Name: BTT Creative Hub & Studios
Address: Al Tayer Warehouses No. 1A, Al Quoz Industrial Area 1, Dubai, AE
Telephone: +971 50 991 5757
Price range: AED 350+

Last Updated: 28 August 2026

BTT Creative (“BTT Creative”, “we”, “us”, or “our”) respects your privacy and is committed to protecting personal information collected through our website, booking services, and internal mobile application.

This Privacy Policy explains what information we collect, how and why we process it, how it may be shared and stored, the security measures we apply, and the rights available to individuals whose personal information we process.

This Privacy Policy applies to:

the BTT Creative website at bttcreative.co;
studio booking and reservation services provided through the website;
payment-related processes associated with bookings;
communications and customer enquiries;
the BTT Creative internal mobile application made available exclusively to authorized employees and operational staff; and
related APIs, servers, notification systems, and technical infrastructure.

1. About BTT Creative

For the purposes of this Privacy Policy, the business responsible for the relevant processing of personal information is:

BTT Creative
Al Qouz Industrial Area 1
Altayer Warehouses, No. 1A
Dubai, United Arab Emirates

Phone: +971 50 991 5757
Email: hello@behindthetribe.com
Website: bttcreative.co

Questions, requests, or concerns regarding privacy or personal information may be submitted to hello@behindthetribe.com.

PART I — WEBSITE, CUSTOMERS AND BOOKINGS

2. Information We Collect Through the Website

When you visit our website, contact BTT Creative, or make a studio reservation, we may collect personal information necessary to provide our services.

Depending on how you interact with us, this information may include:

Contact Information

We may collect:

first and last name;
email address;
telephone number;
company or organization name, where applicable; and
information voluntarily provided when contacting us.

Booking Information

When making or managing a studio reservation, we may process information including:

selected studio or room;
reservation date;
start and end time;
booking duration;
booking status;
booking reference;
customer details;
special requests;
reservation notes; and
other information necessary to organize and provide the requested studio service.

Payment and Transaction Information

Where payment is available through our website, information related to the transaction may be processed in order to complete and verify the booking.

Payments may be processed through third-party payment service providers. Where a third-party payment provider is used, sensitive payment credentials such as full card numbers, card verification codes, or similar financial authentication information may be collected and processed directly by that payment provider rather than stored by BTT Creative.

We may retain transaction-related information such as payment status, transaction reference, amount, currency, invoice information, refund status, and related accounting records where necessary.

Website and Technical Information

When accessing our website, certain technical information may be processed automatically, including:

IP address;
browser type;
device and operating system information;
date and time of access;
requested pages;
server and security logs;
referral information; and
cookie or similar technology information where applicable.

3. How We Use Website and Booking Information

Personal information collected through our website and booking system may be used to:

provide information about our studios and services;
process studio reservations;
confirm, modify, or cancel reservations;
check and display studio availability;
process or verify payments;
issue booking confirmations, invoices, or receipts;
communicate with customers regarding their reservations;
respond to customer enquiries;
manage refunds or booking-related disputes;
maintain operational and accounting records;
prevent fraud, misuse, and unauthorized activity;
maintain the security and reliability of our website;
comply with applicable legal, regulatory, tax, and accounting obligations; and
establish, exercise, or defend legal claims where necessary.

Where permitted by applicable law, we may also process aggregated or appropriately de-identified information for internal analytics, service improvement, and operational planning.

PART II — INTERNAL MOBILE APPLICATION

4. Internal Application

BTT Creative operates an internal mobile application intended exclusively for authorized employees and operational personnel.

The application allows authorized users to access and manage studio reservations and related operational information.

It is not intended as a general consumer application and access may be restricted according to the user’s assigned account, role, and permissions.

5. Information Collected Through the Mobile Application

Depending on the user’s role and application usage, the application may process the following categories of information.

Account Information

This may include:

username;
WordPress user account information;
first and last name or display name;
internal account or user ID;
assigned user role; and
account permissions and authorization information.

Reservation Information

The application may process reservation information including:

studio or room;
reservation date;
reservation start time;
reservation end time;
reservation status;
reservation notes;
booking reference;
creation or modification information; and
related operational information.

Customer Information

Authorized employees may access customer information necessary to manage reservations, including:

customer name;
telephone number;
email address; and
information associated with the customer’s reservation.

Access to such information is provided for legitimate operational purposes and is subject to the user’s assigned role and permissions.

Device and Notification Information

The application may process:

device name;
device platform or operating system;
application-related device identifiers where required;
push notification token; and
notification registration information.

Technical and Diagnostic Information

For security, synchronization, troubleshooting, and service reliability purposes, we may process technical information including:

API requests;
API response or error information;
synchronization timestamps;
authentication events;
application errors;
server logs; and
technical performance information.

6. Password and Access Token Security

BTT Creative’s mobile application is designed so that the user’s WordPress password is not stored by the application.

