Thank you for visiting IST Real Estate (“we“, “us“, or “our“). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit istrealestate.ae (the “Website“), contact us via our Contact page, submit property enquiries, subscribe to updates, or use any related services (collectively, the “Services“).

Important: This Policy is designed for audiences in the United Arab Emirates (UAE) and includes additional notices for visitors from the European Economic Area (EEA/UK). It is not legal advice. Please review and adapt it to your specific operations, technologies, and regulatory obligations.

1) Who we are (Data Controller)

Entity name: IST Real Estate / IST Real Estate LLC
Registered address: Tamani Arts Offices, No: 950, Business Bay, Dubai – UAE
Email : info@istrealestate.ae
Telephone: +971 (523) 04 11 68

We determine the purposes and means of processing your personal data for the Services.

2) What data we collect

We collect information in the following categories:

a) Information you provide to us

Contact forms / enquiries: name, email, phone number, preferred contact method, message details, property preferences, budget, location of interest, and any other information you choose to provide.
Viewings / bookings: identity information, availability, property interest, and notes related to your enquiry.
Marketing subscriptions: name, email, consent preferences.
Business communications: correspondence via email, phone, messaging apps, or in person.

b) Information collected automatically

Device & usage data: IP address, device identifiers, browser type, operating system, referring URLs, pages viewed, links clicked, time spent, and approximate location derived from your IP address.
Cookies & similar technologies: cookies, pixels, tags, SDKs used for essential site functions, analytics, performance, and (where enabled) advertising/retargeting. See Section 10 (Cookies).

c) Information from third parties

Lead sources & partners: portals and listing partners that share your enquiry with us when you opt-in to contact an agent.
Service providers: analytics, hosting, security, and communication platforms.
Public sources: property records, publicly available profiles, and market databases where lawful.

We do not seek to collect special categories of data (e.g., health, religious beliefs) or criminal offence data. Please avoid sharing such information.

3) Why we use your data (Purposes)

We process personal data for the following purposes:

Provide services: respond to enquiries, schedule viewings, match you with suitable properties, and manage client relationships.
Operate the Website: deliver pages, maintain security, prevent fraud, fix errors, and ensure availability.
Analytics & improvement: measure traffic and engagement to improve our listings and user experience.
Marketing (with your consent where required): send property alerts, newsletters, promotions, and market insights.
Legal & compliance: comply with applicable laws, respond to lawful requests, enforce our terms, and defend legal claims.

4) Our legal bases for processing

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, “PDPL”), we rely on one or more of the following bases:

Consent (e.g., for direct marketing cookies or communications where required);
Contract (to take steps at your request before entering into a contract or to perform a contract with you);
Legitimate interests (e.g., to operate, secure, and improve our Services, and to grow our business, provided your rights do not override);
Legal obligation (to comply with applicable laws and regulations).

For visitors in the EEA/UK (GDPR/UK GDPR): we rely on consent, contract, legitimate interests, and legal obligation as applicable, and we honour your rights set out in Section 8.

5) Who we share data with

We share personal data only as necessary and subject to appropriate safeguards:

Service providers / processors: hosting, CRM, email/SMS, analytics, security, customer support, and telephony providers;
Professional advisers: auditors, legal counsel, and insurers where necessary;
Business partners & portals: where you requested or consented to be contacted by multiple agencies/partners;
Authorities & regulators: where required by law or to protect rights, property, or safety;
Corporate transactions: in connection with a merger, acquisition, or asset transfer (subject to confidentiality and applicable law).

We do not sell personal data.

6) International transfers

Your data may be transferred to and processed in countries outside your country of residence (including outside the UAE/EEA/UK). We implement appropriate safeguards, such as contractual protections. For transfers from the EEA/UK, we may use Standard Contractual Clauses (SCCs) or rely on adequacy decisions or other permitted mechanisms.

7) Data retention

We keep personal data only for as long as necessary to fulfil the purposes outlined in this Policy, including to meet legal, accounting, or reporting obligations. Typical retention periods are:

Enquiry records: up to [24 months] from last interaction, unless you request deletion earlier or we are required to keep them longer;
Marketing records: until you unsubscribe or withdraw consent;
Compliance & disputes: as needed for statutory limitation periods.

We will securely delete or anonymise data when retention is no longer required.

8) Your privacy rights

Depending on your location, you may have the right to:

Access your personal data and obtain information about how we process it;
Rectify inaccurate or incomplete data;
Erase your data (the “right to be forgotten”) where applicable;
Restrict or object to processing, including profiling based on legitimate interests;
Data portability (receive your data in a structured, commonly used format);
Withdraw consent at any time where processing is based on consent (e.g., marketing);
Complain to a supervisory authority (e.g., the UAE Data Office; for EEA/UK visitors, your local data protection authority).

To exercise your rights, please contact us using the details in Section 1. We may need to verify your identity before responding.

9) Marketing communications

You can opt out of marketing at any time by clicking “unsubscribe” in our emails or contacting us. We may still send non-marketing messages related to your enquiries or transactions.

10) Cookies and similar technologies

We use cookies and similar technologies to run the Website and improve your experience. Categories include:

Strictly necessary: required for core functions such as page navigation and access to secure areas;
Performance/analytics: help us understand how visitors use the Website (e.g., page views, time on site);
Functionality: remember choices (e.g., language, search filters);
Advertising/retargeting (if enabled): deliver relevant ads and measure campaign performance.

Where required by law, we will request your consent before setting non-essential cookies. You can manage preferences via our cookie banner or your browser settings. Blocking certain cookies may affect site functionality.

11) Security

We implement technical and organisational measures to protect personal data, including encryption in transit (HTTPS), access controls, and regular monitoring. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

12) Third‑party links and services

The Website may include links to third-party sites, plug-ins, and widgets (e.g., map services, messaging apps, property portals). We are not responsible for the privacy practices of those third parties. Please review their policies.

13) Children’s privacy

Our Services are not directed to children under 18 in the UAE (or the applicable age threshold in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided personal data, please contact us to delete it.

14) Changes to this Policy

We may update this Policy from time to time. We will post the new version with an updated “Last updated” date. Material changes may be communicated through the Website or by email where appropriate.

15) How to contact us

If you have questions about this Policy or wish to exercise your rights, contact:

IST Real Estate
Attn: Privacy
Email: info@istrealestate.ae
Address: Tamani Arts Offices, No: 950, Business Bay, Dubai – UAE
Phone: +971 (523) 04 11 68

16) Annex – Region‑specific information (if applicable)

A) EEA/UK visitors (GDPR/UK GDPR)

Controller: IST Real Estate (see Section 1).
Legal bases: consent, contract, legitimate interests, legal obligation.
Transfers: we use SCCs or other lawful mechanisms where required.
Your rights: access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with your local authority.
Representative / DPO (if required): [Details, if appointed].

B) UAE PDPL

We process data per PDPL principles: lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity & confidentiality, and accountability.
You may submit a request to exercise rights (access, correction, erasure, restriction, portability, objection, and withdrawal of consent) using the contact details above.
We will respond within statutory timelines and may request identity verification.

17) AML Policy

You can See Our AML policy by this Link : Click Here

Privacy Policy