X
Last updated: 11 August 2026
For personality-hub.com and related Personality Hub services
Personality Hub is operated by MEDIA 3 FZCO, a Free Zone Company (FZCO) licensed/registered in Dubai, United Arab Emirates under trade licence/registration number 25509, issued by Dubai Integrated Economic Zones Authority, with registered office at Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates.
For the purposes of applicable privacy law, the Company is the controller of personal data collected through the Personality Hub Services, except where a third party acts as an independent controller for its own processing.
Privacy contact: support@personalityhub.com
Data protection contact / DPO (if appointed or legally required): [NAME OR EMAIL / NOT APPLICABLE]
This Policy is designed around Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data (UAE PDPL) and other applicable UAE laws. If mandatory privacy law in your country also applies to our processing, we will comply with those mandatory requirements.
This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit our website, create an account, complete an assessment, receive a report, purchase or use a subscription, contact us, or otherwise use our Services.
The Services are intended for adults aged 18 or older. We do not knowingly offer accounts or paid Services to children. If we learn that we have collected personal data from a person under 18 in circumstances where we should not have done so, we will take appropriate steps to delete or restrict that data and comply with applicable child-safety and privacy requirements.
| Category | Examples |
|---|---|
| Account and contact data | Name, email address, phone number, login credentials or authentication identifiers, account settings and communications preferences. |
| Assessment data | Answers to personality, stress, attention, emotional-pattern, relationship or other assessments; timestamps; scores; generated traits, categories, reports and recommendations. |
| Potentially sensitive or health-related data | Some assessment answers or results, particularly ADHD-related or mental-health-adjacent assessments, may reveal or allow inferences about health, mental health or other sensitive characteristics under applicable law. |
| Transaction data | Plan purchased, amount, currency, subscription status, renewal dates, payment status, payment-provider reference, refund or chargeback information. We generally do not store full card details. |
| Device and usage data | IP address, device identifiers, browser type, operating system, approximate location derived from IP, pages viewed, clicks, referral source, session information and security logs. |
| Cookie and advertising data | Cookie identifiers, analytics events and advertising/pixel data where permitted by your consent or applicable law. |
| Support and communications data | Emails, contact-form submissions, support requests, survey responses and other information you choose to provide. |
| Derived and aggregated data | Insights or statistics created from use of the Services. Where data is irreversibly anonymised so that it no longer identifies a person, it is not treated as personal data under this Policy. |
We process personal data only for specified and legitimate purposes and on a legal basis available under applicable law. Depending on the activity, this may include your consent, processing necessary to perform or enter into a contract with you, compliance with legal obligations, protection of legal rights, security and fraud prevention, or another basis permitted by law.
| Purpose | Data commonly used | Basis / justification |
|---|---|---|
| Provide assessments, reports and personalised content | Account data; assessment data; generated results | To provide the Service you request and, where required for sensitive data, your explicit or other valid consent. |
| Create and manage your account | Account and contact data; security logs | To provide account functionality, perform our agreement with you and maintain security. |
| Process purchases and recurring subscriptions | Account data; transaction data; limited device/fraud data | To process and administer your purchase, recurring billing and cancellation, comply with financial/legal requirements and prevent fraud. |
| Customer support | Account, transaction and communications data | To respond to your request, perform the Service and protect our legal rights. |
| Security and abuse prevention | Device, usage, account and security data | To protect users, the Services, our systems and legal rights; and to comply with law. |
| Product analytics and improvement | Usage data; aggregated or de-identified assessment trends where appropriate | Consent where required for non-essential analytics; otherwise a basis permitted by applicable law. We seek to minimise use of identifiable assessment content for general analytics. |
| Marketing communications | Email/contact data and marketing preferences | Your consent where required or another lawful basis for permitted direct marketing. You can opt out at any time. |
| Advertising and measurement | Cookie/device identifiers and site events | Consent where required. We do not intentionally use your detailed assessment answers or generated mental-health-related results for targeted advertising. |
| Legal and regulatory compliance | Relevant account, transaction, communications or security data | Compliance with legal obligations, lawful requests and the establishment or defence of legal claims. |
Personality Hub is not a healthcare provider and the Services do not provide a medical diagnosis. However, we recognise that certain assessment responses or generated results may be sensitive and may, depending on their content and applicable law, be treated as health-related or otherwise sensitive personal data.
We therefore apply heightened safeguards to assessment data. We use assessment responses primarily to generate the report, features or recommendations you request. Where applicable law requires specific consent for sensitive data, we will obtain that consent before carrying out the relevant processing. You may withdraw consent where the law gives you that right, although withdrawal may prevent us from continuing to provide features that require the data.
We do not intentionally disclose detailed assessment answers or health-related assessment inferences to advertising networks for targeted advertising. If we later wish to use assessment data for a materially different purpose, we will provide additional notice and obtain consent where required.
The Services use automated scoring, rules, algorithms and software to analyse assessment responses and generate personality-related results, categories, reports, recommendations or personalised content. This may constitute "profiling" or automated processing under some privacy laws.
These automated outputs are intended for self-exploration and educational purposes. We do not use Personality Hub assessment scores to make decisions about you that produce legal effects or similarly significant effects, such as decisions about employment, credit, insurance, healthcare eligibility or access to essential services.
Where applicable law gives you a right to object to or request human review of certain automated decisions, you may contact us using Section 16.