When an authorized user signs in:

the username and password are transmitted to the server through an encrypted HTTPS connection;
the password is used only for authentication;
the application does not permanently store the user’s WordPress password;
after successful authentication, the server issues an opaque access token;
the access token is stored within the secure storage mechanism available on the user’s device;
the application does not decode, inspect, or analyze the internal content of the opaque token; and
when the user signs out, the relevant token is revoked on the server.

Access tokens are valid for a limited period. Unless otherwise configured, access tokens are generally valid for up to 30 days, or until revoked, expired, or invalidated through logout or administrative action.

For additional protection, the server stores only a SHA-256 hash of the relevant access token rather than storing the raw token itself.

7. How We Use Mobile Application Information

Information processed through the internal application is used to:

authenticate authorized users;
maintain authenticated sessions;
determine user roles and permissions;
list and display reservations;
create reservations where the user’s permissions allow;
modify reservations;
cancel reservations where authorized;
display studio availability;
synchronize reservation calendars and operational information;
notify staff about new or modified reservations;
support day-to-day studio operations;
perform authorization and security checks;
prevent unauthorized access;
investigate errors and technical problems;
analyze application performance and reliability; and
maintain appropriate operational and security records.

Information obtained through the application is not used for third-party advertising or behavioral advertising.

8. User Roles and Access Controls

Application functionality and data access may vary according to the user’s assigned role.

BTT Creative applies role-based authorization controls to restrict access to functions and information.

Users assigned a Viewer or equivalent read-only role cannot perform write operations where such restrictions are implemented. Creation, modification, cancellation, or other administrative operations are available only to appropriately authorized users.

Users must not attempt to access information or functionality outside the permissions assigned to their accounts.

9. Push Notifications

The application may use push notifications to provide employees with operational updates.

If the user grants notification permission:

the device’s push notification token may be registered with our server;
the token may be associated with the relevant authorized account or device;
notifications may be sent for new reservations, modified reservations, cancellations, or other operational events; and
the token may be updated when required by the operating system or notification infrastructure.

Push tokens are used solely for application functionality, reservation notifications, security notices, and operational communications.

BTT Creative does not use push notification tokens for third-party advertising, advertising profiling, or cross-service tracking.

Users may disable notification permission through their device settings.

Push tokens may be disabled or deleted when a user signs out, a device registration is removed, an account is disabled, or the token is no longer required.

10. Third-Party Services and Infrastructure

BTT Creative may rely on third-party technology providers to operate the website, mobile application, reservation system, notifications, hosting infrastructure, and related services.

These providers may include:

Apple Push Notification Service (APNs)

For compatible Apple devices, Apple Push Notification Service may be used to deliver application notifications.

Apple may process device and technical information required to provide the notification service in accordance with Apple’s own terms and privacy practices.

Expo and EAS Services

Expo and/or Expo Application Services (EAS) may be used as part of the application’s development, build, deployment, and push notification infrastructure.

Depending on the implementation, these services may process limited technical information required to provide these functions.

WordPress

BTT Creative uses WordPress-related infrastructure for website, account, authentication, API, reservation, and/or content-management functionality.

Authorized mobile application accounts may therefore be associated with WordPress user accounts and permissions.

Hosting and Infrastructure Providers

Our website, database, APIs, backups, logs, and related services may be hosted or processed using third-party hosting, cloud, server, security, backup, or infrastructure providers.

These providers may process information only to the extent necessary to provide the relevant infrastructure or contracted services.

Email Services

Third-party email infrastructure may be used to send booking confirmations, operational emails, account-related messages, and other necessary communications.

Payment Providers

Where online payments are offered, payment transactions may be handled by third-party payment processors. Those providers may process financial and payment information under their own terms and privacy policies.

BTT Creative aims to limit third-party access to information reasonably necessary for the service being provided.

11. Sharing and Disclosure of Personal Information

BTT Creative does not sell personal information to third parties.

We do not share customer or employee information with advertising networks for behavioral advertising purposes.

Personal information may nevertheless be disclosed in limited circumstances, including:

to hosting, infrastructure, payment, notification, email, security, and technical service providers where necessary to operate our services;
to professional advisers where reasonably necessary;
where required for accounting, financial, or business administration;
when required by applicable law, regulation, court order, or governmental authority;
where necessary to protect the rights, property, systems, customers, employees, or legitimate interests of BTT Creative;
where necessary to investigate fraud, security incidents, or unauthorized activity; or
as part of a legitimate corporate transaction, subject to applicable legal requirements.

Service providers receiving personal information are expected to process it only for the relevant service or other legally permitted purposes.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.

Reservation and customer records may be retained for as long as required for:

studio operations;
booking history;
customer service;
payment and refund management;
accounting and financial recordkeeping;
dispute resolution;
fraud prevention; and
applicable legal or regulatory obligations.

Internal employee account information may be retained for the duration of authorized access and for an appropriate period afterward where required for security, audit, or legal purposes.

Access tokens are generally configured to remain valid for up to 30 days, unless they expire earlier or are revoked through logout, administrative action, account changes, or security measures.

