Privacy Policy

01Who we are

This website is operated by Wincasa LLC, trading as Wincasa Properties, a real estate brokerage based in Dubai, United Arab Emirates. We market residential developments built by Binghatti under an authorised sales partner arrangement. We are the data controller for the personal data described in this policy.

Binghatti is the developer of the projects shown on this site. Binghatti does not operate this website, does not receive the data you submit through it, and is not responsible for how we handle that data. Where Binghatti later receives your details — for example when you reserve a unit — that transfer is described in the section on sharing below.

You can reach us at any time using the contact details at the end of this policy.

02What this policy covers

This policy applies to personal data we collect through this website (including its enquiry forms, popups and cookies), through WhatsApp, telephone and email conversations that begin on this website, and through viewings, reservations and purchases that follow from such an enquiry.

It does not cover the developer's own website, WhatsApp's own service, Google Maps, or any other third-party site or app that we link to. Each of those has its own privacy terms.

03Information you give us

When you complete an enquiry form on this site — whether it is the contact form, a project page form, the footer form or a popup — we ask for the following. Fields marked as required on the form are needed to reply to you; the rest are optional.

• Your full name.
• Your email address.
• Your mobile number and country dialling code.
• The project you are interested in, if you choose one.
• Your indicative budget range, if you choose one.
• The type of enquiry (buying to live, investing, brochure request, viewing, call back, or something else).
• A free-text message, if you write one.
• Your confirmation that you agree to be contacted by Wincasa about the enquiry and accept this policy.

04Information collected automatically with an enquiry

So that we can tell which page or advert led to your enquiry, and so that the form cannot be abused, the following is recorded alongside each submission:

• Which form on the site you used (for example "project-hero", "footer" or "contact") and which button opened it.
• The address of the page you submitted from, and the page you first landed on in that browsing session.
• The referring website, if your browser sent one.
• Campaign tags in the address you arrived on (utm_source, utm_medium, utm_campaign, utm_term, utm_content, utm_id) and advertising click identifiers (gclid from Google, fbclid from Meta), if present. These are kept in your browser's session storage for the duration of the session so the enquiry is credited to the campaign that brought you here, not the page you converted on.
• Your browser's user-agent string (browser and operating system family).
• The date and time of submission.
• Your IP address. Our server uses it to limit the number of submissions from one address in a short period and to detect automated abuse. It is written to the server-side enquiry log together with the fields above.

05Information from conversations and transactions

If you contact us on WhatsApp or by phone, we see the number you use, your WhatsApp profile name and picture if you share them, and the content of our conversation. If you email us, we hold the email and any attachments.

If you proceed to reserve or purchase a unit, we will need identity and transaction information required by the developer, the Dubai Land Department and UAE anti-money-laundering rules. Typically this means a copy of your passport and, where applicable, Emirates ID or residence visa, your residential address, and proof of the source of funds. We collect these only at that stage, never through the website forms.

06How we use your information

We use personal data for the following purposes and on the following legal grounds under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and related regulations:

• To respond to your enquiry, call you back, send brochures, floor plans, price lists and payment plans, arrange viewings and follow up on your interest — on the basis of your consent given on the form and, where you go on to reserve, the steps needed to enter into a contract.
• To match you with suitable units across the Binghatti projects we market, using the project, budget and enquiry type you told us — on the basis of your consent.
• To send you occasional updates about new releases, price changes or launch offers in the Binghatti portfolio, if you have enquired with us. You can opt out at any time by replying, messaging or emailing us — on the basis of our legitimate interest in marketing to people who have asked about our services, subject to your right to object.
• To measure which pages and campaigns generate enquiries, so that we spend our marketing budget sensibly — on the basis of our legitimate interest.
• To protect the site and our inbox from spam and automated abuse through rate limiting and honeypot checks — on the basis of our legitimate interest in security.
• To meet legal obligations that apply to real estate brokers in Dubai, including record-keeping, anti-money-laundering checks and cooperation with regulators — on the basis of legal obligation.

