Privacy Policy

Royal Abraj Properties ("we", "our", or "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard information you provide through royalabrajproperties.com.

1. Data We Collect

When you submit a contact, brochure request, floor plan request, or consultation form, we collect:

• Full name
• Email address
• Phone number
• Message or enquiry details
• Property preferences (budget range, unit type, area of interest)
• Source URL and UTM parameters (to understand how you found us)

We also automatically collect:

• IP address (for security and rate-limiting purposes)
• Browser and device information (via Google Analytics)
• Pages visited and session duration (via Google Analytics)

2. How We Use Your Data

Your information is used to:

• Respond to your property enquiry and provide personalised advisory services
• Store your contact details in our CRM (HubSpot) for follow-up by our advisors
• Send you property materials you requested, such as brochures and floor plans
• Improve our website and user experience through analytics
• Comply with applicable legal obligations

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

3. Third-Party Services

We use the following third-party services that may process your data:

HubSpot — Our customer relationship management (CRM) platform. Data submitted via forms is stored in HubSpot for lead management and advisor follow-up. HubSpot complies with GDPR requirements. See HubSpot's Privacy Policy.

Google Analytics 4 (via Google Tag Manager) — We use GA4 to understand website usage patterns. GA4 collects anonymised behavioural data about your visits. You can opt out via Google's opt-out browser add-on. See Google's Privacy Policy.

Cloudflare — We use Cloudflare for website performance (CDN), security, and bot protection (Cloudflare Turnstile). Cloudflare may process your IP address and request metadata. See Cloudflare's Privacy Policy.

Resend — Used to deliver internal email notifications to our advisory team. Your name and contact details may be included in these operational notifications. See Resend's Privacy Policy.

4. Cookies

We use the following categories of cookies:

Analytics cookies — Set by Google Analytics to track site usage, including pages visited, session duration, and referral source. These are persistent cookies with a standard retention period.

Security and functional cookies — Set by Cloudflare for bot detection and rate-limiting. These are typically session-based and do not track you across sites.

You can manage or disable cookies through your browser settings. Disabling analytics cookies will not affect the functionality of this website.

5. Data Retention

• CRM data (HubSpot) is retained for the duration of our business relationship with you, or for a maximum of five (5) years from last contact, whichever is shorter.
• Analytics data is retained by Google Analytics for 26 months under GA4's default retention settings.
• Server and security logs are retained for up to 90 days for security and operational purposes.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Correction — Ask us to correct inaccurate or incomplete data
• Deletion — Request erasure of your personal data ("right to be forgotten")
• Restriction — Ask us to limit how we process your data
• Portability — Request your data in a structured, machine-readable format
• Objection — Object to processing carried out on the basis of legitimate interests

To exercise any of these rights, please contact us at admin@royalabrajgroup.com. We will respond within 30 calendar days.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data in transit is protected by HTTPS/TLS encryption. Access to our CRM and internal systems is restricted to authorised personnel only.

8. International Transfers

Royal Abraj Properties is headquartered in Dubai, United Arab Emirates. If you are located in the European Economic Area (EEA) or another jurisdiction with data transfer restrictions, your data may be transferred to and processed in the UAE and the United States (where some of our third-party service providers operate). We take steps to ensure that such transfers are protected by appropriate contractual or regulatory safeguards.

9. Governing Law

This Privacy Policy is governed by the laws of the United Arab Emirates. We are committed to compliance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page will be updated accordingly. We encourage you to review this page periodically.

11. Contact Us

For data access requests, correction requests, deletion requests, or any questions about this Privacy Policy:

Royal Abraj Properties

Dubai, United Arab Emirates

Email: admin@royalabrajgroup.com

WhatsApp: +971 54 394 5050

Website: royalabrajproperties.com

---

Last updated: May 2026