Privacy Policy

1. Introduction

We take your privacy seriously and are committed to safeguarding your personal information at GRD Off Plan (which term includes all subsidiaries of GRD Off Plan), referred to as (“Company,” “we,” “us,” or “GRD”). We value you as our customer, respect your privacy, and are committed to protecting it through our compliance with this policy.

This policy describes the sources of your personal information that we may collect from you or that you may provide to us, our purposes for collecting and processing your data, and our practices for collecting, using, maintaining, retaining, protecting, and disclosing that information.

If you have any questions or concerns about this privacy policy or your personal information, please contact us using the details provided in the Section – ‘How do you contact us?’.

2. What are the sources of your personal data?

The sources of your personal data collected (collectively referred to as “Platforms” in this policy) may include, without limitation, the following:

  • GRD websites: These are websites we created for you that we operate. They include websites operated by GRD under our own domains and web addresses (URLs) and our own micro-sites that are part of third-party social media networks such as Facebook, Twitter, or Instagram.
  • Emails, text messaging services, and other electronic messages are the electronic text-based interactions between you and GRD.
  • GRD mobile applications: These are smartphone applications created for you and operated by GRD or one of our partners.
  • GRD customer service: Any communication between you and our customer service center (e.g., phone, chatbot, email, WhatsApp, etc.).
  • Online / Offline registration forms: These include printed/digital registrations, surveys, or questionnaires GRD collects via registration forms, contests, events, and various promotions when you participate in one of our events or visit our promotional stands in malls to enquire about our properties
  • Advertising: You might interact with one of our or our partners’ advertisements on our websites and apps, and we might receive and collect this information.
  • Career Portal: This includes a recruitment portal across GRD.
  • Data we create: GRD may also make data about you, when you avail our services.
  • Data from other sources: These include social media networks, market research agencies, GRD third-party sales agents, registered brokers, GRD promotional partners (such as Banks UAE Government entities), public sources, and data received when we acquire other companies.
  • GRD Public Wi-Fi: Any GRD public Wi-Fi network usage at our registered offices.

This policy does not apply to information collected:

  • through any other means, including any other website operated by any third party or
  • by any third party, including through any application or content (including advertising) that may link to the Website.

3. What information do we collect about you, and how do we use your personal information?

The type of personal information we collect on or through our platforms, why we collect and how we use the personal information are explained in the following:

3.1 To respond to any queries or expressions of interest made by you:

We would use your personal data to help us respond to your queries or expressions of interest and to ensure we help you find the right property that suits your needs. We may receive your personal data through one of the following channels:
When you send us an inquiry via our website/social media page/call/WhatsApp regarding one of our properties; When you participate in one of our events or visit our stands to enquire about our properties; When you may have expressed interest in our properties through our third-party agents; When you visit our sales office or contact our sales advisors regarding any property you wish to purchase.
We collect the following personal information: name, email address, phone number, nationality, and details of your inquiry pursuant to our legitimate business interests. Sometimes, your inquiry may relate to a specific service request, for example, raising an enquiry regarding a specific property.

We need your personal information for such requests to help us respond to your request and fulfil our contractual obligations under the requested service. Additionally, when you call our customer service center, we would maintain a record of the communications, including call recordings, in pursuit of our legitimate business interest to monitor and improve the quality of our customer support.

3.2 To enter or to conclude a sales purchase agreement:

Once you have decided to move forward to purchase a property with GRD, we collect personal data such as name, passport, visa details, address, national ID, and contact to conclude the contractual arrangements to finalize the property sale and to facilitate property registrations, handover, and payment arrangements. Additionally, to conclude property sales, we are required to carry out a security clearance of our customers in compliance with local laws and pursuant to our legitimate business interest to combat any fraudulent transactions.

