This Privacy Policy explains how Dubai Assets collects and uses personal data when you use dubai-assets.com and your Dubai Assets account. It is written to meet the UAE personal data protection law and, for visitors in the European Economic Area and the United Kingdom, the GDPR.
1. Who is responsible
Dubai Assets, trade licence no. 5589454, RERA office registration (ORN) no. 24453, of West Wing, Latifa Tower, Sheikh Zayed Road, Trade Centre 1, Dubai, United Arab Emirates, is the controller of your personal data. Contact us about privacy at contact@dubai-assets.com.
2. What we collect
Account and contact details. Name, email address, phone number, nationality, country of residence, date of birth, whether you buy as an individual or a company, company details, language and currency preferences.
Identity verification (KYC). Copies of your passport, Emirates ID (if you live in the UAE), a selfie, proof of address and, for companies, the trade licence, together with the outcome of our review.
Transactions. Bids, maximum bids, securities to bid, offers, viewing requests, invoices, payment references, contracts and your electronic signatures, including the time and IP address recorded with them.
Legal acceptances. Which versions of our terms and policies you accepted, when, and from which IP address and browser.
Technical data. IP address, browser and device type, pages visited and security logs. See the Cookie Policy for cookies.
Communications. Messages you send us, including through WhatsApp or email, and our replies.
We do not knowingly collect data from children under 18.
3. Why we use it and our legal bases
| Purpose | Legal basis |
|---|---|
| Creating and running your account | Performing our contract with you |
| Verifying identity, preventing fraud and meeting anti-money-laundering, sanctions and record-keeping duties | Legal obligation |
| Running auctions, processing bids, offers, invoices and contracts, and arranging transfers | Performing our contract with you; the Seller's and our legitimate interests in completing the sale |
| Security, preventing misuse and improving the Platform | Legitimate interests |
| Marketing emails about new listings | Your consent, which you can withdraw at any time |
| Analytics cookies | Your consent |
4. Who we share it with
We share personal data only as needed for these purposes:
- The Seller of a property you bid on, win or make an offer for, and their representatives;
- The Dubai Land Department, registration trustees and developers, to register a transfer;
- Banks handling payments, bid securities and refunds, and any escrow provider used for a transaction;
- Authorities, regulators and courts, where the law requires it, including anti-money-laundering reporting;
- Our service providers, who process data on our instructions: hosting and database (Supabase, servers in the European Union; Vercel), email delivery, payment processing, identity verification and customer support tools;
- Professional advisers, such as lawyers and auditors.
We do not sell personal data.
5. International transfers
Some service providers store or process data outside the UAE, including in the European Union and the United States. We use providers that offer adequate protection, and contractual safeguards where the law requires them.
6. How long we keep it
- Account data: while your account is open and for up to two years after it closes, unless a longer period applies below.
- KYC and transaction records: for the period anti-money-laundering law requires, which is at least five years after the business relationship ends or the transaction is completed.
- Contracts, invoices and tax records: for the periods required by UAE commercial and tax law.
- Marketing data: until you unsubscribe.
- Security logs: up to twelve months.
7. Your rights
Subject to the law, you can ask us to:
- give you a copy of your personal data (you can also download it from your account);
- correct inaccurate data;
- delete your data, where we are not required to keep it;
- restrict or object to processing based on legitimate interests;
- transfer the data you gave us to you or another provider; and
- withdraw consent at any time, without affecting earlier processing.
Write to contact@dubai-assets.com or use the Privacy and data page in your account. We reply within one month. You can also complain to the UAE Data Office or, in the EEA or UK, to your local data protection authority.
8. Security
We protect personal data with access controls, encryption in transit, private storage for identity documents with short-lived access links, audit logs and staff training. Only staff who need identity documents for verification can see them.
9. Automated decisions
We do not make decisions with legal effects about you based only on automated processing. Identity verification is reviewed by our compliance staff.
10. Changes
We will tell you about material changes to this policy by email or in your account. The current version and its date are shown at the top of this page.