Legal
Privacy Policy
Who we are
CoreSpaces provides research-led real estate investment advisory in Dubai. This policy explains how we process personal data when you use corespacesrealty.ae, book a consultation, subscribe to insights, or contact us.
Purposes & legal bases
- Respond to your enquiry (contract / pre-contract steps) — name, email, phone, objective, and message you send via forms or WhatsApp.
- Market updates by email (consent) — newsletter address and consent record when you opt in on /insights.
- Housing Decision Guide PDF (consent) — email and optional quiz answers to deliver Relocating to Dubai: The Housing Decision Guide. Marketing contact and partner introductions each require a separate, unticked consent. Retention follows the lead retention period below; each PDF email includes a one-click deletion link, or email advisory@corespaces.ae.
- Schools & communities guide PDF (consent) — parent email (and optional parent name) plus coarse preferences to deliver Buying Near the Right School. We never collect a child's name, age, date of birth, or school identity. Partner introductions require a separate consent. Deletion link included in the PDF email.
- Analytics (consent for cookie-based tools) — cookieless, aggregate page-view measurement (Vercel Analytics / Plausible when configured) runs by default with no cookies and no cross-site identifiers. GA4 and Clarity load only when you enable Analytics cookies.
- AI concierge transcripts (consent) — Ask AI messages stored server-side when you enable the transcript toggle, so advisors can follow up in context.
- Security & abuse prevention (legitimate interest) — IP-based rate limits and logs retained briefly.
Processors (sub-processors)
| Processor | Purpose | Location |
|---|---|---|
| Vercel | Hosting & edge | USA / EU |
| Neon | Database | USA / EU |
| Resend | Transactional email | USA |
| Anthropic | AI chat & scoring | USA |
| Cal.com | Consultation booking | USA / EU |
| Analytics (consent-gated) | USA / EU | |
| Meta | Marketing pixel (consent-gated) | USA |
| Marketing pixel (consent-gated) | USA / EU |
Data may be processed outside the UAE. Where PDPL transfer rules apply, we rely on appropriate safeguards with each processor's data processing terms and your consent where required.
Retention
Concierge transcripts: 90 days (default). Chat query logs: 180 days. Inactive lead records may be anonymised after 730 days. You may request deletion at any time.
Cookies
Essential cookies run the site. Cookieless, aggregate analytics (no cookies, no cross-site identifiers) may run by default when configured. Cookie-based analytics, marketing pixels, and AI transcript logging load only when you enable the matching category in our cookie banner (Analytics, Marketing, or AI chat transcripts).
Your rights
Under UAE PDPL you may request access, correction, erasure, withdrawal of consent, or object to processing. Email advisory@corespaces.ae — we respond within 30 days.
Contact
Privacy enquiries: advisory@corespaces.ae. See also our Terms of Service.