Privacy Policy

ABC Real Estate (“we”, “us”) is committed to protecting your privacy in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). This policy explains what data we collect and how we use it.

1. Information We Collect

• Account data: name, email, phone number, and password (stored hashed).
• Verification documents: Emirates ID, passport, RERA card, title deeds, and Form A where applicable.
• Listing data: property details, photos, and pricing you submit.
• Usage data: log data, device information, and cookies (see our Cookie Policy).

2. How We Use Your Data

• To operate the marketplace and display your listings.
• To verify your identity and right to advertise a property.
• To process subscriptions, boosts, and commission records.
• To send transactional notifications and, with consent, marketing communications.
• To comply with RERA, DLD, and anti-money-laundering obligations.

3. Consent

We collect your consent explicitly and record when it was given: you accept the Terms and this Privacy Policy at registration, and you give separate, specific consent at the point of uploading verification documents. Your data is not used for purposes beyond those stated here without fresh consent, and you may withdraw consent at any time by contacting us — withdrawal does not affect processing that was lawful before the withdrawal.

4. Data Sharing & Processors

We do not sell your personal data. Verification documents are accessible only to authorised administrators and are never exposed through public listings or the public API. We may share data with regulators where legally required. The following service providers process data on our behalf under appropriate safeguards:

• Supabase — authentication and database hosting (encrypted at rest).
• Stripe — subscription and payment processing (we never store card numbers).
• Brevo — transactional email delivery.
• Vercel — application hosting and content delivery.
• Cloudflare — file storage for uploaded documents and images.

5. Data Security

We apply technical and organisational measures including encrypted transport (TLS), encryption at rest for stored documents, hashed passwords, field-level access controls on sensitive data (identity documents, bank details, owner information), account lockout against brute-force attempts, and restricted administrative access.

6. Your Rights

Subject to the PDPL, you have the right to:

• request access to the personal data we hold about you, and receive a portable copy;
• request correction of inaccurate data;
• request erasure of your data and deletion of your account;
• request restriction of processing, and object to automated processing;
• withdraw consent to marketing communications at any time.

To exercise any of these rights, contact akgroup3@gmail.com or use the “Delete my account” option in your dashboard settings. We respond to requests within 30 days.

7. Retention

• Account data is retained while your account is active and removed or anonymised after account deletion, except where law requires longer retention.
• Identity documents (Emirates ID, passport, RERA card) are retained only as long as needed to complete and evidence verification, then for the period required by UAE record-keeping obligations — they are not kept indefinitely.
• Legal documents (Form A, title deeds, transaction records) are retained for five years in line with RERA requirements.
• Billing records are retained as required by UAE accounting and tax law.

This document is a general template and does not constitute legal advice. It should be reviewed by qualified UAE legal counsel before launch.