We use cookies and similar technologies for website operation, preferences, security, analytics and, where enabled, advertising and campaign measurement.
| Type | Purpose | Examples |
|---|---|---|
| Strictly necessary | Authentication, security, checkout, load balancing and core functionality. | Session and security cookies. |
| Preferences | Remember settings and choices. | Language or display preferences. |
| Analytics | Measure traffic, feature usage and performance. | Google Analytics or similar analytics tools. |
| Advertising / measurement | Measure campaigns, attribute conversions and, where permitted, support relevant advertising. | Meta Pixel and similar advertising technologies. |
Where consent is required, non-essential analytics and advertising technologies will not be activated until you make a choice through our cookie consent tool. You can later change or withdraw your choices through the cookie settings made available on the Services. Browser settings may also allow you to block or delete cookies, but doing so can affect functionality.
Third parties such as Google or Meta may receive device, cookie or event data when their technologies are enabled and may process that data under their own privacy terms. Depending on the configuration and law, they may act as our processor, joint controller or independent controller for certain activities.
We do not sell personal data for money. We disclose personal data only as reasonably necessary for the purposes described in this Policy, including to:
Personality Hub is operated from the United Arab Emirates, but our service providers may process personal data in other countries, including the United States, the United Kingdom, the European Economic Area or other locations where our providers operate.
When personal data is transferred outside the UAE, we apply the transfer requirements and safeguards required by the UAE PDPL and other applicable law. Depending on the destination and circumstances, this may include recognised adequacy arrangements, contractual protections, your explicit consent where legally appropriate, or another permitted transfer mechanism.
Where the EU GDPR or UK GDPR applies to a transfer, we will use an applicable transfer mechanism such as an adequacy decision, approved standard contractual clauses, the UK International Data Transfer Agreement/addendum, or another lawful safeguard, as appropriate.
We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including providing the Services, maintaining transaction and accounting records, resolving disputes, enforcing agreements, preventing fraud and complying with legal obligations.
Because retention must match our actual systems and legal obligations, the following operational periods must be confirmed before publication:
| Data | Typical retention rule |
|---|---|
|
Account profile and login data |
For the life of the account, then [ACCOUNT RETENTION PERIOD] after closure unless longer retention is legally required. |
|
Assessment answers and generated reports |
While needed to provide your account/report, then [ASSESSMENT RETENTION PERIOD] after account deletion or closure, unless you request earlier deletion and no exception applies. |
|
Transaction and billing records |
For the period required by applicable tax, accounting, fraud-prevention and consumer-protection laws. |
|
Support communications |
[SUPPORT RETENTION PERIOD], unless a longer period is needed for an unresolved complaint, dispute or legal obligation. |
|
Analytics / advertising identifiers |
According to the configured retention periods of our consent platform and analytics/advertising tools, subject to your consent choices and applicable law. |
We use technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. Measures may include access controls, encryption in transit, security monitoring, backups, role-based permissions and vendor safeguards, as appropriate to the risk.
No online service can guarantee absolute security. If a personal-data breach occurs, we will investigate it and make notifications to affected individuals or authorities when required by applicable law.
Subject to applicable law and any lawful exceptions, you may have rights to:
To exercise a privacy right, email support@personalityhub.com. We may ask for information reasonably necessary to verify your identity and protect your account. We will respond within the period required by applicable law.
If the EU GDPR or UK GDPR applies to our processing, the legal bases we rely on may include performance of a contract, compliance with legal obligations, our or a third party's legitimate interests where those interests are not overridden by your rights, and consent. For special-category data, we will also identify an applicable Article 9 condition, such as explicit consent, where required.
EEA and UK users may have GDPR rights including access, rectification, erasure, restriction, portability, objection, withdrawal of consent and the right to lodge a complaint with a competent supervisory authority. You may also have rights relating to solely automated decisions with legal or similarly significant effects. We do not use Personality Hub assessment results for such high-impact decisions.
EU/UK representative (if legally required): [REPRESENTATIVE NAME AND CONTACT / NOT APPLICABLE]
If the California Consumer Privacy Act, as amended (CCPA/CPRA), applies to our processing, California residents may have rights to know/access, correct and delete certain personal information, and to opt out of certain "sale" or "sharing" of personal information as defined by California law. You also have the right not to receive discriminatory treatment for exercising applicable rights.
We do not sell personal information for money. Certain advertising or analytics disclosures involving cookies or identifiers may constitute "sharing" for cross-context behavioural advertising under California law. Where required, we will provide an applicable "Do Not Sell or Share My Personal Information" mechanism and honour legally recognised opt-out preference signals such as Global Privacy Control.
We do not knowingly sell or share personal information of consumers under 16. The Services are intended for adults aged 18 or older.
For privacy questions, requests or complaints, contact:
Legal entity: MEDIA 3 FZCO
Registered office: Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates
Email: support@personalityhub.com
Telephone: [UAE TELEPHONE NUMBER]
If you are not satisfied with our response, you may have the right to complain to the competent UAE data-protection authority or another supervisory authority that has jurisdiction over your personal data.
We may update this Privacy Policy when our Services, vendors, data practices or legal obligations change. We will update the date at the top of the Policy and, where appropriate or legally required, provide additional notice of material changes. If a change requires new consent, we will request that consent before carrying out the relevant processing.