Your privacy, plainly explained.
What we collect, why, where it goes, and what you can ask of us — in plain language, the way we’d want it explained to us.
Privacy Policy · Version Draft v3 · Last updated 13/09/2026
DRAFT — FOR LAWYER REVIEW
This page has not yet been reviewed by Ophir's lawyers, and may change before it takes effect.
This Privacy Policy explains how Ophir Properties L.L.C. collects, uses, shares and protects personal data when you visit our website or contact us through it. This Policy is written to comply with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the PDPL) and the other UAE laws that apply to a licensed real estate brokerage. Please read it together with our Cookie Policy and Terms of Use.
1. Who we are
Ophir Properties L.L.C. (“Ophir”, “we”) is a real estate brokerage licensed by the Dubai Land Department / Real Estate Regulatory Agency, Office Registration Number (ORN) 42880, with its registered office at The Onyx Tower 1, Office 704, The Greens, P.O. Box 122-209, Dubai, United Arab Emirates. We are the data controller for the personal data described in this Policy. You can reach us about anything in this Policy at [email protected], on +971 4 557 6289, or by post at the address above.
2. Where this Policy applies
This Policy covers the website at ophir.ae (the “Website”), the enquiry forms on it, the Ask Ophir assistant once it is available on it, and the follow-up contact we make in response to a website enquiry. It does not cover the brokerage services themselves, third-party websites we link to, or property portals that have their own privacy policies. Ophir is a Dubai mainland company; the data protection regimes of the DIFC and ADGM do not apply to us.
3. The personal data we collect
Data you give us. When you send an enquiry through a form on the Website, we collect what you enter: your first name, your telephone number with its country code, your email address, and your answer to “What are you looking for?”. The first three are required, because we cannot reply without them; the last is optional. We also record when you sent it, which page and form you used, and, when you enquire from a property, a Hot Offer or The Ophir Edit, which property or project it was about. If you contact us by WhatsApp, telephone or email instead, we hold what you send us in that conversation. If you use the Ask Ophir assistant once it is available, we collect the messages you type.
Data collected automatically. When you use the Website, our service providers and we process technical data: your IP address, your device and browser type, and the pages you request and when. We use your IP address, without storing it with your enquiry, to limit how many enquiries can be sent from one address and to ask Cloudflare whether a form is being filled in by a person. When you open a property’s own page, your browser loads the listing agent’s photograph directly from our CRM provider’s image server, which receives the technical data any such request carries, including your IP address. If you accept analytics or advertising cookies, Google and Meta also receive the identifiers described in our Cookie Policy, and Google may derive your approximate location from your IP address.
Testimonials. We publish client testimonials on the Website only with the client’s permission, and we show only the client’s first name and the initial of their surname — never a full name. A client can ask us to change or remove a testimonial at any time by writing to [email protected].
We do not knowingly collect personal data from anyone under 18, and the Website is not directed at them.
4. Why we use your data and our legal basis
The PDPL requires us to have a lawful basis for each use. These are ours:
| What we do | Legal basis under the PDPL |
|---|---|
| Respond to your enquiry and send you the property information you asked for | Your consent when you contact us; steps taken at your request before a contract |
| Send you marketing about properties, projects and market updates by email, WhatsApp, SMS or phone | Your consent, which you can withdraw at any time (section 5) |
| Measure and improve the Website, and understand which campaigns bring visitors | Your consent to analytics cookies |
| Show you relevant advertising on other platforms and measure it | Your consent to advertising cookies |
| Keep the Website secure, prevent spam and fraud, and protect our systems | Our legitimate interest in security; legal obligation |
| Handle complaints, disputes and legal claims | Legitimate interest; establishing, exercising or defending legal rights |
We do not make decisions about you by automated means alone that have legal or similarly significant effects. Where we use automated tools — for example our CRM assigning an enquiry to an agent, or the Ask Ophir assistant once it is available — a person at Ophir remains responsible for any decision that affects you.
5. Marketing communications
Sending an enquiry through the Website does not sign you up to marketing, and the Website has no marketing sign-up of its own. We send marketing only if you have agreed to it, for example by asking one of our agents to keep you informed about a project. You can stop at any time: use the unsubscribe link in any email, reply STOP to a message, tell the agent you are speaking to, or write to [email protected]. We will act on the request promptly, but you may still receive messages that were already in progress. Stopping marketing does not affect messages we need to send you about an active enquiry or transaction. We comply with the anti-spam rules of the Telecommunications and Digital Government Regulatory Authority and never buy or use contact lists we did not collect ourselves.
6. Cookies and tracking
The Website uses a small amount of storage in your browser that it needs to work safely, and that runs without consent. Analytics (Google Analytics) and advertising tags (Meta Pixel and Google Ads) are loaded only if you accept them in the cookie banner: you can accept all, keep to what is strictly necessary, or choose by category, and change your choice at any time from “Cookie settings” in the footer. Your choice is kept for 12 months, after which we ask again. The map of our office on the Contact page comes from Google and loads only when you press “Show map”; nothing is requested from Google before you press it. Our Cookie Policy lists each cookie and stored item, who sets it, why, and for how long.
