Privacy Policy — UAE-Prop

1. What we collect

When you submit a callback form, we collect the name and phone number you give us. If you message us via WhatsApp or email, we collect those messages. If you visit our site, we collect basic technical data — browser type, country (not city), what page you arrived on, and how long you spent. That's it. We don't fingerprint you, track you across other websites, or sell anything to third-party data brokers.

2. Why we collect it

To call you back when you ask us to. To send you the shortlist of properties that fit your brief. To improve the site (e.g. if 80% of visitors leave a page in 5 seconds, we know to fix it). We don't run drip-campaigns, we don't email you generic newsletters, we don't sell your contact info.

3. Cookies & analytics

We use Plausible Analytics — a privacy-first, GDPR-compliant analytics service that doesn't use cookies and doesn't track individuals. We do not use Google Analytics, Facebook Pixel, or any cross-site tracking. We use a single first-party cookie to remember your language preference (EN/RU/AR). That's the only cookie.

4. Sharing & 3rd parties

We share your data only with service providers strictly necessary to deliver the service: our CRM (Odoo, EU-hosted), our messaging platform (WhatsApp Business), our email provider (Elastic Email). We have data processing agreements with each. We never share your data with developers, sellers, or other agencies. If a developer asks who's interested, we tell them we have a buyer — we don't share your name.

5. Retention

Active leads (you've asked us to call): kept while we're working with you, plus 12 months after our last interaction. Inactive leads (form filled but no follow-through): kept 24 months for legitimate-interest follow-up, then deleted. Closed deals: 7 years (UAE legal retention requirement on real estate transactions). You can request earlier deletion at any time.

6. Your rights

Under UAE PDPL and EU GDPR (if applicable), you have rights to: access (see what data we hold), correct (fix errors), delete (we'll delete unless legal retention requires us to keep), object (stop processing), portability (export your data). Email clients@uae-prop.com — we respond within 30 days. No charge for reasonable requests.

7. International transfers

We're based in UAE. If you're in the EU, your data may be transferred to UAE for our internal use. UAE PDPL provides equivalent protections to GDPR. Our service providers (Odoo, Elastic Email) are EU-hosted with their own GDPR compliance. We don't store data in the US. We don't use Chinese or Russian-hosted services.

8. Contact DPO

Data Protection Officer: clients@uae-prop.com (subject line: "DPO request"). For UAE residents: complaints to UAE Data Office. For EU residents: complaint to your national supervisory authority. We acknowledge complaints within 5 days.