Privacy-policy

Privacy Policy
Last updated: 09/09/2026
—
1. Introduction
This Privacy Policy explains how Bond Property Group collects, uses, shares, stores and protects personal data when you visit our websites, contact us, respond to our advertising, enquire about a property, or engage us for design, build or renovation works. Please read this policy carefully. It sits alongside any other notice or consent we may give you at the point we collect your data – for example, a consent statement on a website enquiry form or an engagement letter. If you do not agree with this policy, please do not use our websites or submit your information to us.

2. Who we are
“Bond Property Group”, “we”, “us” and “our” mean Bond Holdings Ltd together with Bond Homes Real Estate L.L.C., Bond Elite Contracting L.L.C. Each company acts as a data controller in respect of the personal data it collects for its own purposes. Where more than one of our companies is involved in a matter, we act as joint controllers and this policy applies to each of them.

Websites covered: www.bond-uae.com
Privacy contact: info@bond-uae.com

3. The law we work under
We process personal data in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and other applicable UAE laws, including anti-money laundering legislation and the regulations of the Dubai Land Department and RERA. Certain of our companies are established in the Abu Dhabi Global Market, which operates its own data protection framework. Where a matter is handled by one of those companies, the ADGM Data Protection Regulations 2021 apply to it and are supervised by the ADGM Office of Data Protection. The standards described in this policy are applied consistently across the group regardless of which framework governs a particular matter. Where we hold data belonging to individuals located in the United Kingdom or the European Economic Area‚ which typically arises where a UK or EU resident makes an inbound enquiry about a Dubai property – we also apply the standards of the UK GDPR and EU GDPR to that data, including the legal basis and rights provisions set out in this policy.

4. Personal data we collect

4.1 Data you give us directly

Identity and contact data
Full name, nationality, date of birth, email address, telephone and WhatsApp number, country of residence, and preferred language and contact method.

Property requirement data (brokerage clients)
Your buying, selling or leasing criteria, budget range, community and building preferences, bedroom count, view or plot orientation, intended use (end-user or investment), purchase timeline, and financing intentions.

Property and project data (renovation and contracting clients)
Details of the property to be worked on, including address and unit or villa reference, built-up area, plot size, existing configuration, structural and MEP information, and your desired scope of works, design preferences, specification level and budget.

Transaction and ownership data
Title deeds, Oqood or sale and purchase agreements, Form A/B/F documentation, NOC documentation, service charge statements, mortgage details, escrow and payment information, and bank details where required to settle a transaction.

Identity verification and compliance data
Passport copy, Emirates ID, residence visa, proof of address, and source-of-funds and source-of-wealth information. We are required by UAE anti-money laundering law to collect and retain this material for real estate transactions and to carry out customer due diligence, including screening against sanctions and politically exposed person lists.

Communications data
The full history of your correspondence with us, emails, WhatsApp messages, in-app chat and chatbot exchanges, contact forms, meeting notes, viewing feedback and file notes recorded in our client relationship management system. WhatsApp conversations are retained in full, including message content, attachments you send us and delivery timestamps.

Call recordings
We may record and retain telephone and video calls, together with transcripts and notes derived from them. Where a call is recorded you will be notified at the start of the call and given the opportunity to object or to continue by another channel. Recordings are used to keep an accurate record of instructions and agreements, to train our staff, and to monitor and improve the quality of our service. Access is restricted to the client-facing team handling your matter and to management carrying out quality reviews.

4.2 Data collected automatically
When you visit our websites we automatically collect technical and usage data: IP address, approximate location derived from it, browser type and version, operating system and device type, screen resolution, referring URL, pages viewed, time on page, scroll depth, and the links and buttons you click. This is collected through cookies and similar technologies – see section 7.

4.3 Data from third parties
We may receive personal data about you from:

– Advertising and social platforms‚ where you complete a lead form or start a WhatsApp conversation through an advertisement, the platform passes us the details you submitted.
– Property portals‚ Property Finder, Bayut, Dubizzle and similar, where you register interest in one of our listings.
– Referrals‚ existing clients, co-operating brokers or professional contacts, where they have a lawful basis to pass your details on.
– Publicly available sources‚ company registries, Dubai Land Department records, and professional networking sites.
– Service providers‚ identity verification, screening and credit reference providers used for compliance checks.

