Privacy Policy | Shahstha Real estate

1. Introduction

Shahstha Real Estate L.L.C is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and protect the personal data of individuals in accordance with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (“PDPL”) and other relevant laws and regulations.

2. Scope

This Policy applies to all personal data we collect or process:

from clients, prospective clients, website users, property owners, tenants, visitors to our offices, or via any other means (online or offline)
through all channels including websites, social media, phone calls, email, in person, or any other forms of communication
in all emirates of the UAE, and for all business operations of Shahstha Real Estate L.L.C.

3. Definitions

Some key terms used in this Policy:

Personal Data: Any information relating to an identified or identifiable natural person.
Sensitive Personal Data: Data relating to race, religion, health, biometric data, etc., if applicable.
Processing: Any operation performed on personal data, such as collection, storage, use, disclosure, etc.
Data Subject: The individual whose personal data is processed.

4. What Personal Data We Collect

We may collect the following types of personal data, depending on the nature of our relationship with you:

Identity / Contact Information: name, date of birth, gender, nationality, passport or Emirates ID number, address, telephone/mobile number, email address.
Financial & Transaction Data: bank account or payment details, property ownership or title documents, transaction history, rent / purchase / sale details.
Property / Real Estate Data: property preferences, address of property, specifications, usage, photographs, plans.
Usage / Technical Data: IP address, browser type, operating system, device information, website usage, cookies and tracking technologies.
Communications Data: correspondence with us (email, phone, messaging, in-person), feedback, inquiries.

We may also collect sensitive data only when necessary and with explicit consent (for example in legal/compliance requirements or health data if relevant).

5. Legal Basis for Processing

We process your personal data under one or more of the following legal grounds:

With your consent (e.g. when you opt in for marketing or fill forms).
Where processing is necessary for the performance of a contract (e.g. property sale, lease agreement, services we provide).
Where processing is required to comply with a legal obligation (for example, anti-money laundering laws, regulatory requirements).
To protect legitimate interests of Shahstha Real Estate L.L.C, provided your rights and freedoms are not overridden.

6. How We Use Your Personal Data

We may use your personal data for one or more of the following purposes:

To provide, manage, and improve our real estate services (sales, leasing, property management).
To communicate with you (respond to inquiries, send notices, updates).
To schedule property viewings, inspections, appraisals.
To process payments, contracts, document legal/compliance obligations.
To send you marketing materials, newsletters, offers (only if you have consented).
To conduct internal analytics, improve website / service performance.
To detect, prevent, or address fraud, illegal activities, or other misconduct.

7. Sharing / Disclosure of Personal Data

We may share your personal data with third parties in the following circumstances:

With our service providers, agents, contractors (e.g. payment processors, CRM providers, property managers) to assist us in providing our services.
With regulatory / governmental authorities as required by law.
With other real estate parties (owners, buyers, tenants) where necessary to carry out transactions.
With your consent, for example for marketing partner offers.
In the event of a business transfer (sale, merger, reorganization) the purchaser or successor will have access to personal data under similar obligations.

We will never sell your data for profit.

8. Data Retention

We will retain your personal data:

as long as required for the purposes for which it was collected;
or as required by law (for example, keeping transaction records, AML obligations, etc.);
once no longer needed, we will securely delete or anonymize it.

9. Data Security

We use appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. Measures may include:

encryption of sensitive data;
secure servers and networks;
access controls and authentication;
staff training on data privacy;
periodic reviews and audits.

10. Cross-Border Data Transfers

If we transfer your personal data outside the UAE (for example to service providers in other countries), we ensure that such transfer is conducted in compliance with PDPL requirements. This may involve ensuring that the destination country provides adequate data protection, or using contractual safeguards, or obtaining your consent where required.

11. Your Rights

Under PDPL, you have certain rights in respect to your personal data:

Right of Access: request confirmation whether we are processing your data and request a copy.
Right of Correction: correct errors or incomplete data.
Right to Erasure: request deletion of your personal data, subject to legal or contractual constraints.
Right to Restrict Processing: ask us to limit processing under certain circumstances.
Right to Object: object to processing if on grounds relating to your particular situation.
Right to Withdraw Consent: withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact us at the contact details below. We will respond within any statutory timeframes under the law.

12. Cookies and Tracking Technologies

We use cookies, pixels, and other tracking technologies on our website and online services to:

understand how you use our website;
improve user experience;
deliver personalized content and advertising (only with consent, where required).

You may control or disable cookies via browser settings; however, this may affect certain features of the website.

13. Children’s Privacy

Our services are not intended for minors under [18] years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected personal data from a minor without parental / guardian consent, we will take steps to remove that data.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on our website and indicate the “Last Updated” date. If we make material changes, we may notify you (e.g. by email) so you can review the changes before they become effective.

15. Contact Information

If you have questions, concerns, or requests regarding this privacy policy or your personal data, you may contact us:
+971 56 692 7245
info@shahstharealestate.ae