Privacy Policy
Exactly what we collect, why we collect it, and who it is shared with — under UAE Federal Decree-Law No. 45 of 2021 (PDPL).
This Privacy Policy explains how VIP Dubai Off Plan ("we," "us," or "our"), operating at vipdubaioffplan.com, collects, uses, stores, discloses and protects personal data, in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). We have written it to be specific rather than generic: section 3 lists every category of data we actually collect, and section 6 names every party it is shared with.
1. Data Controller Information
VIP Dubai Off Plan is the data controller responsible for personal data collected through this website and its associated communication channels.
- Business Name: VIP Dubai Off Plan
- Website: vipdubaioffplan.com
- Office Address: Marina Plaza, Dubai Marina, Dubai, UAE
- Phone / WhatsApp: +971 50 438 0503
- Data Inquiries: vipdubaioffplan.com/contact/
For any data protection enquiry, a request to exercise your rights, or a concern about how your data is handled, use the channels above.
2. Scope of This Policy
This Privacy Policy applies to personal data collected through:
- The website vipdubaioffplan.com and all of its pages
- The inquiry and contact forms hosted on this website
- Telephone and WhatsApp conversations initiated from the contact details published here
- Analytics and security technologies operating on this website
It does not cover third-party websites you reach from our links — including developer websites and government portals — which operate under their own privacy policies.
3. Exactly What Personal Data We Collect
We collect three categories of data, and nothing else. We do not ask for or store passport details, Emirates ID numbers, bank details, proof of funds or any financial documentation through this website.
3.1 Contact form and inquiry data
Submitted by you, voluntarily, when you send an inquiry:
| Data | Why we collect it |
|---|---|
| Full name | To address you correctly and to identify your inquiry in follow-up correspondence |
| Email address | To reply to your inquiry and send the property or market information you asked for |
| Phone number | To respond by call or WhatsApp where that is faster than email, particularly across time zones |
| Your message | To understand your budget, timeline and objective so the response is relevant rather than generic |
Inquiry submissions are protected by Cloudflare Turnstile (bot verification), a hidden honeypot field and a submission-timing check. These anti-spam measures are described in section 5.
3.2 Analytics data
Collected automatically, in aggregate, through Google Analytics 4 (GA4) and Cloudflare Web Analytics:
- Pages visited, time on page, and the sequence of pages in a session
- Approximate geographic location, derived at country or city level
- Device type, browser, operating system and screen size
- How you arrived at the site — search, direct, referral or social
- Interaction events such as clicking a WhatsApp link, a phone number or a form submission
Why: to understand which research and guides are actually useful, to find pages that load slowly or fail on particular devices, and to decide what to publish next. IP addresses are anonymised within GA4, and Cloudflare Web Analytics is cookieless and does not fingerprint visitors.
3.3 First-touch attribution data — coming soon
We are preparing to add first-touch attribution to inquiry submissions. It is not currently active. We are disclosing it here in advance so that this policy is accurate on the day it is enabled rather than after. When it goes live, the following will be captured at the moment of your first visit and attached to any inquiry you subsequently submit:
| Data | Why we will collect it |
|---|---|
| Landing page | To know which article or area profile brought you in, so we can keep producing the research that works |
| Referrer | To identify which search engines, publications or referring sites send genuinely interested readers |
| UTM parameters (source, medium, campaign, term, content) | To measure which campaigns and content produce real inquiries rather than raw traffic |
| Approximate location from a truncated IP address | To understand which countries our investor audience comes from. The IP address is truncated before storage and is not retained in full |
This data is used for attribution and audience analysis only. It is not used to build advertising profiles, it is not sold, and it is not combined with third-party data brokers. This section will be updated with an activation date when the feature goes live.
4. Legal Basis for Processing
Under Article 4 of the PDPL, we process personal data on the following bases:
- Consent — you choose to submit an inquiry form or contact us directly, having been told what happens to that data
- Legitimate interest — operating, securing and improving the website, and understanding aggregate audience behaviour
- Necessity for a requested service — responding to your inquiry, which cannot be done without your contact details
- Legal obligation — where retention or disclosure is required by applicable UAE law
You may withdraw consent at any time by contacting us. Withdrawal does not affect processing carried out before the withdrawal.
5. How We Use Your Personal Data
- To respond to your inquiry with relevant property and market information
- To refer your inquiry to the licensed broker so that regulated advice can be given (see section 6)
- To follow up on a conversation you have started, by email, phone or WhatsApp
- To detect and block spam and automated abuse of our forms
- To analyse aggregate website performance and improve the research we publish
- To comply with legal or regulatory obligations
We do not sell personal data. We do not rent, trade or share it with unrelated third parties for their own marketing. We do not resell inquiries to a panel of agents.