4.4 Sensitive data
We do not seek to collect sensitive personal data. However, identity documents such as passports and Emirates ID cards may incidentally reveal information such as nationality or place of birth. We process these documents only for identity verification and legal compliance, and hold them under restricted access.

5. How we use your data, and our legal basis
| What we use it for | Legal basis |
| Responding to your enquiry and arranging viewings | Your consent; steps taken at your request prior to a contract |
| Matching you to properties, projects or off-plan launches | Consent; legitimate interests in providing our service |
| Preparing and administering a sale, lease or construction contract | Performance of a contract |
| Preparing quotations, designs, drawings and specifications | Steps taken at your request prior to a contract; performance of a contract |
| Registering your interest in a development with a developer | Your consent |
| Customer due diligence, KYC, AML screening and sanctions checks | Compliance with a legal obligation |
| Registering transactions with the Dubai Land Department, RERA and Trakheesi | Compliance with a legal obligation |
| Sending marketing communications, newsletters and new listing alerts | Your consent |
| Advertising and audience targeting on third-party platforms | Your consent (via cookie and platform consent) |
| Website analytics and service improvement | Consent for non-essential cookies; legitimate interests |
| Recording calls to evidence instructions and agreements | Legitimate interests |
| Staff training, quality monitoring and service improvement | Legitimate interests |
| Establishing, exercising or defending legal claims | Legitimate interests; compliance with a legal obligation |

Where we rely on legitimate interests, we have assessed that our interest in operating and improving the business does not override your rights and freedoms. You may object to processing on this basis at any time, see section 11.

Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal, and does not affect processing we are legally required to continue (such as retaining AML records).

6. Advertising and social media platforms
We advertise our properties and services on third-party platforms, including Meta Platforms (Facebook, Instagram and WhatsApp), Google, LinkedIn, TikTok and Snap. This section explains what that involves.

6.1 Meta Business Tools
We use Meta’s advertising and measurement tools:

Meta Pixel. A small piece of code on our websites that records visits, page views and actions such as submitting an enquiry form. It sets cookies in your browser (see section 7) and sends event data to Meta.

Meta Conversions API. A server-side connection that sends the same event data directly from our systems to Meta. This may include a hashed version of your email address, phone number, name, city and country. Hashing converts the data into an irreversible string before it leaves our systems; Meta uses it to match the event to an account without receiving the underlying details in readable form.

Lead Ads and Click-to-WhatsApp Ads. Where you submit an enquiry through an advertisement or open a WhatsApp conversation from one, Meta passes us the information you provided. That data enters our CRM and is handled in accordance with this policy. Meta’s own handling of it is governed by Meta’s privacy policy.

Custom Audiences. We may upload contact lists to Meta in hashed form so that our advertising is shown to people who have already engaged with us, or so that existing clients are excluded from campaigns aimed at new enquiries.

Lookalike Audiences. We may ask Meta to build an audience of people who share characteristics with our existing enquirers. We do not receive personal data about the individuals in a lookalike audience.

In respect of these tools, Bond Property Group and Meta act as joint controllers for the collection and transmission of event data. Meta’s subsequent use of that data for its own purposes is governed by Meta’s Data Policy at [https://www.facebook.com/privacy/policy](https://www.facebook.com/privacy/policy).

6.2 Other advertising platforms
We use comparable tools from other providers, including Google Ads conversion tracking and remarketing, Google Analytics, the LinkedIn Insight Tag, the TikTok Pixel and the Snap Pixel. Each operates on a similar basis and is subject to the cookie controls described below.

6.3 Controlling advertising
You can control how your data is used for advertising by:

– Rejecting or withdrawing consent for advertising cookies through the cookie banner or preference centre on our website;
– Adjusting your Ad Preferences within your Facebook or Instagram account settings;
– Using Google’s Ads Settings at [https://adssettings.google.com](https://adssettings.google.com);
– Visiting [https://www.youronlinechoices.com](https://www.youronlinechoices.com) or [https://optout.aboutads.info](https://optout.aboutads.info);
– Emailing us at info@bond-uae.com to be removed from our marketing lists and audience uploads.

Unsubscribing from our marketing emails does not automatically remove you from platform-based advertising audiences. Please contact us if you want both.