7. “Ask Ophir” and AI-assisted features
The Ask Ophir assistant is not yet available on the Website; this section applies once it is. If you use the Ask Ophir assistant on the Website, the messages you type and the assistant’s replies are processed by an artificial-intelligence service provided by Anthropic, PBC (United States) under a contract that prohibits the provider from using your messages to train its models. We keep the conversation so that our team can follow up on your enquiry and improve the assistant. Please do not type passport numbers, financial details or other sensitive information into the assistant; an agent will collect anything we need through a secure channel. The assistant provides general information only and is not advice — see our Terms of Use.
8. Who we share your data with
We share personal data only where this Policy describes, and only what is needed. We never sell it.
- Service providers that work for us, under contracts that require them to protect your data and use it only on our instructions: our customer relationship management system, Pixxi, which receives every website enquiry (where it stores data is being confirmed); website hosting, DigitalOcean (Frankfurt, Germany); our database, which keeps a copy of every website enquiry, Supabase (India); security, content delivery, the check that protects our forms, and storage of photographs and video shown on the Website, Cloudflare (global network); email you send us, Google Workspace; error reporting, Sentry (Germany), which we set up not to send personal details; analytics and advertising measurement, Google and Meta, only if you accept those cookies; the map on our Contact page, Google, only if you press “Show map”; the AI service in section 7, once Ask Ophir is available; and any successor tools we notify here.
- Developers, only where you ask us to register your interest in one of their projects, and only the details needed to do so.
- Authorities, where the law requires us to disclose data — for example to a court, the police or a regulator.
- Our professional advisers (lawyers, auditors, insurers) and, if we sell or reorganise our business, the buyer or successor, under confidentiality.
9. International transfers
Some of the providers in section 8 store or process data outside the UAE: our database in India, our website hosting and error reporting in Germany, Cloudflare wherever its global network serves you, and, if you accept those cookies or press “Show map”, Google and Meta, including in the United States. Where our CRM provider stores data is being confirmed. Where we transfer personal data abroad we rely on the mechanisms the PDPL allows: transfers to countries the UAE Data Office recognises as offering adequate protection; contractual safeguards with the recipient that meet the PDPL’s requirements; or, where neither applies, your explicit consent or the necessity of the transfer to perform our agreement with you. Details of the safeguards we use for a particular provider are available on request.
10. How long we keep your data
| Data | Retention |
|---|---|
| Website enquiries and marketing contacts | 12 months after your enquiry, or after our last contact with you about it if later, then deleted or anonymised. |
| Website enquiries — the copy in our CRM | Kept with our client records; the period is being confirmed. |
| Our audit record of each enquiry | Our audit log, which records who created and looked at each enquiry and cannot be altered, keeps the enquiry as it arrived; how long it is kept is being confirmed. |
| Backups | Up to 90 days, then deleted |
| Ask Ophir conversations, once the assistant is available | 6 months, then deleted or anonymised |
| Website logs and error reports | Up to 6 months |
| Your cookie choice | 12 months, in your own browser |
| Cookies and other stored items | As set out in the Cookie Policy |
11. How we protect your data
We use technical and organisational measures appropriate to the risk: encryption of data in transit and at rest; access to website enquiries limited to the staff who handle them, who sign in with two-factor authentication; a record of every look at an enquiry in an audit log that cannot be altered; a web application firewall and bot protection; a check on our forms against automated abuse; encrypted backups held separately from our database; staff training; and contractual obligations on our providers. If a breach occurs that is likely to affect your privacy, we will notify the UAE Data Office and, where required, you, as the PDPL provides.
12. Your rights
Under the PDPL you have the right to: be told how we use your data (this Policy); access the personal data we hold about you and receive a copy; correct inaccurate or incomplete data; delete your data where we no longer have a lawful reason to keep it; restrict or object to certain processing, including direct marketing; receive your data in a portable format where processing is based on consent or contract; withdraw consent at any time without affecting earlier processing; and object to decisions made solely by automated means. Some rights are limited where we must keep data by law.
To exercise a right, write to [email protected]. We may ask you to verify your identity. We respond within 30 days, and tell you if we need longer. If you are unhappy with our response you may complain to the UAE Data Office.
13. Links to other websites
The Website links to websites we do not control: our pages on Instagram, TikTok, LinkedIn, Facebook and YouTube; WhatsApp; Google Maps, for directions to our office; and the LinkedIn posts where some of our articles were first published. Their privacy policies, not ours, apply to what they collect once you follow a link.
14. Changes to this Policy
We will post any changes here with a new effective date, and tell you directly where a change materially affects how we use data you have already given us.
15. Contact
Ophir Properties L.L.C. — The Onyx Tower 1, Office 704, The Greens, P.O. Box 122-209, Dubai, UAE — [email protected] — +971 4 557 6289.