Privacy Policy: DubaiDirect.ae
Last updated: June 2026
Effective date: Upon publication
1. Who We Are
DubaiDirect.ae is operated by KIND and More FZ-LLC, a company registered in the Ras Al Khaimah Economic Zone (RAKEZ), UAE, with licence number 47022978 (“DubaiDirect”, “we”, “us”, or “our”).
DubaiDirect is the data controller for personal data collected through the Platform. For all privacy-related enquiries, contact us at privacy@dubaidirect.ae.
2. Scope of This Policy
This Privacy Policy describes how we collect, use, store, and share personal data when you use our website at dubaidirect.ae and all associated services (the “Platform”). It applies to all users, including property owners and tenants.
This Policy is issued in compliance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its Executive Regulations.
3. Personal Data We Collect
3.1 Data you provide directly
| Data | Who provides it | Why we collect it |
|---|---|---|
| Full name, email address | Owners & tenants | Account creation and authentication |
| WhatsApp number, phone number | Owners | Displayed on listings so tenants can contact owners directly |
| Property photos | Owners | Published on the listing |
| Listing content (address, price, description) | Owners | Core Platform service |
| Payment card data | Owners | Subscription billing: processed by Stripe; DubaiDirect does not store card numbers |
| Identity document (Emirates ID or passport) | Owners only | Optional Verified Owner badge |
3.2 Data collected automatically
- Usage data: pages visited, search queries, listings viewed, WhatsApp button clicks
- Device and browser data: browser type, operating system, screen resolution, language
- IP address: used for approximate geolocation (country/city level) and security purposes
- Cookies and local storage: session management and analytics (see Section 8)
3.3 Tenancy data (Rental Tracking)
When an owner marks a property as rented using the Rental Tracking feature, we collect the following data on their behalf:
- Actual signed rent amount (AED)
- Security deposit amount (AED), if provided
- Lease start and end dates
- Number of cheques, individual cheque amounts, and due dates
Purpose: (a) To provide the owner with tenancy management tools: cheque payment schedule and automated reminders (email and push notification) before each due date. (b) To generate aggregated and anonymised market statistics: such as median transacted rents by community and property type: that improve our AI-powered price suggestions and negotiation scores for all users.
Confidentiality guarantee: Individual tenancy data (actual rent, deposit, cheque details) is never displayed to tenants, other owners, or any third party. Only anonymised aggregate values: not traceable to any specific property, owner, or individual lease: are used for market analysis. A minimum of three independent leases is required before any aggregate statistic is derived.
Legal basis: Contract performance (providing the tenancy tracking service requested) and legitimate interests (improving Platform market data accuracy in a manner proportionate to your privacy rights). Tenancy data is retained while your account is active. You may request deletion at any time at privacy@dubaidirect.ae.
This processing is conducted in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
4. Legal Bases for Processing
Under UAE PDPL Article 4, we process your personal data on the following legal bases:
- Contract performance: processing necessary to provide the Platform service (account, listings, subscription)
- Legitimate interests: analytics to improve the Platform, fraud prevention, security
- Legal obligation: compliance with UAE law, tax records, regulatory requests
- Consent: analytics cookies and optional identity verification, withdrawn at any time
5. How We Use Your Personal Data
- Provide and maintain the Platform and your account
- Publish your property listing and make your WhatsApp number visible to tenants
- Process subscription payments
- Send transactional emails (account confirmation, subscription receipts, listing notifications)
- Analyse usage patterns to improve the Platform
- Detect and prevent fraud, abuse, or illegal activity
- Comply with applicable UAE laws and respond to lawful government requests
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
6. Data Processors and Third-Party Services
We share personal data only with the following processors, strictly for the purposes described:
| Processor | Purpose | Data location |
|---|---|---|
| Supabase Inc. (USA) | Database, authentication, and file storage | AWS ap-southeast-2 (Sydney, Australia) |
| Stripe Inc. (USA) | Subscription payment processing | USA / EU (Stripe standard regions) |
| PostHog Inc. (USA) | Product analytics and usage statistics | EU (PostHog Cloud EU) |
| Resend Inc. (USA) | Transactional email delivery | USA / EU |
| Google LLC (USA) | Maps Embed API (displays property location on listings) | Google global infrastructure |
| Vercel Inc. (USA) | Web hosting and content delivery | Global CDN (edge nodes) |
All transfers of personal data to processors located outside the UAE rely on Standard Contractual Clauses (SCCs) as the primary legal safeguard, in accordance with UAE Federal Decree-Law No. 45 of 2021 (PDPL) Articles 22 and 23. SCCs contractually require each recipient processor to apply data protection standards equivalent to those required under UAE law.