7. Cookies and similar technologies

7.1 What cookies are
A cookie is a small text file placed on your device when you visit a website. Cookies allow a site to recognise your device, remember your preferences, and understand how the site is used. We also use related technologies that work in a similar way, pixels (tiny transparent images that record that a page has loaded), tags (code snippets that fire when a condition is met), local storage (data held in your browser), and software development kits in any mobile application.

Throughout this section, “cookies” means all of these technologies.

First-party cookies are set by our own domain. Third-party cookies are set by another organisation, such as an analytics or advertising provider. Session cookies are deleted when you close your browser. Persistent cookies remain on your device for a set period.

7.2 Categories of cookies we use

Strictly necessary cookies
Required for the website to function, page routing, security, load balancing, fraud prevention, and recording your cookie choices. These cannot be switched off through our preference centre. Legal basis: legitimate interests. No consent required.

Functional cookies
Remember choices you make, such as language, currency, saved property searches, favourited listings, and whether you have dismissed a banner. Disabling these means some features will not work as intended. Legal basis: consent.

Performance and analytics cookies
Tell us how many people visit, which pages they view, how long they stay, where they arrived from and where they encounter errors. This is used in aggregate to improve the site. Legal basis: consent.

Advertising and targeting cookies
Set by us and by our advertising partners to build a profile of your interests, measure the effectiveness of a campaign, limit the number of times you see an advertisement, and show you relevant advertising on other websites and platforms. Legal basis: consent.

This table reflects our cookie inventory at the date of this policy. Providers occasionally change cookie names and durations. The most current position is always available in the preference centre on our website.

7.4 Managing cookies
When you first visit our website you will be shown a cookie banner. Non-essential cookies are not set until you accept them. You can change your choices at any time through the Cookie Preferences link in the website footer. You can also control cookies through your browser, including blocking all cookies, blocking third-party cookies only, or deleting cookies already stored. Instructions are available in the help documentation for your browser. Blocking all cookies will prevent parts of our website from working. Some browsers transmit a Do Not Track or Global Privacy Control signal. Where a recognised opt-out signal is received, we treat it as a withdrawal of consent for non-essential cookies.

8. Who we share your data with
We do not sell your personal data.

Developers and master developers. Where you express interest in a specific project or launch, we pass your name and contact details to the relevant developer so that your interest can be registered against our brokerage and so the developer can contact you.

We will share anything further with a developer, including identity documents, financial information, proof of funds or any other part of your file, only where you have given us your permission to do so. Permission is typically given in writing when you decide to proceed with a reservation, booking or purchase, at which point the developer requires that documentation to process the transaction. Once your details are with the developer, the developer’s own privacy policy governs their use of them.

Government and regulatory bodies. The Dubai Land Department, RERA and the Trakheesi system, in connection with listing permits, Form A/B/F registration, title transfer and Ejari registration.

Conveyancing, escrow and trustee offices. Where required to complete a transaction.

Banks and financial institutions. Where a transaction involves financing, escrow or a manager’s cheque, and where we are required to respond to a compliance or KYC request.

Professional advisers. Lawyers, auditors, accountants and insurers, under duties of confidentiality.

Service providers acting on our instructions, including:

– CRM and pipeline software
– Email, calendar and cloud storage providers
– Communications and messaging platforms, including the WhatsApp Business API
– Website hosting and content delivery
– Analytics and advertising platforms (see section 6)
– Electronic signature providers
– Identity verification and AML screening providers

These providers process data only on our instructions and are bound by written agreements requiring confidentiality and appropriate security.

Subcontractors and suppliers (contracting work). Where Bond Elite Contracting engages a specialist subcontractor, joinery, marble, upholstery or aluminium supplier, or requires site access for delivery or installation, we share only the information necessary for the works, typically your name, site address and contact number.

Corporate transactions. If any part of our business is sold, restructured or merged, personal data may be disclosed to the counterparty and its advisers, subject to confidentiality undertakings.

Legal requirements. We may disclose data where required by law, court order or regulatory request, or where necessary to establish, exercise or defend legal claims.

9. International transfers

We are based in the UAE, but some of our service providers process data outside it, including in the United States, the European Union, the United Kingdom and Singapore. Where we transfer personal data outside the UAE, we do so only where the destination provides an adequate level of protection, where the transfer is covered by contractual safeguards such as standard contractual clauses, where the transfer is necessary to perform a contract with you, or where you have consented. Where we hold data subject to the UK or EU GDPR, transfers are made under an adequacy decision or appropriate safeguards, including the UK International Data Transfer Addendum where relevant.