3.3 To request your feedback and to respond to complaints:

Your satisfaction is our utmost priority, and we proactively take necessary steps to ensure you are satisfied with our services. To help us respond to your feedback or complaints, we collect the following personal information: name, email ID, transaction details (such as the service you availed), and your feedback/ complaints in the “We Care submission form” through a survey conducted after you complete a transaction or after the completion of your call with our customer service team. We collect and use your personal information in pursuit of our legitimate business interests to address your concerns and to take necessary steps towards continual improvement. If you prefer not to receive such information, you may opt-out by following the instructions in Section – “How to opt out?”.

3.4 To personalize and provide you with information about GRD’s services and latest offers:

We may combine the information we receive and collect about you to better understand your interests and preferences so that we can provide you with an experience tailored to those interests and preferences. For example, we may do this by notifying you of any events conducted by GRD or sending you personalized offers, discounts, or promotions by our mobile application, email (where you have agreed to receive our emails), or advertising content relevant to your interests. It is in our legitimate business interests to send you information about GRD’s services and latest offers. We use your personal information, such as email ID and/ or contact number, to share information relating to GRD’s services and the latest offers that may interest you. If you prefer not to receive such information, you may opt-out by following the instructions provided in Section – “How to opt-out?”.

3.5 To facilitate email campaigns carried out by our sales and marketing departments:

As part of our email campaigns, we track whenever you receive, open, click a link, or download any attachments from an email you receive from GRD. We will perform automated profiling of such information to evaluate your interest in our service offerings or promotions. This processing will enable us to identify and target potential customers or business partners, tailor our marketing, and provide you with relevant and timely content based on your interests in pursuit of our legitimate business interests. If you prefer not to receive such information, you may opt out by following the instructions provided in Section – “How to opt out?”.

3.6 To facilitate Advertisements:

GRD uses the personal information you provide us for commercial purposes to help us tailor and show advertisements to you. We may partner with third parties to help us display relevant advertising and manage our advertising across multiple channels, including social media platforms. Our third-party partners may use cookies and non-cookie-based technologies to help us show you advertising based on your browsing activities and interests. If you wish to opt-out, you may follow the instructions provided in Section – “How to opt out?”

3.7 To establish a working relationship with Third Party Agents and Business Partners:

We collect/ receive personal information about you through one of the following channels:

When you send us an inquiry for Tenancy or if you were previously engaged under a Tenancy arrangement with us; When you participate in any of our sales, marketing, and thought leadership events (including webinars) organized or hosted by GRD; When our sales executive or business leaders visit events organized by external organizations (including the company you represent); We collect from our sales executives or business leaders who share a professional/ personal relationship with you; or We collect from publicly available information that you have shared on professional networking platforms such as LinkedIn.

We collect the following personal information: name, email ID, contact number, designation, and the company you represent. We use this information for the purposes listed below, in pursuit of our legitimate business interests to share information relating to GRD services and possible tenancy opportunities, to invite you to future events that may be of interest to you and/ or the company you represent; and to establish a working relationship with the company you represent.

3.8 To enter, renew, or fulfil service contracts with our Tenants, Third Party Agents, and Business Partners:

We collect and use personal information such as name, email ID, contact number, and, in certain cases, passport/ government ID proof to facilitate the performance of the tenancy contract between GRD and the organization you represent. We may also collect personal information (such as Name, contact details, passport/ government ID, etc.) of the employees of your organization that would be stationed within our malls/ facilities for sales events to facilitate security pass clearance pursuant to our legitimate business interest and to fulfil our contractual obligations.

3.9 To Enter a Commercial or Investment Relationship:

We collect and use information when you enter a commercial or investment relationship (as a shareholder or buyer of one or more assets from the Group’s portfolio) with a GRD Group company. It is in accordance with Contractual obligations to collect the following Data either directly from you or from the company that you work or represent: Name, contact details, phone number, postal address, email address, date and place of birth, percentage of capital and voting rights held, other data but strictly linked to the investment, etc.

3.10 To comply with legal requirements and exercise or defend legal claims:

We may need to process and retain your personal information to comply with legal requirements to which we are subject (for example, in relation to licensing, health, and safety). Our legitimate interests are to process personal information to exercise and defend legal claims. Processing personal information may also be necessary to ensure compliance with the relevant legal and regulatory obligations.

