Legal · Version of 1 August 2026 · effective upon publication
Privacy notice.
How DMDC handles what you send us, and what the site measures while you read it — drafted under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
1 · Who we are.
This notice is given by the DMDC group of companies (“DMDC”, “we”), of Office 1305, Tower B, Business Central Towers, Dubai Media City, Dubai, United Arab Emirates, acting as controller of the personal data described below. For anything in this notice: info@dmdc.ae.
2 · What we collect, and on what basis.
Through the Private Brief we collect exactly four things: your name, one means of contact, optionally the community or area of your property, and what you choose to tell us about your project. If you contact us directly, we hold that correspondence. That is the complete list — we do not purchase data about you, enrich your record from third parties, or ask this site for anything you have not chosen to give it.
We process this data on the bases recognised by Federal Decree-Law No. 45 of 2021 (the “PDPL”): your consent, given when you send the brief, and the necessity of processing to take steps at your request toward a contract. We ask for no more than those purposes need.
Separately from that, and never joined to it, we measure how the site itself is used: which pages are read, how far down them people scroll, and where a link is followed. This is done with Microsoft Clarity, which records the movement of a cursor and the pages visited — not the person. We have configured it not to run at all on the Private Brief, and to hide the contents of any field you type into, everywhere on the site. It sets two cookies — named, with their lifetimes, on the cookies page — so that a returning visit is not counted twice. You may block or delete them in your browser at any time — the cookies page says how — and doing so changes nothing about how the site works for you. The basis for this measurement is our legitimate interest in knowing whether our own pages are useful — which the PDPL recognises where it does not prejudice your rights, and which is why the measurement is anonymous, excluded from the brief, and refusable.
We do this to learn which of our guides are useful and where a page loses people. Nothing collected this way is linked to a brief, a name or an address; we do not use it to build a profile of you, to target advertising, or to follow you to other websites.
3 · What we use it for — and never for.
We use your data to respond to your enquiry, to conduct any engagement that follows, and to keep the records UAE law requires of us. We do not sell or share your data for marketing, we do not add you to mailing lists without a separate and explicit consent, and we do not publish client identities or project details without express written approval — a commitment that predates this notice and outlasts any engagement.
4 · Who sees it.
Within the group, only the companies and senior people needed to answer your brief. Outside it, only our professional advisers under duties of confidence, and authorities where UAE law requires disclosure. Your data is stored in the UAE; if any processing requires transfer outside the UAE, we do so only as the PDPL permits, with protections no weaker than this notice.
The site measurement described in section 2 is the one exception, and it is not your data in the sense used above: it is held by Microsoft Corporation as our processor, on infrastructure outside the UAE, under Microsoft’s own contractual data protection terms. It carries no name, no contact detail and nothing typed into a field, and it is never combined with anything you send us.
5 · How long we keep it.
For as long as your enquiry or engagement is live, and thereafter only for the retention periods UAE law imposes on commercial records — after which it is deleted or irreversibly anonymised.
Site measurement is held separately and for a shorter period: Microsoft Clarity deletes it after thirteen months, and we do not archive it elsewhere.
6 · Your rights.
Under the PDPL you may ask us what we hold about you, ask for correction or deletion, restrict or object to processing, ask for your data in a portable form, and withdraw consent at any time without affecting prior lawful processing. Write to info@dmdc.ae — it reaches the people who can actually do it. If we fail you, you may complain to the UAE Data Office as the PDPL provides.
7 · Security and changes.
We protect your data with organisational and technical measures proportionate to its sensitivity, restrict access to those who need it, and will notify you and the authorities of any breach as the PDPL requires. If this notice changes, the date above changes with it, and no change reduces your rights retroactively.