Privacy Policy

1. Introduction

SELLING DUBAI ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including our website and related applications (collectively, the "Service").

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service. If you have questions or concerns about this Privacy Policy, please contact us at support@sellingdubai.ae.

2. Scope and Applicability

This Privacy Policy applies to:

• Real estate agents and brokers ("Agents") who use our platform
• Property leads and prospective buyers/renters
• Any user who accesses our Service

We are GDPR-aware and serve many European expats in Dubai. We comply with both the General Data Protection Regulation (GDPR) and UAE data protection law, including Federal Decree-Law No. 45 of 2021 (UAE Data Protection Law).

3. Information We Collect

We collect information in the following ways:

3.1 Information You Provide

• Agent Profiles: Name, email address, phone number, WhatsApp number, real estate license information, company details, and professional qualifications
• Lead Information: Names, email addresses, phone numbers, property interests, budget range, and communication preferences of property prospects
• Property Listings: Property details, location, photos, pricing, amenities, and descriptions
• Account Information: Login credentials, payment information, and account preferences
• Communications: Messages, inquiries, feedback, and support requests sent through the Service

3.2 Information Collected Automatically

• Page Analytics: Pages visited, time spent, click patterns, and user interactions tracked via analytics tools
• Device Information: IP address, browser type, operating system, device identifiers, and mobile network information
• Cookies and Tracking: We use cookies, web beacons, and similar tracking technologies to understand how users interact with our Service
• Location Data: General location information based on IP address or GPS (with permission)

3.3 Third-Party Information

We may receive information from third parties, including WhatsApp Business API, to facilitate communication and verify account ownership.

4. How We Use Your Information

We use the information we collect for the following purposes:

4.1 Service Delivery

• Creating and managing user accounts
• Displaying agent profiles and property listings
• Facilitating connections between agents and leads
• Processing transactions and payments
• Providing customer support and technical assistance

4.2 Communication

• Sending transactional emails and SMS notifications
• WhatsApp messaging for property inquiries and updates
• Marketing communications (with opt-in consent where required)
• Responding to inquiries and requests

4.3 Analytics and Improvement

• Analyzing user behavior and Service usage patterns
• Understanding market trends in Dubai real estate
• Improving Service features and functionality
• Personalizing user experience
• Conducting research and generating anonymized reports

4.4 AI-Powered Features

We use Anthropic Claude API to generate AI-powered property descriptions and market insights. Submitted property data is processed by Claude to generate professional listings. We do not train Claude models on your proprietary data.

4.5 Legal and Compliance

• Complying with applicable laws and regulations
• Detecting and preventing fraud and abuse
• Enforcing our Terms of Service and other agreements
• Protecting the security and integrity of our Service

5. Data Storage and Location

Your data is primarily stored on Supabase (our database provider) with hosting infrastructure located on Netlify. Your data may be processed in the following locations:

• United Arab Emirates (primary processing location)
• European Union (for GDPR compliance and redundancy)
• United States (for certain API services including Anthropic Claude)

We implement appropriate safeguards for international data transfers in compliance with GDPR Standard Contractual Clauses and UAE data protection requirements.

6. Legal Basis for Processing (GDPR)

For EU users and European expats in Dubai, we process your data based on the following legal bases:

7. Data Sharing and Disclosure

We may share your information in the following circumstances:

7.1 Service Providers

We share data with third-party service providers to operate and improve our Service:

• Supabase: Database hosting and data storage
• Netlify: Web hosting and deployment
• Resend: Email delivery and management
• Anthropic Claude API: AI-powered property descriptions
• WhatsApp Business API: Messaging and communication

7.2 Between Agents and Leads

Lead information is shared with agents to facilitate property inquiries and transactions. Lead contact information (phone number, email, WhatsApp) may be visible to matched agents.

7.3 Legal Requirements

We may disclose information when required by law, regulation, court order, or government request. We will provide notice of such requests where legally permissible.

7.4 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice and appropriate protections.

7.5 With Your Consent

We may share information with third parties when you explicitly consent to such sharing.

8. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy:

• Active User Accounts: Retained during active use plus 12 months after account closure
• Lead Information: Retained for 24 months or until property transaction completion, whichever is longer
• Analytics Data: Retained for 24 months
• Legal/Compliance Records: Retained as required by applicable law (minimum 5 years)

You may request deletion of your data subject to legal retention requirements by contacting support@sellingdubai.ae.

9. Your Privacy Rights

9.1 GDPR Rights (EU Users and European Expats)

If you are subject to GDPR, you have the following rights:

• Right of Access: You can request access to your personal data
• Right to Rectification: You can request correction of inaccurate data
• Right to Erasure: You can request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: You can restrict how we use your data
• Right to Data Portability: You can request your data in a portable format
• Right to Object: You can object to certain processing activities
• Right to Withdraw Consent: You can withdraw consent at any time

9.2 UAE Data Protection Rights

Under UAE Federal Decree-Law No. 45 of 2021, you have the right to:

• Know what personal data is being collected and why
• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion of data under certain circumstances
• Opt-out of direct marketing communications

9.3 Exercising Your Rights

To exercise any of these rights, contact us at support@sellingdubai.ae with your request. We will respond within 30 days (or as required by applicable law). You may also designate an authorized agent to submit requests on your behalf.

10. Security Measures

We implement comprehensive security measures to protect your personal data:

• Encryption: Data in transit (TLS/SSL) and at rest using industry-standard encryption
• Access Controls: Role-based access and authentication requirements
• Data Minimization: We collect only necessary data
• Regular Audits: Security assessments and vulnerability testing
• Incident Response: Breach notification procedures in compliance with applicable law
• Staff Training: Employees trained on data protection and privacy practices

While we maintain robust security measures, no system is completely secure. If you believe your data has been compromised, please contact us immediately at support@sellingdubai.ae.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for Service functionality (login, security)
• Analytics Cookies: Used to understand user behavior and improve features
• Marketing Cookies: Used with consent for targeted marketing

Most browsers allow you to control cookie settings through browser preferences. You can opt-out of analytics tracking by contacting support@sellingdubai.ae.

12. Third-Party Services

Our Service integrates with third-party providers. Their privacy practices are governed by their own privacy policies:

• Supabase: https://supabase.com/privacy
• Netlify: https://www.netlify.com/privacy/
• Resend: https://resend.com/privacy
• WhatsApp Business: https://www.whatsapp.com/legal/privacy-policy

We are not responsible for third-party privacy practices. Please review their policies independently.

13. Children's Privacy

Our Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will promptly delete such information.

14. Contact Us for Privacy Matters

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

15. GDPR Data Protection Authority

If you believe we have violated your GDPR rights, you have the right to lodge a complaint with your local data protection authority. EU residents can find their national DPA at https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_en.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. We will notify you of material changes via email or through the Service. Your continued use of the Service following such notifications constitutes your acceptance of the updated Privacy Policy.

17. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. By using our Service, you consent to such transfers. We ensure appropriate safeguards are in place, including Standard Contractual Clauses for GDPR-compliant transfers.

18. Data Processing Agreement

For business customers and agents, we can provide a separate Data Processing Agreement (DPA) to supplement this Privacy Policy. Please contact privacy@sellingdubai.ae to request a DPA.

Effective Date: March 25, 2026