3.11 To process your payments and protect against fraudulent transactions:

We may need to process your personal information to keep your payments safe and secure and protect against fraudulent transactions. Our legitimate interest is to process personal information to keep your payments secure and prevent fraud. We may also require your personal information to send payment reminders and legal intimations in case of overdue payments. Processing personal information this way may also be necessary to ensure compliance with the relevant legal and regulatory obligations.

3.12 To comply with any opt-out or do-not-disturb requests we receive from you:

We understand that you may not prefer us to contact you with any offers, promotions, or details of our products and services. If you opt out, we may be required to maintain information such as name, email ID/contact number, and the subscription(s) you have opted out of to ensure compliance with your requests. Also, in the future, if you wish to hear from us, you may, at any time, contact us to opt-in, and we would be happy to keep you posted about our latest offers, promotions, and/ or details of our products and services.

3.13 To comply with health and safety obligations:

We may be required to process your medical information or any other health-related information in the event of an accident or injury at our residential units or the communities we manage. Our legitimate interest is to manage accidents and injuries occurring in our managed facilities. This information would also be required to improve the accident prevention system (including fire protection and prevention against foreseeable natural and technological risks). It could also be required for legal purposes or to prepare for and defend against legal claims.

3.14 Other information we collect

There is other information we may collect that does not directly reveal your specific identity or does not directly relate to you as an individual. We may automatically collect the following information pursuant to our legitimate business interests when you visit our website or utilize our services:
  • Your equipment, browsing actions, and patterns are automatically collected as you navigate our websites.
  • Usage details, time of requests, browser types, operating system, IP addresses, and information collected through cookies, web beacons, and other tracking technologies.
  • Details of your visits to our website, including traffic data, location data, logs, and other communication data and the resources you access and use on the website.
The information we collect automatically is statistical data. It helps us to improve our website and to deliver a better and more personalized service by enabling us to:
  • Estimate our audience size and usage patterns.
  • Store information about your preferences, allowing us to customize our website according to your interests.
  • Speed up your searches and recognize you when you return to our website.

The technologies we use for this automatic data collection may include:

  • Cookies: A cookie is a small piece of data, including an identifier made of letters and numbers, sent by a web browser and stored on your computer. Cookies are a reliable mechanism for remembering information about you, so your interaction with our website is seamlessly simple. Cookies typically do not contain any information that personally identifies you. Still, personal information we store about you may be linked to the information stored in and obtained from cookies.
  • Flash Cookies: Certain website features may use locally stored objects (or Flash cookies) to collect and store information about your preferences and navigation to, from, and on our Website. Flash cookies are not managed by the same browser settings used for browser cookies.
  • Web Beacons: Pages of the Website and our emails may contain small electronic files known as web beacons (also referred to as clear gifs. pixel tags, and single-pixel gifs) that allow the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).
We use these cookies for the following purposes:
  • To identify you when you visit our platforms and to help you navigate through our platforms;
  • To help determine if you are logged into our platforms:
  • To store information about your preferences and to personalize our platforms for you;
  • To secure and protect your user account and our platforms, and

3.15 Information we receive from others

We also work closely with third parties and receive information about you from them. We also collect personal information from individuals who may refer you as a friend to our loyalty schemes, third-party agents (to whom you may have expressed interest in our properties), products, or services. We ask these individuals to confirm that you are happy to hear from us.

4. How to opt out?

  1. Email: You can click on the unsubscribe link in the email you receive from us.
  2. SMS: You can follow the instructions provided in the messages you receive from us
  3. Applications: You may use the “opt-out” option provided within the GRD applications
  4. Contact us: You may use the details in Section – ‘How do you contact us?’

5. Who might we share this information with?

We may disclose personal information that we collect, or you provide as described in this privacy policy:
  • We may share your personal information with any member of the GRD, including subsidiaries, affiliates, and holding companies, to enable you to request our services, process your payments, understand your preferences, conclude a sale, facilitate any maintenance/ service requests, send you information about products and services that may be of interest to you and conduct the other activities described in this privacy policy.
  • We may use carefully selected third parties to perform services on our behalf or assist us with providing services to you. For example, we may engage third-party agents, distribution partners, cloud service providers, IT service providers, and other third parties to support and facilitate property sales and bookings, property handover, security services, brand promotions, marketing, advertising, communications, to personalize and optimize our service, to analyze and enhance data (including data about users’ interactions with our services), and to provide legal, accounting, insurance, audit, and other professional services. While providing such services, these third parties may have access to your personal information.
  • We may share your personal information with select business partners in sectors including banking, travel, entertainment, lifestyle, and other industries to enable our customers to avail themselves of special offers. For example, our banking partnership allows our customers to avail of home financing options.
  • Where required or permitted by law, personal information may be provided to others, such as regulators and law enforcement agencies.
  • We may share to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all the Company’s assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which personal information held by the Company about our Website users is among the assets transferred.
  • We may share with government or regulatory authorities upon request to comply with any court order, law, or legal process
  • We may share with other companies and organizations for fraud protection and credit risk reduction if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers, or others.

The personal information we collect from you may be transferred to and stored at a destination outside the EEA (for example, in Dubai). It may also be processed by staff outside the EEA who work for us or one of our third-party vendors. We will take all reasonably necessary steps to ensure that your personal information is treated securely and in accordance with this privacy policy and applicable data protection laws, including, where relevant, entering EU standard contractual clauses (or equivalent measures) with the party outside the EEA receiving the personal information. We carry out such transfers to facilitate the performance of our contract and pursue our legitimate business interests to help us serve you better. We have implemented adequate safeguards to protect and secure the information involved in such transfers. Where we transfer personal information outside of the EU, we either transfer personal information to countries that provide adequate protection (as determined by the European Commission) or have appropriate safeguards. Appropriate safeguards to cover these transfers are standard contractual/data protection clauses adopted by the European Commission.

If you would like more information on protection measures and transfer mechanisms, please contact us using the details provided in Section – ‘How do you contact us?’.

6. How long do we keep information about you?

We will only keep your personal information for as long as is reasonably necessary, considering our need to answer queries or resolve problems for any other purpose outlined above or to comply with legal requirements under applicable law(s). This means that we may retain your personal information for a reasonable period, for example, till the end of the leasing contract with the organization you represent or after your query has been addressed. In some instances, we may retain your personal information for a longer period where extended retention periods are required by law or regulation to establish, exercise, or defend our legal rights. We will ensure that it is disposed of securely when no longer needed. For more information on where and how long your personal information is stored, and for more information on your rights of erasure and portability, please contact us using the details provided in Section – ‘How do you contact us?’.

7. How secure is your information?

Your data security is an essential concern to us. We provide the utmost care in securely transmitting your personal information from your computer, smartphone, and other electronic devices to our servers. We use industry security standards to safeguard the confidentiality of your information (e.g., firewalls, Transport Security Layer (“TLS”), etc.) and to make sure that your personal information is secure with us.
We have implemented and maintained appropriate technical and organizational security measures, policies, and procedures to protect your personal information from accidental loss, unauthorized access, use, alteration, and disclosure. All information you provide is stored on our secure servers behind firewalls. All payment transactions are encrypted using TLS technology.

Ex: Measures we take include:

  • Placing confidentiality requirements on our staff and service providers;
  • Restriction of access to your personal information to employees and third parties strictly on a need-to-know basis, such as to respond to your inquiry or request;
  • Destroying or anonymizing personal information if it is no longer needed for the purposes for which it was collected and
  • Using secure communication channels for transmitting personal data.

The safety and security of your information also depend on you. Where we have given you (or where you have chosen) a password for access to certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our website. Any transmission of personal information is at your own risk. We are not responsible for circumventing any privacy settings or security measures contained on the Website.

8. What are your rights?

If you are subject to laws that provide you with such rights, you may have certain rights in relation to your personal information given below.

If you wish to access any of these rights, we may ask you for additional information to confirm your identity and for security purposes before disclosing personal information to you. We reserve the right to charge a fee where law permits, for example, if your request is manifestly unfounded or excessive.

If you would like to access the rights below, In that case, you may contact us by mailing us at  Info@ghaderiestate.com or sending us a communication to GRD Off Plan, Burlington Tower 3102, Business Bay, Dubai, United Arab Emirates. We shall aim to comply with all requests within a reasonable time that aligns with applicable laws. We may not always be able to address your request fully. For example,

  • if it would impact the confidentiality we owe to others, or
  • if we are legally entitled to deal with the request differently. Or
  • if your request involves the deletion of information that is required to comply with the legal requirements.

We will make every reasonable effort to honor your request per applicable laws. If we require additional time due to the complexity of the request, we shall promptly inform you.

The right to access

You have the right to confirm whether we process personal data about you, receive a copy of your personal data held by us, and obtain certain other information about how and why we process your personal data (like the information provided in this privacy statement).

The right to rectification

You have the right to request that your data be amended or rectified where it is inaccurate (for example, if you change your name or address) and to complete incomplete personal data.

The right to restrict the processing of personal data

You have the right to restrict our processing of your personal data in the following cases:
  • Temporarily for a period when you have contested for the accuracy of the personal data;
  • Temporarily for a period when you have objected to the legitimate interest identified by us,
  • Your personal data have been unlawfully processed, and you request the restriction of processing instead of deletion;
  • The personal data are no longer necessary in relation to the purposes for which they were collected and processed, but you require the personal data to establish, exercise, or defend legal claims;
We can continue to use your personal information following a request for restriction where:
  • we have your consent or
  • to establish, exercise, or defend legal claims; or
  • to protect the rights of another natural or legal person.

The right to erasure (also known as ‘the right to be forgotten’)

You have the right to obtain deletion of your personal data in the following cases:
  • The personal data are no longer necessary in relation to the purposes for which they were collected and processed;
  • Our lawful basis for processing is consent; you withdraw consent, and we have no other lawful basis for the processing;
  • Our lawful basis for processing is that the processing is necessary for a legitimate interest pursued by us, you object to our processing, and we do not have to override legitimate grounds;
  • You object to our processing for direct marketing purposes;
  • Your personal data have been unlawfully processed, and
  • Your personal data must be erased to comply with a legal obligation under EEA to which we are subject.
We are not required to comply with your request to erase personal information if the processing of your personal information is necessary:
  • For compliance with a legal obligation; or
  • For the establishment, exercise, or defense of legal claims.

The right to object to the processing of personal data

You have the right to object to our processing of your personal data in the following cases:
  • Our lawful basis for processing is that the processing is necessary for a legitimate interest we pursue, and our processing is for direct marketing purposes.

The right to data portability

You have the right to receive your personal data provided to us and have the right to send the data to another organization (or ask us to do so if technically feasible) where our lawful basis for processing the personal data is consent or necessity for the performance of our contract with you. The processing is carried out by automated means.

The right to withdraw consent at any time (where processing is based on consent)

Where we process personal data based on consent, individuals have a right to withdraw consent at any time.

The right to complain to a supervisory authority

Suppose you are not content with how we manage your personal information. In that case, you can complain to a supervisory authority in your country of residence, place of work, or country where an alleged infringement of data protection law has occurred within the EEA. We sincerely hope that you will never need to, but if you want to complain about our use of personal data, you can contact us in one of the ways mentioned in Section – ‘How do you contact us?’. We will look and respond to any complaints we receive.

9. Updates on Policy

This policy may change from time to time. Your continued use of our platforms after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

10. How do you contact us?

In case of any queries related to this policy, you can contact our Data Privacy Office in one of the following ways.