Push notification tokens may be disabled or removed when the associated session ends, the user logs out, notification registration is removed, the account is disabled, or the token is otherwise no longer required.

Technical and diagnostic logs may be retained for a reasonable period necessary for security, troubleshooting, performance analysis, and operational integrity.

13. Security

BTT Creative implements technical and organizational safeguards intended to protect personal information against unauthorized access, disclosure, alteration, misuse, or loss.

Depending on the relevant system, these safeguards include:

HTTPS encryption for API communications;
passwords not being stored by the mobile application;
secure device storage for authentication tokens;
server-side storage of SHA-256 token hashes instead of raw access tokens;
token expiration and revocation mechanisms;
role-based access controls;
read-only restrictions for Viewer users;
API authorization controls;
rate limiting;
authentication controls;
server and application security monitoring; and
access restrictions based on operational requirements.

Although reasonable safeguards are applied, no internet transmission, electronic storage system, or software platform can be guaranteed to be completely secure.

Users of the internal application are responsible for maintaining the security of their devices and account credentials and should promptly report suspected unauthorized access.

14. International Data Transfers

BTT Creative is based in Dubai, United Arab Emirates.

Our hosting providers, technology vendors, notification services, payment processors, email providers, or other service providers may operate infrastructure in other countries.

As a result, personal information may be processed or transferred outside the country in which it was originally collected.

Where international transfers occur, they are made as necessary to provide, secure, maintain, or support BTT Creative’s website, booking system, mobile application, and associated services, subject to applicable data protection requirements.

15. Children’s Privacy

The internal BTT Creative mobile application is intended exclusively for authorized employees and operational personnel and is not intended for children.

Our services are not directed toward children under the age of 13, and BTT Creative does not knowingly collect personal information from children under 13.

If we become aware that personal information from a child has been collected contrary to applicable requirements, we may take reasonable steps to delete or otherwise appropriately handle that information.

16. Your Privacy Rights

Depending on your location and applicable data protection law, you may have rights regarding your personal information.

These rights may include the right to:

request access to personal information we hold about you;
request correction of inaccurate or incomplete information;
request deletion of personal information where legally applicable;
object to certain processing;
request restriction of certain processing;
withdraw consent where processing is based on consent;
withdraw notification permissions through your device settings;
request that account or token access be revoked; and
submit a complaint or enquiry regarding the processing of personal information.

Some requests may be subject to legal exceptions. For example, BTT Creative may be required to retain certain booking, transaction, accounting, security, or legal records even after a deletion request.

To exercise a privacy right or submit a privacy-related request, contact:

hello@behindthetribe.com

We may request reasonable information to verify the identity or authority of the person making the request.

17. Employee and Authorized User Responsibilities

Because the internal application may provide access to customer personal information, authorized users are expected to use that information solely for legitimate BTT Creative business and operational purposes.

Employees and other authorized users must not:

access customer information without an operational need;
disclose customer information to unauthorized individuals;
copy or export information for unauthorized purposes;
share their account credentials or access tokens;
use customer information for personal purposes; or
attempt to circumvent application permissions or security controls.

Access may be suspended or revoked when required for security or operational reasons.

18. Tracking and Advertising

The BTT Creative internal application is not designed to use customer or employee information for advertising tracking.

We do not use push tokens or application account identifiers for third-party behavioral advertising.

We do not sell application data to advertisers or data brokers.

If analytics, advertising, or tracking technologies are introduced in the future, this Privacy Policy and, where applicable, relevant consent and platform disclosures will be updated accordingly.

19. Cookies and Website Technologies

The BTT Creative website may use cookies or similar technologies where necessary for website functionality, security, authentication, booking functionality, user preferences, analytics, or payment processes.

Some cookies may be placed by third-party services integrated into the website.

Where required by applicable law, users will be provided with appropriate information and choices regarding non-essential cookies.

The internal mobile application does not rely on browser cookies for ordinary mobile authentication where token-based authentication is implemented.

20. Legal and Regulatory Compliance

BTT Creative may process and retain information where reasonably necessary to comply with applicable legal obligations in the United Arab Emirates and other applicable jurisdictions.

Where legally required, personal information may be disclosed to courts, regulators, law-enforcement agencies, governmental bodies, or other competent authorities.

Such disclosures will be limited to information reasonably necessary to satisfy the applicable legal requirement.

21. Changes to This Privacy Policy

BTT Creative may update this Privacy Policy periodically to reflect:

changes to our website or services;
changes to the mobile application;
new functionality;
changes to third-party service providers;
changes to data processing practices;
security improvements; or
changes in legal or regulatory requirements.

The latest version will be published on our website.

The “Last Updated” date at the beginning of this Privacy Policy indicates when the policy was most recently revised.

Material changes may also be communicated through the website, mobile application, email, or other appropriate means where required.

22. Contact Us

For questions about this Privacy Policy, requests concerning personal information, or privacy-related concerns, please contact: