Privacy policy

Version 1.0 · Last updated 14 November 2026. This policy explains what personal data Inside Realty collects through insiderealty.ae, why, who receives it, how long we keep it and what rights you have. It is written to meet the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and, for visitors in the European Union, the European Economic Area and the United Kingdom, the General Data Protection Regulation (EU GDPR and UK GDPR).

1. Who we are

The controller of your personal data is INSIDE PREMIUM PROPERTIES LLC, a company registered in the United Arab Emirates and trading as Inside Realty (“we”, “us”). Head office: Office 12, M floor, Golden Mile 8, Palm Jumeirah, Dubai, UAE. Second office: Office 1403, Arenco Tower, Dubai Media City, Dubai, UAE.

For any question about your data or to exercise your rights, write to [email protected] with the subject “Personal data”, or call +971 4 261 8838.

2. What this policy covers

This policy covers the website insiderealty.ae in all its languages, its forms, the property valuation chat and the messages you send us from the website. When you deal with us outside the website — at a viewing, by contract or through a property portal — the documents of that deal and the law that governs it apply in addition.

3. The data we collect

3.1 Data you give us

• Contact details: your name, phone number with the country code, and email address if you give it.
• Your request: the text of your message and the answers of the form you fill in — for example the project or listing you ask about, the preferred day and time of a viewing, the budget range, whether you want to buy, sell, rent or let out, the building and the unit, the furnishing, the handover date, your residency status and monthly income range for a mortgage, the service you need.
• Files: a CV if you apply for a job; a title deed, Oqood, sales and purchase agreement or photo of your property if you ask for a valuation. These documents may contain more personal data (such as your passport details) than we need: please send only what the form asks for.
• Messages: what you write to us in WhatsApp, by phone or by email after you contact us from the website.

3.2 Data collected automatically

• Technical data: your IP address, browser and device type, the address of the page you sent a form from, and the time of the request. Our servers record them to deliver the request and to protect the forms from abuse.
• Where you came from: the advertising campaign tags in the link that brought you (utm parameters and click identifiers such as gclid, fbclid, msclkid, ttclid or li_fat_id), the referring website and the first page you opened. The website keeps them in your browser (local storage, keys ir:first and ir:last) and sends them with your request, together with the Meta browser identifier (cookie _fbp), so we know which advertisement or page brought it.
• Cookies and similar technologies of the analytics and advertising services described in section 9, including session recordings by Microsoft Clarity and Yandex Metrica Session Replay, which show how pages are used.

Data we receive from others: sometimes your request reaches us from a partner agent, a developer, a property portal or a person who contacted us for you. In that case we tell you where we got your data when we first contact you.

We do not ask for and do not want special categories of data (health, religion, racial or ethnic origin, political views, biometrics). We do not knowingly collect data of children (see section 11).

4. Why we use your data and on what legal basis

We do not sell your personal data and do not make decisions about you by automated means only. Where we rely on consent, you can withdraw it at any time (section 8); this does not affect what was done before.

You do not have to give us personal data. To reply to a request we need your name and phone number; without them we cannot reply. Other fields are optional and help us answer more precisely. For a valuation we need the documents the form asks for. If you go ahead with a transaction, the law requires us to verify your identity, and we cannot complete the transaction without it.

5. Who receives your data

• Our team: the broker, consultant or manager who handles your request, and staff who need the data for their work. Access is limited to what each role needs.
• Service providers that process data for us under our instructions: Hetzner Online GmbH (the website server, Finland), Cloudflare, Inc. (network delivery, storage of website files and passing your requests to our lead service), our lead-routing service run by the Inside group, Bitrix24 (cloud customer relationship system), Meta Platforms / WhatsApp (when you message us in WhatsApp), and the analytics and advertising services listed in section 9. For Meta Pixel, Meta Platforms Ireland Ltd and we are joint controllers for collecting your data on the website and sending it to Meta; Meta is responsible for what it does with the data afterwards, as described in its own privacy policy.
• Partners, only when the step you asked for needs them, or with your consent: a property developer (to register you for a project or a booking), a bank or mortgage adviser (if you ask for mortgage options), a partner contractor for renovation, inspection or property management, a landlord or tenant in a rental you ask about.
• Authorities: the Dubai Land Department, the Real Estate Regulatory Agency, courts, police or other public bodies when the law requires it.
• A buyer of our business or of a part of it, under the same protection, if this ever happens.

6. Transfers outside the UAE

Some of our service providers process data outside the UAE: in the European Union (Hetzner), in the United States (Google, Meta, Microsoft), on Cloudflare’s global network, in Bitrix24’s cloud data centres and in the Russian Federation (Yandex). We transfer data only as the PDPL allows (art. 22 and 23). For data covered by the GDPR or UK GDPR we rely on the EU–US Data Privacy Framework and its UK Extension for certified US providers, and otherwise on the European Commission’s standard contractual clauses (with the UK Addendum) where the provider offers them. You can ask us for a copy of the safeguards for a specific transfer.

7. How long we keep your data

When the period ends, we delete the data or make it anonymous.

8. Your rights

Within the limits set by the law that applies to you, you have the right to:

• access your data and receive a copy of it;
• correct inaccurate or incomplete data;
• erase your data (“right to be forgotten”), unless we must keep it by law;
• restrict the processing while a question about it is being resolved;
• object to processing based on our legitimate interest, and at any time to direct marketing;
• receive the data you gave us in a structured, machine-readable form and have it sent to another organisation (data portability);
• withdraw your consent at any time, including to new-listing alerts; refuse cookies in your browser settings (section 9);
• complain to a supervisory authority: in the UAE, the UAE Data Office; in the EU, the data protection authority of the country where you live, work or where the issue happened; in the UK, the Information Commissioner’s Office (ICO). We would appreciate the chance to resolve your concern first.

Write to [email protected]. We may ask you to confirm your identity before we act on a request. We answer within one month; if a request is complex, we may extend this by up to two more months, as the law allows, and will tell you why within the first month. Exercising your rights is free of charge.

9. Cookies and analytics

The website loads the services below for every visitor after your first interaction with a page or about 6 seconds after it opens; it does not ask for your consent first. They set cookies or similar identifiers in your browser. The campaign tags in section 3.2 are kept in your browser’s local storage for the same purpose of measuring our advertising.

You can refuse or delete cookies in your browser settings, use the browser’s private mode, or use the providers’ own tools: the Google Analytics opt-out add-on, the ad settings of your Facebook account, and Yandex Metrica’s opt-out. Refusing these cookies does not stop the forms of the website from working. We have set up Microsoft Clarity and Yandex Metrica to hide what you type into form fields in their recordings. The rest of the page you see, such as the listings you open, is recorded.

10. Messages and new-listing alerts

After you send a request, a broker contacts you about that request by phone, WhatsApp or email. If you save a search, we send you new matching listings on WhatsApp. To stop any of these messages, reply “STOP” (or “СТОП”) or write to [email protected]; we will stop within a working day.

11. Children

The website is meant for adults. We do not knowingly collect personal data of anyone under 18. If you believe a child has sent us data, write to us and we will delete it.

12. How we protect your data

The website and the forms work over an encrypted connection (HTTPS). Access to requests is limited to the staff who need it and is protected by personal accounts. Logs of the lead service on the website server hide names, phone numbers, email addresses, messages and files. Our service providers are bound by contracts to protect the data and to use it only for our purposes. If a breach of your data puts you at risk, we will inform you and the competent authority as the law requires.

13. Changes to this policy

We update this policy when our services or the law change. The version number and the date at the top show the current edition. If a change affects how we use the data you already gave us, we will tell you before it applies.

14. Contact

INSIDE PREMIUM PROPERTIES LLC (Inside Realty), Office 12, M floor, Golden Mile 8, Palm Jumeirah, Dubai, UAE · [email protected] · +971 4 261 8838.