Privacy Policy
Effective date: 2026-05-03
Latest Launches ("we", "us", "our") operates latestlaunches.ae (the "Site"). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and your rights.
We are committed to compliance with:
- United Arab Emirates Federal Decree-Law No. 45 of 2021 (PDPL) — Personal Data Protection
- EU General Data Protection Regulation (GDPR) + UK GDPR — for EU and UK residents
- United Arab Emirates Telecommunications and Digital Government Regulatory Authority (TDRA) regulations, including the Do Not Call Registry (DNCR)
For details on our regulatory status as an information platform, see the Disclaimer.
1. What we collect
Information you provide. When you submit an enquiry through any form, quiz, or WhatsApp click, we collect: name, phone number, email address, property preferences (bedrooms, budget, timeline, project of interest), free-text message content, and your marketing consent preference.
Information collected automatically. Browsing data (pages visited, time on page, referrer) via Google Analytics 4 + Plausible. Device data (browser, OS, language, screen size). IP address — hashed before storage; raw IP retained only briefly for fraud prevention. Cookies and similar technologies — see "Cookies" below.
Information from other sources. None. We do not buy data from data brokers.
2. How we use your data
| Purpose | Lawful basis (PDPL / GDPR) |
|---|---|
| Respond to your property enquiry by phone, SMS, WhatsApp, or email | Legitimate interest (you submitted an enquiry; direct response is reasonably expected) |
| Match you with the right specialist on our team | Legitimate interest |
| Schedule property viewings + send brochures + payment plans | Legitimate interest |
| Send marketing updates on new launches | Consent (only if you opted in) |
| Improve the Site and our service quality | Legitimate interest |
| Comply with legal obligations + prevent fraud | Legal obligation / legitimate interest |
3. How we contact you
By submitting an enquiry on this Site, you expressly consent to Latest Launches contacting you about your enquiry by:
- Telephone call to the number you provided
- SMS / text message to the number you provided
- WhatsApp to the number you provided
- Email to the address you provided
This consent applies to the specific enquiry you submitted. For broader marketing (new project launches, market updates), we contact you only if you separately opted in.
UAE Do Not Call Registry (DNCR) compliance
We comply with the UAE TDRA Do Not Call Registry. We respect the principle that consumers have the right to opt out of unsolicited marketing.
- For the specific enquiry you submit, our follow-up communications are direct response — not marketing — and DNCR rules do not restrict them.
- For all other marketing beyond your immediate enquiry, we will not contact you if you are registered on the DNCR or have opted out with us.
How to opt out
You can withdraw your consent and ask us to stop contacting you at any time. We will honour your request within 7 days and remove your data from our active database.
To opt out, choose any of:
- Reply STOP to any SMS or WhatsApp message from us
- Email [email protected] with "Opt out" in the subject
- Use the unsubscribe link in any marketing email
- Submit a request via our contact form (when published)
When you opt out, we will:
- Stop all marketing and non-essential communications immediately
- Mark your record as "opted out — do not contact"
- Within 7 days, delete your record from active databases (we may retain a minimal anonymised record for legal-obligation compliance, see "Retention" below)
4. Who we share your data with
We share your data only with the categories of recipient needed to deliver our service. We do not sell your data.
- Customer relationship management (CRM) — lead management and follow-up tracking
- Hosting + content-delivery infrastructure — site delivery, security, and abuse prevention
- Site analytics services — both privacy-friendly (cookieless) and standard analytics
- Advertising-attribution services — to measure conversion of paid campaigns
- Error monitoring and uptime monitoring — site reliability; non-PII technical events
- Internal team-communication tools — to route incoming enquiries to the right specialist on our team
- Property developers and their authorised representatives — only when you specifically request a brochure or sales offer for one of their projects, and only the minimal data needed (name + phone + project of interest)
For a current list of the named service providers within these categories, email [email protected]. We update this list when providers change.
For international transfers from the UAE / EU, we rely on standard contractual clauses, adequacy decisions, or the data subject's explicit consent.
5. Cookies and similar technologies
We use:
- Strictly necessary: Cloudflare Turnstile (anti-abuse), Vercel routing
- Analytics: Google Analytics 4 (cookies; opt-out via browser settings or privacy-friendly extensions), Plausible (cookieless)
- Advertising: Google Ads conversion tracking — only sets cookies after you submit an enquiry; we do not run third-party retargeting cookies at this time
We do not currently display a cookie consent banner. Our analytics fall under "legitimate interest" basis under PDPL + GDPR (anonymised aggregated metrics, no individual profiling). If you would prefer not to be tracked, use your browser's "Do Not Track" setting, an ad-blocker, or a privacy-focused browser.
6. Retention
| Data | Retention |
|---|---|
| Active leads (you've enquired, we're in conversation) | Until conversion + 3 years thereafter, or until you opt out (whichever first) |
| Opted-out records | Anonymised, retained only for compliance audit, 5 years |
| Closed / cold leads (no response after 90 days) | 3 years from last interaction, then deleted |
| Won deals (you became a customer) | 7 years (UAE corporate-records retention requirement) |
| Site analytics (aggregated) | 26 months (Google Analytics default) |
| Server logs | 30 days |
| Hashed IP / fraud-prevention data | 90 days |
After the retention period, we delete or anonymise the data.
7. Your rights
Under PDPL + GDPR, you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure ("right to be forgotten") — delete your data, subject to legal-obligation exceptions
- Restriction — limit how we process your data
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interest
- Withdraw consent — at any time, where consent is the lawful basis
To exercise any right, email [email protected]. We respond within 30 days.
If we cannot resolve your concern, you may complain to:
- UAE: TDRA — tdra.gov.ae
- EU: your local data-protection authority
- UK: Information Commissioner's Office — ico.org.uk
8. Security
We protect your data using industry-standard measures including encryption in transit (TLS 1.2+), encryption at rest (AES-256), access controls, audit logs, and regular security reviews. Despite our best efforts, no system is 100% secure; we cannot guarantee absolute security.
If we become aware of a personal-data breach, we will notify you and the relevant regulator within 72 hours where required by law.
9. Children
The Site is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you become aware that a minor has submitted data to us, contact [email protected] and we will delete it.
10. Updates to this policy
We may update this policy from time to time. Material changes will be communicated via the Site (banner at top) and via email if we have your address. The "Effective date" at the top reflects the latest version.
11. Contact us
For privacy questions, opt-out requests, or to exercise your rights:
Email: [email protected]
12. Governing law
This policy is governed by the laws of the United Arab Emirates. Disputes are subject to the exclusive jurisdiction of the Dubai courts.