DubaiSiteDubaisite

Privacy first

Privacy Policy

Dubaisite.com complies with UAE Federal Law No. 45 of 2021 (Personal Data Protection Law) and EU GDPR (Regulation 2016/679). EU and German users may file complaints with their local data protection authority — see the section below.

Data Controller: Dubaisite.com | Contact: privacy@dubaisite.com

Minimal collection

We only ask for details needed to run your account and keep the community trustworthy.

Session security

IP addresses and user agents are logged per session to detect suspicious sign-ins and comply with UAE cybercrime reporting duties.

Your rights

EU/German users have full GDPR rights. You can request deletion, access, or portability of your data anytime.

What we collect & why

Account data

Name, email, and theme preference. Legal basis: contract performance (Art. 6(1)(b) GDPR) and legitimate interest (Art. 6(1)(f) GDPR).

Listing views

Listing ID, timestamp, anonymous viewer identifier for view counts and Recently Viewed sections. With your analytics consent, we also derive an approximate country/city from your IP address (via a third-party geolocation lookup) to show business owners where their visitors come from; the IP address itself is not shared with or stored by that owner-facing view. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) for view counts; consent (Art. 6(1)(a) GDPR) for location/device analytics.

Session logs

IP addresses, user agents per session for fraud prevention and UAE cybercrime reporting. Legal basis: legitimate interest and legal obligation (Art. 6(1)(f) and 6(1)(c) GDPR). Retained 180 days.

Report submissions

User ID, reason, notes, IP address for abuse prevention. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Retention periods: Session logs: 180 days. Account data: until deletion request or account closure. Listings and reviews: retained for platform integrity and legal obligations (Art. 17(3)(b) GDPR).

Your rights

  • Right to access: request a copy of all personal data we hold (Art. 15 GDPR).
  • Right to rectification: correct inaccurate data (Art. 16 GDPR).
  • Right to erasure ("right to be forgotten"): request deletion except where legally required (Art. 17 GDPR).
  • Right to restriction: limit processing while disputes are resolved (Art. 18 GDPR).
  • Right to data portability: receive your data in machine-readable format (Art. 20 GDPR).
  • Right to object: object to processing based on legitimate interest (Art. 21 GDPR).
  • Right to withdraw consent: where processing is based on consent (Art. 7(3) GDPR).
  • Right to lodge a complaint: contact your data protection authority (Germany: BfDI; UAE: UAE Data Office).

Send verified requests to privacy@dubaisite.com or use the in-product support form. We respond within 30 days (GDPR Art. 12).

Data storage & transfers

Storage location: Primary databases are hosted in the EU (GDPR Art. 45 adequacy). Encrypted backups in the UAE. No data is transferred to countries without adequate protection.

Security: Data encrypted at rest and in transit (TLS 1.3). Access is MFA-protected, logged, and restricted to trained personnel. Penetration testing performed annually.

Third parties: Firebase Auth (Google) for authentication. ipapi.co for IP-to-country/city lookups, used only when you have given analytics consent — your IP address is sent to ipapi.co solely to resolve a location and is not logged or retained by us alongside that result. Google LLC has EU-US Data Privacy Framework certification. No data sold to advertisers or analytics networks.

Questions or complaints?

Email privacy@dubaisite.com. We respond within 30 days (GDPR Art. 12). German/EU users: you have the right to lodge a complaint with your supervisory authority: