Privacy Policy

10eX Properties LLC ("Company," "we," "us," or "our") is committed to protecting your privacy and ensuring that your personal data is processed lawfully, transparently, and securely in accordance with the General Data Protection Regulation (GDPR) and applicable UAE data protection laws.

1. Data Controller

The Data Controller responsible for your personal data is:

2. Data We Collect

We only collect personal data that you voluntarily provide to us directly through our website forms, emails, or phone communications. This includes:

• Identification Data: Full Name.
• Contact Data: Email Address, Phone Number.
• Preferences & Profile Data: Property Interest (e.g., Off-Plan, Rental), Property Type (e.g., Villa, Apartment), Property Use (e.g., Capital Growth, Live-in).
• Content Data: Messages submitted via our contact or enquiry forms.
• Technical Data: IP address, browser type, and standard log data collected automatically when you visit our Site.

3. Legal Basis for Processing (GDPR Art. 6)

We process your data strictly on the following legal grounds:

• Consent: When you tick the consent box on our forms, agreeing to let us store and use your data to respond to your enquiry.
• Legitimate Interest: To respond to your enquiries, provide requested real estate or engineering services, and maintain accurate CRM records.
• Legal Obligation: To comply with UAE tax, corporate, and real estate regulatory requirements (e.g., RERA).

4. How We Use Your Data

Your data is input directly into our secure internal Customer Relationship Management (CRM) system. It is used exclusively to:

• Respond to your specific property or engineering service enquiries.
• Route your enquiry to the correct internal pipeline (e.g., Sales, Technical Services, Leasing).
• Assign your enquiry to the appropriate consultant (e.g., Basheer Khan).
• Send you relevant follow-up information regarding your stated interests.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We may share your data only in the following circumstances:

• Internal Group Entities: 10eX Technical Services LLC, for the fulfillment of engineering/automation enquiries.
• Service Providers: At the moment and as a matter of principle we host your data in our security hardened self-hosted data center, and therefore you data does not rest in the cloud.
• Legal Requirements: If required by UAE law, court order, or regulatory authority.

6. International Data Transfers

As 10eX Group has a global presence (UAE, UK, USA, Singapore, India), your data may be transferred outside of the UAE. In the event of such transfers, we ensure your data is protected by utilising Standard Contractual Clauses (SCCs) approved by the European Commission, or by ensuring the recipient country is deemed to have an adequate level of data protection. At present and we believe in the distant future your data will just live inside our secure systems and cloud only.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Active Enquiries: Retained in our active CRM pipeline until the enquiry is resolved or you request deletion.
• Archived Data: Once an enquiry is closed, data is archived for a maximum of 5 years to comply with UAE corporate and tax legal obligations, after which it is securely deleted or anonymised.

8. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. You can exercise these rights at any time by contacting [email protected]

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data when it is no longer necessary.
• Right to Restrict Processing: Request that we limit how we use your data while a dispute is being resolved.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to our processing of your data based on legitimate interests.
• Right to Withdraw Consent: Withdraw your consent at any time via the contact form or email. Note that this does not affect the lawfulness of processing prior to withdrawal.

9. Data Security

We implement appropriate technical and organisational security measures (including encrypted database storage, secure access controls, and firewalls) to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

10. Cookies

Our website does not use cookies. In case we implement cookies in the future, we will only use strictly necessary cookies to ensure basic website functionality. We do not use invasive tracking or advertising cookies at any time! In the unlikely scenario we implement cookies in the future, you will be able to fully manage cookie preferences through your browser settings at any time.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised "Effective Date."

12. Contact Information

For any privacy-related questions, concerns, or to exercise your data rights, please contact our Data Protection team: