Privacy Policy
Processing of personal data of dxbresidence.com users
This Policy explains what personal data DXB Residence processes, why it is needed, who may receive it, how long it is retained and what rights a user has. It applies to the website, enquiry forms, correspondence, calls and transaction-specific interactions.
1 Data controller
1.1 Controller. AHMEDOV DILSHOD REAL ESTATE L.L.C, Dubai, United Arab Emirates. DET commercial licence No. 1612305. RERA office registration No. 60853.
1.2 Contacts. dxbresidence.com; sales@dxbresidence.com; +971 54 570 0707; Office A-22, Al Karama, Dubai, UAE, as stated in the commercial licence.
2 Scope
This Policy applies when a user visits the site, selects a language, saves properties, submits an enquiry, contacts us by telephone or WhatsApp, signs documents, undergoes KYC or otherwise interacts with the Controller. It does not govern independent processing by a developer, bank, DLD/RERA, WhatsApp or an independent broker after data has lawfully been transferred to them.
3 Data we process
| Category | Examples |
|---|---|
| Contact data | Name, telephone or WhatsApp, email and preferred language |
| Enquiry content | Comments, relevant project and unit, enquiry type, preferences and correspondence history |
| Attribution | Page URL, referrer and UTM source, medium, campaign, content and term |
| Consents | Text, version, purpose, date and time of consent or withdrawal |
| Lead handling | Status, assigned employee, contact timing, notes and outcome |
| Technical data | IP address in server logs, hashed IP for rate limiting, browser, device, and access date and time |
| Transaction data | Identity documents, Emirates ID or passport, address, signature, Contract B, SPA and necessary payment information |
| KYC and AML | Beneficial owner, representative, source of funds and wealth, PEP and sanctions status, and transaction purpose |
The Controller does not request passwords, full payment-card details or information unnecessary for the stated purpose. Users should not send such information through ordinary WhatsApp or email.
4 Sources
- directly from the user or their representative;
- automatically from the browser, server and local site storage;
- from a developer, seller, partner broker, bank, trustee centre or public authority for a specific transaction;
- from public and lawfully accessible sources for KYC, AML, sanctions and PEP checks.
5 Purposes and legal grounds
| Purpose | Ground |
|---|---|
| Responding to an enquiry and arranging contact | Consent and steps requested by the user before a possible contract |
| Property selection and support | Performance of the Terms, Contract B or another transaction document |
| Transfer to a developer or partner broker | Separate consent or another applicable lawful basis |
| KYC, AML and sanctions controls | Legal obligations, regulatory requirements and protection of the public interest |
| Security, anti-spam and logging | Protection of the system and the rights of the Controller and users, and legal requirements |
| Claims and disputes | Establishment, exercise or defence of legal claims |
| Marketing | Separate, voluntary and revocable consent |
| Analytics and advertising cookies | Prior user consent where the relevant tools are enabled |
Where processing is based on consent, the user may withdraw it as easily as it was given. Withdrawal does not make earlier processing unlawful and does not override mandatory retention duties.
6 Required information
Name and telephone number are required to respond to an enquiry. Email and comments in the public form are optional. KYC and transaction data become mandatory only when required by law, DLD/RERA, a bank or a transaction document. Without necessary data, a service or transaction may be suspended or unavailable.
7 Recipients
To the extent necessary, data may be received by:
- authorised employees and agents of the Controller;
- the specific developer or seller selected by the user;
- a licensed partner broker only with separate consent or another lawful basis;
- DLD, RERA, the UAE Financial Intelligence Unit and other competent authorities;
- banks, trustee centres, valuers, lawyers, auditors and technical inspectors involved in a transaction;
- contracted hosting, email, CRM, backup, cybersecurity and technical-support providers;
- WhatsApp and other channels selected by the user under their own terms.
The Controller does not sell personal data. A recipient receives only information necessary for the defined purpose.
8 International transfers
Some communications, cloud or analytics providers may process data outside the UAE. A transfer is made only where a lawful ground, adequate protection or appropriate contractual and organisational safeguards exist. The user may request general information about the applicable transfer mechanism.
9 Retention
| Data | Usual period |
|---|---|
| Enquiry without a transaction | Up to 24 months after the last substantive contact |
| Marketing consent and contacts | Until withdrawal or 24 months without interaction, unless law requires earlier cessation |
| Contracts, transactions, KYC and AML | At least 5 years after completion or the end of the business relationship, or longer where lawfully required |
| Consent or refusal record | Up to 5 years to demonstrate compliance and defend claims |
| Security server logs | Usually up to 12 months, unless an incident or law requires longer |
| Backups | Usually up to 90 days, followed by rolling deletion |
| Browser local storage | Until cleared by the user or the session ends, as described in the Cookie Policy |
After the period ends, data is deleted, anonymised or isolated pending secure deletion. AML records may be retained longer by order of a competent authority.
10 User rights
In the cases and to the extent provided by UAE law, a user may request:
- information about processing and a copy of their data;
- correction of inaccurate or completion of incomplete data;
- deletion or restriction of processing;
- cessation of direct marketing;
- data portability where applicable;
- objection to certain processing;
- review of a decision based solely on automated processing;
- withdrawal of previously given consent.
Requests should be sent to sales@dxbresidence.com. The Controller may reasonably verify identity and authority. Lawful exceptions and mandatory retention continue to apply.
11 Automated decisions
The Controller does not make legally significant decisions about users solely by automated means. Site filters, sorting and calculations help find properties but do not decide a price, mortgage, reservation or transaction.
12 Security
The Controller uses reasonable technical and organisational measures, including access controls, secure connections, logging, abuse protection for forms, backups and confidentiality obligations for recipients. No internet channel is absolutely secure. Users must verify payment instructions through an independent official channel.
13 Data breaches
Following a security breach, the Controller assesses risk, takes steps to limit consequences and notifies the competent authority and affected persons where UAE law requires.
14 Children
The site and services are intended for persons aged 18 or over. The Controller does not knowingly collect a child's data for real-estate transactions. A legal representative may request deletion where such data was obtained without a proper basis.
15 Third-party sites and channels
Links to DLD, developers, maps, WhatsApp and other services lead to independent operators. Users should read their policies before use. Following a link does not transfer all data to them, although the provider may receive technical connection data.
16 Changes and contact
16.1 Changes. The current version is published with its effective date. A material change to a processing purpose or consent is communicated and, where required, applied only after renewed consent.
16.2 Contact. Questions, requests or complaints should be sent to sales@dxbresidence.com. Users may also contact the competent UAE data-protection authority under the applicable procedure.
Legal sources
The law in force on the date of the relevant act applies. The official Arabic text prevails in interpretation.