Dubai Off Plan Hub respects the privacy of people who browse the website, submit a property enquiry or use its public data services. We aim to collect only the information needed to operate the platform, respond to requests and protect its services.
Information we may collect
Information you provide
When you use the contact form, we may receive your name, email address, telephone number, subject and message. Your message may include a project, community, developer, budget, preferred property type or other information you choose to provide. Please do not include sensitive personal or financial information that is unnecessary for the enquiry.
If API client registration is available, we may receive an account or business name, contact details, plan information and administrative records related to the account. API secrets are designed to be stored as secure hashes; users are responsible for protecting credentials displayed when they are first issued or regenerated.
Technical information
Servers may automatically record an IP address, requested page or API endpoint, HTTP method, response status, request time, browser or device information, referring page and timestamp. This information supports security, rate limiting, fault investigation, traffic measurement and reliable operation.
The website may use essential session cookies or similar storage for security and basic functionality. Further information appears in the cookie policy. If optional analytics or advertising technologies are introduced, the notice and any required consent controls should be updated before those technologies are used.
How information is used
Information may be used to respond to an enquiry, provide requested project information, maintain contact history, administer API access, apply usage limits, investigate errors, prevent misuse, improve navigation and content, protect accounts and comply with applicable legal obligations.
We do not use a contact submission as authority to complete a property purchase or financial transaction. Any later transaction requires separate documentation and agreement with the relevant parties.
API usage and security records
API logs may include the client, endpoint, method, IP address, response code, response time and timestamp. These records help apply rate limits, identify abusive or failed requests, provide usage reporting and diagnose service problems. API credentials should not be placed in public code repositories, browser-side scripts or shared messages.
When information may be shared
Dubai Off Plan Hub does not sell contact-form submissions as a list. Information may be shared with service providers that support hosting, email delivery, security, analytics or technical maintenance, subject to appropriate access restrictions. When a visitor asks for project assistance, relevant enquiry details may be shared with the appropriate developer, property representative or service provider so the request can be answered.
Information may also be disclosed when required by applicable law, a valid legal process, or when reasonably necessary to protect users, the platform or the rights and safety of others. Service providers may process information from a different country, depending on where their infrastructure operates.
Retention and security
Information is kept for as long as reasonably needed for the purpose for which it was collected, including enquiry follow-up, account administration, security, dispute handling and legal obligations. Retention periods may differ by record type. Data that is no longer required should be deleted, anonymised or securely archived where practical.
Administrative access controls, password hashing, secure sessions, transport encryption and other reasonable safeguards are used where supported by the service. No internet transmission or storage system can be guaranteed to be completely secure, so users should avoid sending unnecessary confidential information.
Your privacy choices
Subject to applicable law and reasonable identity verification, you may ask whether personal information you submitted is held, request correction of inaccurate information, ask for deletion where the information is no longer required, or raise a concern about its use. Some records may need to be retained for security, legal or operational reasons.
To make a request, use the contact page and describe the information or enquiry involved. Do not send passwords or API secrets. We may ask for enough information to locate the relevant record and confirm that the request comes from the appropriate person.
Children and policy updates
The website provides property research for a general audience and is not directed to children. We do not knowingly request personal information from children through the contact form.
This policy may be revised as the website, API, service providers or legal requirements change. The date at the top of the page identifies the current published version. Material changes should be reflected on this page before or when the revised practice begins.