6. Who Your Data Is Shared With
Beyond that referral, personal data is shared only with the service providers that operate this website:
| Recipient | Purpose |
|---|---|
| Mazen Alzoubi — eXp Real Estate Dubai | To respond to and advise on your inquiry under Dubai Broker License (BRN) 76380 |
| Cloudflare, Inc. | Website hosting, content delivery, DDoS protection, cookieless analytics and Turnstile bot verification |
| Google LLC (Google Analytics 4) | Aggregate website analytics with IP anonymisation enabled |
| Resend | Transactional email delivery — routing your inquiry from the website to the inbox that handles it |
We may also disclose personal data where required by law, court order or a competent UAE authority, or where necessary to establish, exercise or defend a legal claim.
7. Cookies and Local Storage
This website uses a deliberately small number of client-side technologies:
| Technology | Type | Purpose |
|---|---|---|
| Google Analytics 4 (_ga, _ga_*) | Analytics cookie | Distinguishes visitors and sessions for aggregate reporting. IP anonymisation enabled |
| Cloudflare Web Analytics | Cookieless | Privacy-preserving traffic measurement with no cookie and no fingerprinting |
| Cloudflare Turnstile | Security | Verifies that a form submission is human rather than automated |
| a11y-prefs (localStorage) | Functional | Remembers your accessibility settings — contrast, text size, reduced motion. Stays in your browser and is never transmitted to us |
We do not run advertising or retargeting cookies, and no Meta Pixel or comparable advertising tag is active on this website. You can block or delete cookies through your browser settings; the site remains fully functional without them, though analytics accuracy is reduced.
8. Data Retention
- Inquiry and correspondence data — retained for as long as needed to handle your inquiry and any resulting relationship, and thereafter only as required by applicable law. You may request deletion at any time
- Analytics data — retained according to the platform's configured retention window (GA4 default is 14 months); Cloudflare Web Analytics data is aggregate and non-identifying
- Attribution data (once active) — retained with the associated inquiry record and deleted when that record is deleted
- Security and bot-verification data — retained only transiently for the verification itself
9. International Data Transfers
Our service providers operate global infrastructure, so personal data may be processed on servers outside the UAE — principally in the United States and the European Union. Where the PDPL requires it, transfers rely on appropriate safeguards, including the contractual data-protection terms offered by Cloudflare, Google and Resend.
10. Your Rights Under the PDPL
Under UAE Federal Decree-Law No. 45 of 2021 you have the right to:
- Access — obtain confirmation of whether we hold personal data about you, and a copy of it
- Rectification — have inaccurate or incomplete data corrected
- Erasure — request deletion of your personal data, subject to legal retention requirements
- Restriction — request that processing be limited in defined circumstances
- Objection — object to processing based on legitimate interest
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent — at any time, without affecting prior lawful processing
- Complain — lodge a complaint with the competent UAE data protection authority
To exercise any of these rights, contact us using the details in section 1. We respond within 30 days and may ask you to verify your identity before acting on a request.
11. Data Security Measures
- HTTPS/TLS encryption across the entire website
- Content Security Policy and related HTTP security headers
- Cloudflare DDoS protection and edge security
- Cloudflare Turnstile, honeypot fields and submission-timing checks on all forms
- Input length limits, validation and content filtering on form submissions
- Credentials and API keys held in environment variables, never in source code
- A static site architecture with no public database of visitor records
No method of transmission or storage is completely secure. We take reasonable and appropriate measures but cannot guarantee absolute security.
12. Children's Privacy
This website is intended for adults evaluating property investment. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data, contact us and we will delete it.
13. Links to External Websites
We link to developer websites, government portals such as dubailand.gov.ae, and other third-party resources. Once you follow such a link, this policy no longer applies and the destination site's own privacy practices govern.
14. Marketing Communications
We contact you in response to your inquiry and to continue a conversation you have started. If we introduce an optional newsletter or update list in future, it will be opt-in, and every message will carry a one-click unsubscribe. You can ask us to stop contacting you at any time and we will action it immediately.
15. Changes to This Privacy Policy
We update this policy when our data practices change — including when the first-touch attribution described in section 3.3 is activated. The "Last Updated" date at the top of this page always reflects the current version. Material changes will be made prominent on the website.
16. Contact and Data Inquiries
For any question about this policy or about your personal data:
- Phone / WhatsApp: +971 50 438 0503
- Contact form: vipdubaioffplan.com/contact/
- Address: Marina Plaza, Dubai Marina, Dubai, UAE
Related pages: Terms of Service, Disclaimer, and How We Work, which explains in plain language how inquiries are handled and by whom.