Privacy Policy

1. Who we are

This website is operated by NARVA Buying and Selling Real Estate ("NARVA", "we", "us"), a real-estate brokerage registered in the United Arab Emirates, with its office at 510, The Gate, Al Reem Island, Abu Dhabi, UAE.

For the purposes of UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL"), NARVA is the controller of the personal data described below — meaning we decide why and how it is processed.

We do not publish an email address. Every privacy request, question or complaint should be sent through our contact form, or by post to the address above, marked for the attention of the Data Protection contact. Requests received that way reach us directly and are logged.

2. What we collect

Information you give us

When you submit an enquiry, request a brochure or floor plans, or contact us, we collect:

• Your name, email address and telephone number (including the dial code you select)
• The project or comparison page your enquiry relates to
• Optional details you choose to provide — preferred unit type, budget range, and any message text

Name, email and telephone number are required to answer an enquiry. Everything else is optional, and leaving it blank does not affect the service you receive.

Information collected automatically

When a form is submitted we also record, for security and fraud prevention:

• Your IP address
• Your browser's user-agent string
• The date and time of submission

Our hosting provider additionally keeps standard server logs of requests made to the site.

Documents behind a form

Some brochures and floor plans are released after you complete a short form. If you request one, we record which document you requested along with the details above.

What we do not collect

We do not ask for, and this website does not collect, payment card details, passport or Emirates ID numbers, or any special category data such as health, religion or biometric information. Where a transaction later requires identity documents for regulatory checks, those are collected separately and never through this website.

3. Why we use it, and on what basis

Purpose	Lawful basis under the PDPL
Responding to your enquiry and advising you on properties	Steps taken at your request before entering a contract
Sending the brochure or floor plans you asked for	Your consent, given when you submit the form
Following up on an active enquiry by phone, email or messaging	Our legitimate interest in serving a prospective client
Preventing spam, abuse and fraudulent submissions	Our legitimate interest in protecting the service
Measuring how the website is used, where analytics is enabled	Your consent
Advertising and measuring advertising, where enabled	Your consent
Meeting brokerage, anti-money-laundering and tax obligations	Compliance with a legal obligation

We do not sell personal data, and we do not share it with third parties for their own marketing.

4. Cookies and similar technologies

This site sets a session cookie that is strictly necessary: it holds the security token that protects our forms against cross-site request forgery, and keeps an administrator signed in. It expires when you close your browser and cannot be switched off without breaking the forms.

Beyond that, NARVA may enable analytics and advertising technologies. Where enabled, these set their own cookies or identifiers:

• Google Analytics 4 and Google Tag Manager — to understand which pages are read and how visitors arrive.
• Meta Pixel — to measure the performance of advertising on Facebook and Instagram, and to show relevant ads.

These tools are configurable and are not always active. You can confirm what is running on any given day using the network or cookie inspector in your browser's developer tools.

Controlling cookies

• Every major browser lets you block or delete cookies in its settings.
• Google provides an opt-out at tools.google.com/dlpage/gaoptout, and ad settings at myadcenter.google.com.
• Meta's ad preferences are at facebook.com/adpreferences.

Blocking analytics or advertising cookies does not affect your ability to browse the site or submit an enquiry.

5. Advertising and audiences

NARVA advertises on Google and on Meta platforms. Where those tools are enabled, we may:

• Measure which advertisements led to an enquiry;
• Show advertisements to people who have visited this website (remarketing); and
• Build audiences of people whose interests resemble those of our existing enquirers.

If we upload contact details to create such an audience, they are hashed before upload so the platform does not receive them in readable form, and we do so only where you have given consent for marketing. You can withdraw that consent at any time through our contact form, and you can opt out of personalised advertising directly with each platform using the links in section 4.

We do not run advertising directed at children, and we do not use sensitive categories to target advertising.

6. Who we share it with

• Developers. When you ask us to register your interest, reserve a unit or arrange a viewing, we pass the details necessary to do so to the relevant developer — for example Emaar, Sobha or Aldar. We do this only on your instruction, and each developer then handles your data under its own privacy policy.
• Service providers. Our website hosting and email providers process data on our behalf, under contract, and may not use it for their own purposes.
• Analytics and advertising platforms. Google and Meta, where those tools are enabled, as described in sections 4 and 5.
• Regulators and authorities. Where the law requires it, including the Dubai Land Department and RERA in respect of Dubai transactions, the relevant Abu Dhabi authorities, and obligations under the UAE's anti-money-laundering framework (Federal Decree-Law No. 20 of 2018 and its implementing regulations).
• Professional advisers such as lawyers or auditors, where necessary.

7. International transfers

Some of the providers above process data outside the UAE. Where personal data is transferred abroad, we do so on the bases permitted by the PDPL — a jurisdiction recognised as offering an adequate level of protection, appropriate contractual safeguards, or your explicit consent.

8. How long we keep it

• Enquiries that do not proceed: up to 24 months from your last contact with us, after which they are deleted.
• Enquiries that become transactions: for the period required by UAE brokerage, anti-money-laundering and tax law, which is generally at least five years from the end of the business relationship.
• Server and security logs: short-term only, in line with our hosting provider's retention.

You may ask us to delete your data sooner — see section 10.

9. How we protect it

The site is served over HTTPS with HSTS. Enquiry data is stored in an access-controlled database on servers in our hosting provider's facilities, administrative access requires a password and is rate-limited against brute force, forms are protected against cross-site request forgery, and backups are encrypted at rest on the server and held off-site. No system is perfectly secure, but we review these measures as the site changes.

10. Your rights

Under the PDPL you may ask us to:

• Access the personal data we hold about you, and receive a copy;
• Correct anything inaccurate or incomplete;
• Delete your data, where we have no overriding legal obligation to keep it;
• Restrict or object to processing, including any processing based on legitimate interests;
• Receive your data in a portable format, or have it transferred to another controller where technically feasible;
• Withdraw consent at any time, without affecting processing carried out before withdrawal; and
• Object to automated decision-making. We do not make decisions about you by automated means.

To exercise any of these, use our contact form and tell us what you need. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive. We may ask you to confirm your identity before we act, so that we do not disclose your data to someone else.

To stop marketing contact specifically, tell us through the contact form, or reply to any message asking to be removed. We act on that immediately.

11. Children

This website is intended for adults considering a property purchase. We do not knowingly collect data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Other websites

Where we link to a developer, a mapping service or a video platform, those services have their own privacy policies and we are not responsible for their content or practices. Maps and video embeds on this site are click-to-load, so nothing is requested from those providers until you choose to load them.

13. Changes to this policy

We update this policy when our practices change. The date at the top of the page always shows the current version. Material changes will be highlighted on the page.

14. Questions and complaints

If you are unhappy with how we have handled your personal data, tell us first through the contact form so we can put it right. You also have the right to complain to the UAE Data Office, the federal authority responsible for personal data protection.