessary to:
- provide the requested functionality;
- use an authorised service provider acting on our instructions where permitted;
- maintain security;
- comply with applicable law;
- complete a permitted corporate transaction subject to applicable requirements.
Human access
Human access is limited to circumstances such as:
- authorised client-service delivery;
- troubleshooting;
- security/abuse prevention;
- legal requirements;
- appropriately aggregated/anonymised internal operations where permitted.
AI model training
Zain Media does not use Google user data obtained through connected Google APIs to train, develop or improve generalised or non-personalised AI or machine-learning models.
Retention and deletion
Connected Google user data is kept only for as long as reasonably necessary for the connected functionality or applicable legal requirements.
When a valid disconnection or deletion request is made, Google user data stored by Zain Media that is no longer required will be removed subject to applicable law and legitimate record-retention requirements.
Revocation
Users can revoke a Google connection independently through Google Account controls.
If Zain Media offers an in-product disconnect function, it may also be used.
Users may contact Zain Media for assistance.
OAuth revocation is not conditional on payment of a Zain Media invoice.
Google API policy
Zain Media’s use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.
14. Client confidentiality and case studies
Non-public client information is treated as confidential in accordance with applicable agreements and service practices.
Examples may include:
- private revenue or sales data;
- profit/loss information;
- campaign performance;
- customer information;
- internal business problems;
- operational weaknesses;
- private plans;
- credentials/access.
Zain Media may use appropriately anonymised performance results where the client cannot reasonably be identified.
Client approval is required before linking an identifiable client with confidential financial results, internal problems or other sensitive non-public case-study information.
A stricter NDA/confidentiality agreement prevails.
15. Credentials and permissions
Where practical, Zain Media uses role/permission-based access rather than shared passwords.
Only access reasonably necessary for the agreed service should be requested.
Where credentials must be shared, they should be used for the engagement and handled appropriately.
Multi-factor authentication is encouraged where available.
16. Data retention
There is no single retention period for every type of information.
Business and administrative records
Enquiries, contracts, communications, invoices and related records may be retained as reasonably required for administration, accounting, security, disputes and legal obligations.
Project files
Unless the client agreement states otherwise, Zain Media’s default retention period for ordinary project working files after the engagement ends is three months.
After that period, Zain Media may delete them and does not guarantee permanent archiving.
Clients are responsible for retaining delivered copies.
If archived material remains available, retrieval/archive recovery may be separately chargeable.
Personal information
Personal information is retained only as long as reasonably required for the stated purpose and applicable obligations.
Google-connected data
Google user data is retained only as long as required for connected functionality or applicable obligations.
17. End of engagement and account access
When an engagement ends, Zain Media should remove agency access no longer required and complete ordinary access handover where appropriate.
The operational target is within seven business days, subject to platform and technical constraints.
This does not prevent a user from independently revoking OAuth authorisation at any time.
Commercial/source-file/asset handover remains governed by the applicable client agreement.
18. Security
Zain Media uses reasonable technical and organisational measures designed to protect information.
Measures may include:
- access control;
- permission-based access;
- HTTPS;
- authentication safeguards;
- infrastructure security;
- reasonable security monitoring;
- backups where appropriate.
No method of transmission or storage is completely secure.
19. Security incidents
If Zain Media becomes aware of a personal-data security incident, we will investigate and take reasonable containment/remediation measures.
Notifications will be made where required by applicable law and regulatory requirements.
The existence of Zain Media account access does not by itself establish that Zain Media caused an incident.
Responsibility depends on the facts and source of the incident.
20. Your choices and rights
Subject to applicable law, you may request:
- access;
- correction;
- deletion;
- restriction or objection where applicable;
- withdrawal of consent;
- portability where legally applicable;
- stopping marketing communications;
- changing cookie choices;
- Google OAuth revocation;
- ZSOS™ account closure/deletion.
See Data & Account Requests for instructions.
We may verify identity before acting on a request.
21. Children
Our website and services are intended for businesses and professional users and are not directed at children.
22. Third-party links
External sites/services operate under their own privacy practices.
23. Policy changes
We may update this Policy when our services, technologies or legal obligations change.
The latest revision date appears at the top.
Where a material change requires new consent under applicable law, appropriate notice/consent will be obtained.
24. Contact
Zain Media
Kuwait, Salmiya, Salem Al Mubarak Street, The Cube Mall, First Floor
Email: ahmad@zain.media
Phone / WhatsApp: +965 5575 7400