Privacy
Policy

Privacy Policy

Effective date: 31 July 2025

1  Who We Are

Ibara Group LLC trading as IBARA Real Estate ("IBARA," "we," "us," "our") is a real-estate advisory firm headquartered in Dubai.
Registered address: Office 2021, Park Lane Tower, Business Bay, Dubai, United Arab Emirates.
Email: info@ibaragroup.ae
Phone: +971 52 142 3181

2  Scope

This notice explains how we collect, use, store, and share personal data when you visit ibara-real-estate-project.webflow.io (the "Site") or engage our services. It follows UAE Federal Decree-Law 45 of 2021 on the Protection of Personal Data (PDPL) and any other local rules that apply.

3  Data We Collect

We obtain information in the following broad categories:

• Contact information: name, email address, telephone number, country, property preferences, any message you type in our forms.
• Transactional information: property search briefs, reservation cheques, purchase or lease details, copies of passports or Emirates IDs.
• Marketing information: newsletter opt-in status, event registrations, survey responses.
• Technical and usage information: IP address, browser type, device identifiers, page visits, referring URLs, cookie identifiers, heat-map interactions.
• Third-party information: credit checks, sanctions screening results, publicly available corporate records.
  We do not knowingly collect data from anyone under 18. If you think a minor has supplied data, tell us right away.

4  Legal Bases for Processing

We rely on four grounds allowed by the PDPL:

1. Consent (for optional marketing and non-essential cookies).
2. Contractual necessity (to respond to enquiries and perform brokerage services).
3. Legal obligation (anti-money-laundering checks and Dubai Land Department filings).
4. Legitimate interests (fraud prevention, internal analytics, service improvement) balanced against your rights.

5  How We Use Personal Data

1. Deliver property advisory, acquisition, leasing, and investor-report services.
2. Schedule calls and answer enquiries.
3. Verify identity, perform AML ⁄ KYC tasks, and submit required filings.
4. Send market reports, event invitations, and newsletters, with an opt-out link in every message.
5. Analyse Site traffic and campaign performance.
6. Protect our legal rights and resolve disputes.

6  Sharing and Disclosure

We share information only when necessary:

• Developers and co-brokers for unit reservations and handovers.
• Government bodies such as the Dubai Land Department and the UAE Data Office to meet statutory requirements.
• Service providers: Webflow (hosting), Google (Analytics ⁄ Workspace), HubSpot (CRM), Mailchimp (email campaigns), Cloudflare (CDN), banks and payment processors.
• Professional advisers: auditors, lawyers, and accountants.
• Successors in interest if we merge, sell assets, or restructure.
  We never sell your personal data.

7  International Transfers

Some service providers host data in the European Economic Area or the United States. We protect these transfers with contractual safeguards that match PDPL standards, including standard contractual clauses or similar mechanisms.

8  Cookies and Tracking

The Site uses three cookie types:

• Strictly necessary cookies that keep core features working.
• Analytics cookies from Google Analytics and Hotjar to measure traffic.
• Marketing cookies such as Meta Pixel and Google Ads to deliver targeted ads.
  You may reject non-essential cookies through the banner or your browser settings. Essential cookies cannot be disabled without impairing site functionality.

9  Data Retention

• Client files and KYC records: at least five years after each transaction closes, as required by UAE AML rules.
• Marketing lists: until you unsubscribe or show no activity for 24 months.
• Cookie identifiers: 13 months for analytics, 24 months for advertising.
• Support enquiries: 18 months after our last interaction.
  Backup copies are kept for up to 90 days to support disaster recovery.

10  Security Measures

• TLS 1.2 encryption for data in transit.
• AES-256 encryption at rest where providers allow it.
• Role-based access controls and multi-factor authentication for staff systems.
• Quarterly vulnerability scans and annual penetration tests.
  No security program is infallible, but we design controls to keep risk as low as practical.

11  Your Rights Under PDPL

You may:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Erase data that is no longer needed.
• Restrict or object to certain processing activities.
• Port your data to another controller.
• Withdraw consent at any time without affecting earlier lawful processing.
  Send requests to privacy@ibaragroup.ae along with proof of identity. We respond within 30 days. If you believe we breached the PDPL, you can complain to the UAE Data Office after giving us a chance to resolve the issue.

12  Children's Privacy

Our services target adults interested in Dubai real estate. We do not knowingly collect information from individuals under 18 years old.

13  Third-Party Links

The Site may link to third-party pages such as developer websites or YouTube videos. We do not control those sites. Review their privacy policies before sharing information with them.

14  Policy Updates

We may revise this notice to reflect legal requirements or business changes. The "Effective date" will change when we post a new version. Continued use of the Site after any update means you accept the revised policy.

15  Contact

Data Protection Officer
IBARA Real Estate
Office 2021, Park Lane Tower, Business Bay, Dubai, United Arab Emirates
Email: info@ibaragroup.ae
Phone: +971 52 142 3181

‍