Privacy Policy
What personal data we collect, why we hold it, who we share it with, how long we keep it, and how to exercise your rights.
Published by Dhilal Al Khaimah Real Estate LLC · Trade licence [DED LICENSE] · RERA ORN [RERA ORN]
Registered office Dubai - UAE
Effective date [EFFECTIVE DATE]
This policy is written to meet the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (the “PDPL”) and the free-zone data protection regimes where they apply. Where we handle the data of individuals in the EU or UK, we also apply the GDPR principles of lawfulness, fairness, transparency, minimisation, accuracy, storage limitation and integrity.
1. Who is responsible for your data
The controller is Dhilal Al Khaimah Real Estate LLC (trade licence [DED LICENSE], RERA ORN [RERA ORN]), registered at Dubai - UAE. Privacy queries: info.real@itssiddiqui.com.
2. What we collect
| Category | Examples | Why we hold it |
|---|---|---|
| Account details | Name, email, phone, password (stored only as a hash), preferred language | To create and secure your account and let you sign in |
| Enquiry details | The name, contact details and message you submit through a form | To answer you and keep a record of the request |
| Property activity | Shortlists, saved searches, listings viewed, enquiries about a property | To show relevant listings and follow up on interest you started |
| Consent records | Which cookie and marketing choices you made, and when | To prove we asked, and to honour your choice |
| Technical data | IP address, device and browser type, pages requested, error and security logs | To keep the service secure, prevent abuse and diagnose faults |
| Analytics (only with consent) | Aggregated, pseudonymised usage such as pages visited and referring source | To understand which content is useful. Not loaded until you allow it |
We do not knowingly collect data from children, and we do not collect special-category data (health, religion, biometrics, political opinion). Please do not send such data in a message box.
3. Why we are allowed to hold it
- Contract — to provide an account and respond to a request you made.
- Legal obligation — records we must keep under UAE commercial, tax and real-estate regulation.
- Legitimate interests — securing the service, preventing fraud and abuse, and keeping basic operational logs, balanced against your rights.
- Consent — analytics and marketing cookies and messages. You can withdraw at any time.
4. Who we share it with
We do not sell personal data. We share it only where necessary, with:
- Service providers who host the platform, send email, or provide maps and media delivery, acting on our instructions.
- Professional advisers and regulators where the law requires it, or to establish or defend a legal claim.
- A developer, landlord or counterparty — only where you have asked us to pass your interest on as part of a specific enquiry.
Where a provider processes data outside the UAE we require appropriate safeguards and a written processing agreement. Provider names and locations are available on request.
5. How long we keep it
| Record | Retention |
|---|---|
| Account | While the account is open, then deleted or anonymised on request |
| Enquiries and correspondence | 24 months from last contact, unless a transaction requires longer |
| Consent records | As long as needed to demonstrate consent, then 24 months |
| Transaction and financial records | As required by UAE law — [RETENTION PERIOD TO BE CONFIRMED] |
| Security and access logs | Up to 12 months |
6. Cookies
We use strictly necessary cookies to keep you signed in and to protect forms against cross-site request forgery. Analytics and marketing cookies are optional and are only set after you allow them. Full detail, including how to change your choice, is in the Cookie Policy.
7. Your rights
Subject to the PDPL (and the GDPR where it applies), you may:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- ask us to delete data we no longer have a lawful reason to keep;
- restrict or object to certain processing, including direct marketing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting processing carried out before you withdrew it.
Submit a request through the Your data page or by writing to info.real@itssiddiqui.com. We will acknowledge within 5 working days and respond within 30 calendar days. We may ask you to verify your identity first, so that we do not release data to the wrong person.
8. Security
Data is transmitted over HTTPS. Passwords are stored only as one-way hashes. Access to personal data is limited to staff and contractors who need it, protected by role-based permissions, and we keep audit logs of account activity. No system is perfect; if a breach affects your rights we will notify you and the relevant authority as required.
9. Automated decisions
We do not make decisions that produce legal or similarly significant effects about you by wholly automated means. Search ranking and shortlisting are informational only.
10. Changes to this policy
We will publish any change on this page and update the effective date above. Where a change materially affects how we use your data, we will tell account holders directly.
Note to the site owner:
this policy describes the platform’s real behaviour, but it must be reviewed and
approved by your legal counsel before launch, and every bracketed item in
docs/todo-client-input.md must be completed. Until then these pages show
explicit placeholders rather than a silent blank.
Questions about this page
Write to info.real@itssiddiqui.com or call +971556293537 during [BUSINESS HOURS].