← Back to sitePrivacy Notice
Last updated 2 August 2026
This notice explains how NOOMA PRIME PROPERTIES L.L.C(“NOOMA”, “we”, “us”) collects and uses personal data through noomaproperties.com. We are the data controller. We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and its implementing legislation.
Cookies and similar technologies are covered separately in our Cookie Policy.
1. Personal data we collect
Data you give us. When you submit an enquiry or speak with our concierge assistant:
- your name;
- your email address and/or telephone number;
- what you are looking for — budget, area, property type, timing; and
- anything else you choose to include in your message or conversation.
Data we generate or receive automatically.
- the content of your conversation with the assistant, and a randomly generated session identifier that links the messages in one conversation;
- technical data recorded by our hosting provider, including IP address, browser type, pages requested and timestamps; and
- your cookie and storage preferences, stored on your own device.
We do not ask for, and ask that you do not send us, sensitive personal data — such as health, biometric, religious or political information. If you become a client, we will separately request the identity documents that UAE law requires us to collect.
2. Why we use it, and on what basis
| Purpose | Basis under the PDPL |
|---|---|
| Responding to your enquiry, arranging viewings, sending you property information | Your consent, and steps taken at your request before entering into a contract |
| Operating the assistant and answering your questions | Your consent, given by choosing to use it |
| Keeping the Site secure, diagnosing faults, preventing abuse | Our legitimate interest in a secure and functioning service |
| Customer due diligence, record-keeping and reporting once you become a client | Compliance with a legal obligation |
| Improving our service and understanding what visitors look for | Our legitimate interest, using aggregated data wherever possible |
As a real estate brokerage we are a designated non-financial business under UAE anti-money-laundering legislation. Where a transaction proceeds, we are required to carry out customer due diligence and to retain the resulting records. That obligation overrides a request to delete the data concerned.
We do not sell personal data, and we do not use it for automated decisions that produce legal effects for you.
3. Who we share it with
We share personal data only with service providers who process it on our instructions, and with parties we are required or permitted to share it with by law. Our providers are:
| Provider | Purpose | Where processed |
|---|---|---|
| Vercel | Website hosting and request logs | United States and other regions |
| Resend | Delivering enquiry and confirmation emails | United States / European Union |
| Anthropic | Generating the assistant’s replies | United States |
| Railway & Supabase | Our market data service and its database, which records enquiry events | United States and Australia |
What this means for your conversation with the assistant. The messages you send are transmitted to Anthropic so that a reply can be generated. Please do not share information in that conversation that you would not want processed in this way.
We may also disclose personal data to our professional advisers, to the Dubai Land Department or other competent authorities where required, and to a purchaser in connection with a sale of our business.
4. Transfers outside the UAE
The providers above process data outside the United Arab Emirates, including in the United States and Australia. Where the destination has not been recognised as providing an adequate level of protection, we rely on contractual safeguards with the provider, and on your explicit consent where required, in accordance with Articles 22 and 23 of the PDPL.
5. How long we keep it
- Enquiries that do not proceed — up to 24 months from your last contact with us, then deleted or anonymised.
- Assistant conversations — up to 12 months, used to operate and improve the service.
- Client and transaction records — for the period required by UAE anti-money-laundering and commercial legislation, being at least five years from the end of the relationship or the completion of the transaction.
- Technical logs — a short period set by our hosting provider, typically measured in weeks.
6. Security
We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls on our systems and databases, and limiting access to those who need it. No system is completely secure, and we cannot guarantee the security of information sent to us over the internet.
7. Your rights
Subject to the conditions and exceptions in the PDPL, you may:
- request access to the personal data we hold about you, and information about how we process it;
- ask us to correct data that is inaccurate or incomplete;
- ask us to delete data, where we have no continuing legal basis to keep it;
- ask us to restrict or stop certain processing, including direct marketing;
- ask us to transfer your data to you or another controller in a structured, machine-readable format; and
- withdraw consent at any time, which does not affect processing carried out before you withdrew it.
To exercise any of these, email contact@noomaproperties.com. We may need to verify your identity first. We aim to respond within 30 days.
If you are not satisfied with our response, you may complain to the UAE Data Office.
8. Children
The Site is intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
9. Changes
We may update this notice. The version published here, with the date shown above, is the one that applies. Where a change is significant, we will make that clear on the Site.
10. Contact
NOOMA PRIME PROPERTIES L.L.C · Al Baraha, Dubai, United Arab Emirates
contact@noomaproperties.com