Legal · Draft
Privacy policy
Draft pending legal review.
Draft — not yet legally reviewed. This page is a structure for a lawyer to complete. Highlighted items are placeholders and must not be relied on.
1. Who we are
GulfMetric is operated by [LEGAL REVIEW: legal entity name], licensed in [LEGAL REVIEW: emirate / free zone and licence number], registered address [LEGAL REVIEW: address]. Contact for privacy matters: [LEGAL REVIEW: privacy email].
2. Information we collect
Account details you give us (email address and password, stored securely by our authentication provider).
Text you submit to our AI tools (listing checks, neighbourhood finder inputs such as budget and income).
Technical data such as device, browser and usage logs. [LEGAL REVIEW: confirm analytics / cookies used]
3. How we use it
To provide the service, secure accounts, generate AI responses you request, and improve the product. Lawful basis: [LEGAL REVIEW: basis under UAE PDPL (Federal Decree-Law 45/2021) or DIFC/ADGM law, as applicable].
4. AI processing
Text you submit to AI tools is sent to third-party AI model providers to produce your answer. [LEGAL REVIEW: confirm provider retention terms and whether inputs are stored]
5. Sharing and transfers
Service providers: hosting, database and authentication, AI models. [LEGAL REVIEW: list processors and countries; cross-border transfer safeguards]
6. Retention
[LEGAL REVIEW: retention period per data type]
7. Your rights
Access, correction, deletion and objection, subject to applicable law. To make a request, contact [LEGAL REVIEW: privacy email]. [LEGAL REVIEW: response timeframe and complaint authority]
8. Changes
Last updated: [LEGAL REVIEW: date].
Checklist for your lawyer
Information needed to finalise this page:
- Legal entity name, trade licence number, issuing authority and registered address
- Which data protection regime applies (UAE PDPL, DIFC DP Law, ADGM) and any DPO appointment
- Privacy contact email and postal address
- Full list of analytics, cookies and tracking tools in use
- List of service providers (hosting, database, AI model providers, email) and where they store data
- AI provider data-retention and training-use terms
- Retention periods for accounts, AI inputs, logs and imported market data
- Whether the service is offered to under-18s
- Marketing email plans and consent approach
- Process and timeframe for handling data subject requests