Skip to content

Privacy notice

Last updated 20 September 2026

Draft for legal review. Not yet the binding version.

1. Controller

Palm Stone Real Estate Broker LLC, Dubai, United Arab Emirates. E-mail: hello@palmstone.ae.

2. Data we process

Enquiries (property search, contact, project request, report request): name, e-mail address, phone number, your search criteria or message, language, time, and a hash of your IP address for abuse prevention. The IP address itself is not stored.

Proof of consent: e-mail address, purpose, version of the consent wording, language, time, IP hash.

Usage data: with your consent, analytics through Google Tag Manager and Microsoft Clarity. Without consent these services are not loaded.

3. Purposes and legal bases

Our house is based in Dubai. Processing is governed by Federal Decree-Law No. 45 of 2021 of the United Arab Emirates on the Protection of Personal Data (PDPL).

Handling your enquiry, preparing matching options and contact by an advisor: your consent and steps prior to entering a contract (Art. 4 PDPL).

Abuse prevention (rate limits, spam detection, Cloudflare Turnstile): our legitimate interest in operating the site securely.

Analytics and marketing: only with your consent, which you can withdraw at any time.

If you contact us from the European Economic Area, we additionally apply the standards of the GDPR to your data as far as it applies to us.

4. Recipients

Internal handling by Palmstone Properties advisors. Technical service providers acting as processors: hosting (Vercel), database and storage, e-mail delivery (Resend), abuse protection (Cloudflare), and after consent Google and Microsoft. These providers also process data outside the UAE; we bind them contractually to an adequate level of protection as the PDPL requires.

Your details are passed to a developer only with your explicit agreement in the course of a specific purchase.

5. Retention

Enquiries without further contact are deleted or anonymised 24 months after the last communication. Where a contract is concluded, statutory retention periods apply. Proof of consent is kept for the duration of the consent and three further years. The cookie holding your cookie choice lasts 12 months, the cookie holding your search result 24 hours.

6. Your rights

Under the PDPL you have the right of access, rectification, erasure, restriction, data portability and objection. You can withdraw consent at any time with effect for the future, by e-mail to hello@palmstone.ae or through Cookie settings.

Complaints can be addressed to us at hello@palmstone.ae or to the UAE Data Office. Visitors from the European Economic Area may also contact their local supervisory authority.

7. Cookies

Essential: language (PALMSTONE_LOCALE, 12 months), cookie choice (ps_consent, 12 months), search result (ps_find, 24 hours). Analytics and marketing only after consent.