10. How long we keep your data

| Data | Retention period |
| AML, KYC and identity documents | Minimum 5 years from the end of the business relationship or the date of the transaction, as required by UAE law |
| Completed transaction files and contracts | 5 years from completion, or longer where a dispute or limitation period requires it |
| Construction and design project records | 10 years from practical completion, reflecting decennial liability under UAE law |
| Active enquiries and CRM records | Duration of the relationship, then 24 months from last meaningful contact |
| Unconverted marketing leads | 24 months from last engagement, then deleted or anonymised |
| Marketing consent records | Duration of consent plus 2 years |
| Website analytics data | Up to 26 months |
| Cookie consent records | 12 months |
| Correspondence and communications history, including WhatsApp | 5 years, or the life of the related file where longer |
| Call recordings and transcripts | 12 months, or the life of the related file where the call relates to a live transaction or project |

At the end of a retention period we securely delete the data or irreversibly anonymise it so it can no longer be linked to you.

11. Your rights
Subject to the conditions and exemptions in applicable law, you have the right to:

– Be informed about how we process your data, this policy serves that purpose.
– Access the personal data we hold about you and receive a copy.
– Rectify inaccurate or incomplete data.
– Erase your data where there is no continuing lawful basis to hold it.
– Restrict processing in certain circumstances, for example while a dispute about accuracy is resolved.
– Object to processing based on legitimate interests, and to direct marketing at any time and without reason.
– Data portability, receive certain data in a structured, commonly used, machine-readable format, or have it transmitted to another controller.
– Withdraw consent at any time where consent is our basis for processing.
– Not be subject to a decision producing legal or similarly significant effects that is based solely on automated processing.

To exercise any of these rights, contact info@bond-uae.com. We may ask you to verify your identity before we act, to prevent disclosure to the wrong person.

We will respond within 30 days. If your request is complex, we may extend this and will tell you why. Exercising your rights is free of charge, although we may charge a reasonable fee or decline to act where a request is manifestly unfounded or excessive.

Automated processing. We use scoring and prioritisation logic within our CRM to help route and rank enquiries. This assists our team’s decisions but does not make decisions about you on its own, and has no legal or similarly significant effect.

12. Security

We maintain technical and organisational measures appropriate to the risk, including encryption of data in transit, access controls limiting each employee to the data required for their role, multi-factor authentication on business systems, restricted access to identity and compliance documentation, confidentiality obligations in employment contracts, staff training, written agreements with processors, and an incident response procedure. No system is entirely secure. Where a breach occurs that is likely to result in a risk to your rights, we will notify the relevant authority and, where required, you, without undue delay.

13. Marketing communications

We send marketing communications by email, SMS, WhatsApp and telephone where you have consented, or where you are an existing client and the communication relates to services similar to those already provided. Every marketing email contains an unsubscribe link. You can opt out of WhatsApp marketing by replying STOP. You can opt out of all marketing at any time by emailing info@bond-uae.com.

Opting out of marketing does not stop service communications relating to a live transaction or project.

14. Children

Our services are directed at adults. We do not knowingly collect data from anyone under 18 other than incidentally, for example, where a client provides family details relevant to a property requirement. If you believe we hold a child’s data without an appropriate basis, contact us and we will delete it.

15. Third-party links

Our websites and marketing materials contain links to third-party sites, including developer pages, property portals and mapping services. We are not responsible for their content or privacy practices. We encourage you to read the privacy policy of any site you visit.

16. Changes to this policy

We may update this policy to reflect changes in our practices, technology or the law. The date at the top shows when it was last revised. Where a change is material, we will bring it to your attention by email or through a notice on our website. Where a change materially expands how we use data collected under consent, we will seek fresh consent.

17. Contact and complaints

Bond Property Group
Dubai, United Arab Emirates

Privacy enquiries: info@bond-uae.com

If you are dissatisfied with how we have handled your data, please contact us first so we can try to resolve it. You also have the right to complain to a supervisory authority:

– United Arab Emirates: the UAE Data Office
– Abu Dhabi Global Market: the ADGM Office of Data Protection
– United Kingdom: the Information Commissioner’s Office, [https://ico.org.uk](https://ico.org.uk)
– European Economic Area: the data protection authority in your country of residence
—
*This policy should be reviewed by qualified legal counsel before publication.*