Each processor listed above is bound by a Data Processing Agreement (DPA) that restricts their use of your personal data strictly to the purpose stated in the table above, prohibits onward transfers without our written consent, and requires them to assist us in fulfilling your data subject rights.
You may request a copy of the applicable transfer safeguards (SCCs or equivalent) by contacting us at privacy@dubaidirect.ae.
7. Data Storage and Retention
7.1 Storage location
Your account data and property listings are stored in Supabase on AWS ap-southeast-2 (Sydney, Australia). Property photos are stored in Supabase Storage in the same region.
7.2 Retention periods
| Data type | Retention period |
|---|---|
| Account data | Until account deletion request, then 30 days before permanent deletion |
| Active listings | While subscription is active, or until owner deletes the listing |
| Payment records | 5 years (UAE VAT and accounting obligations) |
| Analytics data (PostHog) | 12 months, then aggregated / anonymised |
| Identity documents (verification) | Until verification is complete, then deleted within 30 days |
8. Cookies and Analytics
DubaiDirect uses cookies and similar technologies to operate the Platform and understand how it is used.
| Cookie type | Purpose | Required? |
|---|---|---|
| Authentication (Supabase) | Keep you logged in | Yes |
| Analytics (PostHog) | Page views, search queries, feature usage (anonymised) | No: consent required |
Analytics cookies are only set after you accept them via the cookie consent banner. You can withdraw consent at any time by clearing your browser cookies or adjusting your browser settings. No advertising or third-party tracking cookies are used.
9. WhatsApp and Direct Contact
When a tenant clicks the WhatsApp button on a listing, they are redirected to WhatsApp with a pre-filled message. This communication is direct and private between the tenant and the property owner. DubaiDirect does not have access to WhatsApp conversations and is not a party to them.
The property owner’s WhatsApp number is displayed publicly on their listing. By listing a property, owners consent to this disclosure.
10. Your Rights Under UAE PDPL
Under UAE Federal Decree-Law No. 45 of 2021, you have the following rights regarding your personal data:
- Right of access: request a copy of the personal data we hold about you
- Right to rectification: request correction of inaccurate or incomplete data
- Right to erasure: request deletion of your personal data, subject to legal retention obligations
- Right to data portability: receive your data in a structured, machine-readable format
- Right to object: object to processing based on legitimate interests
- Right to withdraw consent: withdraw consent for analytics cookies at any time
To exercise any of these rights, contact us at privacy@dubaidirect.ae. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the UAE Data Office.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- TLS encryption in transit for all data exchanges
- Encryption at rest for data stored in Supabase
- Row-Level Security (RLS) policies on all database tables
- Access control: staff access to personal data is strictly limited on a need-to-know basis
- No storage of payment card numbers by DubaiDirect (handled entirely by Stripe)
In the event of a personal data breach that is likely to result in a high risk to your rights, we will notify affected users and the UAE Data Office as required by law.
12. Children’s Privacy
The Platform is not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, contact us at privacy@dubaidirect.ae and we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. If changes are material, we will notify registered users by email at least 14 days before the changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated Policy.
The date of the most recent revision is displayed at the top of this page.
14. Contact
For any questions, requests, or complaints regarding this Privacy Policy:
KIND and More FZ-LLC: Data Controller
Compass Building, Al Shohada Road
AL Hamra Industrial Zone-FZ
Ras Al Khaimah, UAE
Email: privacy@dubaidirect.ae
WhatsApp: +971524402561
This Privacy Policy has been drafted for KIND and More FZ-LLC operating dubaidirect.ae in compliance with UAE Federal Decree-Law No. 45 of 2021 (PDPL). It does not constitute legal advice. DubaiDirect recommends having this Policy reviewed by a UAE-qualified lawyer before publication.