At a glance
The data controller for this site is Palmera Elite Real Estate Brokerage LLC (UAE trade licence 1306924, RERA broker registration 40780), registered at P1 / BLOCK R — 16R-SH, Saih Shuaib 2, Dubai Industrial City, Dubai, United Arab Emirates.
We collect only the information needed to help you find the right property in Oman and to connect you with developers when you ask us to. We never sell your data, and we never share contact details with a developer without your explicit request.
This policy complies with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the UAE PDPL), and — where the underlying activity touches the Sultanate of Oman — with the Omani Personal Data Protection Law (Royal Decree 6/2022). For visitors from the European Economic Area we follow the principles of the EU General Data Protection Regulation (GDPR).
What we collect
We collect three categories of data:
- You give us directly. Your name, email, phone, country of residence, budget range and preferences — only when you submit an enquiry, request a brochure, register an account, or chat with our AI assistant.
- Collected automatically. IP address, device type, browser, pages visited, language preference, and approximate location (country / city). Used to operate the site, prevent abuse, and improve performance.
- Saved on your device. Saved searches, favourite projects and comparison lists are stored locally in your browser (localStorage). They are not uploaded to our servers unless you explicitly create an account.
How we use your data
We use your personal data strictly for the purposes you provide it for. Specifically:
- Connecting you with a verified developer or our partner agent when you submit an enquiry.
- Sending the brochures, payment plans, or floor-plans you request.
- Sending market updates and new-project alerts only if you opt in. You can unsubscribe at any time.
- Operating, securing, and analytically improving the platform (aggregated, non-identifying metrics).
- Complying with Omani law, court orders, and tax/anti-money-laundering obligations.
We do not use your data to train third-party AI models. Conversations with the AI assistant on this site are stored only to maintain the chat session and improve answer quality, and may be reviewed by our team.
Legal basis for processing
We process your data on one of four bases: (a) your consent, given by submitting a form, opting in, or accepting cookies; (b) performance of a service you requested, such as a brochure download; (c) our legitimate interest in operating, securing, and improving the platform; or (d) compliance with a legal obligation under Omani or applicable foreign law.
International transfers
Some of our service providers are based outside the United Arab Emirates (United States, European Union, United Kingdom). Where we transfer personal data internationally we rely on the lawful transfer mechanisms set out in the UAE PDPL — primarily standard contractual clauses — and, where the EU GDPR applies, the corresponding EU Commission clauses.
How long we keep data
- Enquiry forms and contact requests — 36 months from the last interaction, then deleted or anonymised.
- Account data — for the lifetime of your account, plus 12 months after deletion for fraud-prevention archives.
- AI assistant chat history — up to 18 months, then deleted.
- Server access logs — 90 days, retained longer only when investigating abuse.
Your rights
Under Omani and applicable foreign law, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data, subject to legal retention requirements.
- Object to processing based on legitimate interest.
- Withdraw consent at any time without affecting prior processing.
- Receive your data in a portable, machine-readable format.
- Lodge a complaint with the competent regulator — the UAE Data Office (federal level) and, where relevant to Omani residents, the Sultanate of Oman Ministry of Transport, Communications and Information Technology.
To exercise any of these rights, email us — we respond within 30 days.
Security
Our infrastructure uses TLS 1.3 for all traffic, database encryption at rest, role-based access controls for staff, and automated intrusion detection. No system is ever fully secure — if you suspect unauthorised access to your account, contact us immediately.
Children
Our platform is not directed at children under 18. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.
Changes to this policy
We may update this policy as the platform evolves or regulations change. The "last updated" date at the top reflects the most recent revision. For material changes, we will notify registered users by email at least 14 days before the change takes effect.