07Who we share it with

We do not sell personal data and we do not share it with third parties for their own marketing. We share it only as follows:

• Within Wincasa LLC — with the consultant assigned to your enquiry and the colleagues supporting them.
• With the developer, Binghatti — only when you decide to reserve or purchase a unit, and only the details the developer needs to hold the unit, issue the reservation form and sales and purchase agreement, and register the sale. Until then, your enquiry stays with Wincasa.
• With the Dubai Land Department, Dubai's Real Estate Regulatory Agency and the developer's escrow bank where a transaction requires it.
• With service providers that host this website and its enquiry log, deliver our email, and, if you consent to analytics cookies, Google (Google Analytics). These providers process data on our instructions and may not use it for their own purposes.
• With WhatsApp (Meta Platforms) when you choose to contact us through that service — the conversation is carried by WhatsApp under its own terms and privacy policy.
• With courts, regulators or law-enforcement bodies where we are legally required to do so, or to establish, exercise or defend legal claims.

08Where your data is stored and international transfers

The website and its enquiry log are hosted with a commercial hosting provider whose servers may be located outside the United Arab Emirates. Our email and messaging tools may also process data outside the UAE. Where personal data leaves the UAE we rely on the provider's contractual commitments to keep it secure and to process it only on our instructions, in line with the transfer rules of the UAE data protection law.

Information shared with the developer, the Dubai Land Department or an escrow bank is held in the UAE.

09How long we keep it

• Enquiries (form submissions, WhatsApp and email threads that do not lead to a transaction): up to 24 months from our last contact with you, so that we can follow up on the project you asked about and honour any opt-out. We then delete or anonymise them.
• Server rate-limit records (IP address and a submission count): automatically discarded after a short rolling window, normally under 24 hours.
• Transaction files (reservation, sales agreement, identity and source-of-funds documents): for the period required by UAE anti-money-laundering and real estate regulations, generally at least five years after the transaction or the end of our relationship, whichever is later.
• Analytics data, where you consented: retained by Google Analytics for the period configured in our account (currently 14 months) and then aggregated.
• Preference cookies and local-storage flags: for the periods set out in the cookies section below, or until you clear your browser data.

10Cookies, local storage and analytics

This site is built as static pages and uses very little client-side storage. What it does use falls into two groups.

Essential storage — set without asking, because the site cannot behave sensibly without it:

• wincasa.cookie — remembers whether you accepted or declined analytics cookies, for 180 days.
• wincasa.popup.timed and wincasa.popup.exit — remember that you closed a promotional popup so that it is not shown again, for 3 days.
• wincasa.lead.done — remembers that you have already sent an enquiry, so promotional popups stay hidden, for 30 days.
• wincasa.attribution — session storage (cleared when the tab closes) holding the landing page, referrer and campaign tags described above.

11Analytics cookies (optional)

Only if you choose "Accept all" in the cookie banner, and only if analytics is enabled on the site, we load Google Analytics 4. It sets cookies beginning with "_ga" that identify your browser for up to two years and tell us which pages are viewed, roughly where visitors come from, and which enquiries were completed. IP addresses are truncated by Google before storage.

If you choose "Essential only", no analytics script is loaded and no analytics cookie is set. You can change your mind at any time by clearing this site's data in your browser, after which the banner will appear again. We do not use advertising cookies, remarketing pixels or cross-site tracking on this website.

12Your rights

Under UAE data protection law, and depending on where you live, you may have the right to:

• Ask what personal data we hold about you and receive a copy.
• Ask us to correct data that is inaccurate or incomplete.
• Ask us to delete your data, where we no longer need it for the purposes above or a legal duty to keep it.
• Withdraw consent you have given, including consent to marketing, at any time. This does not affect processing that took place before you withdrew it.
• Object to processing based on our legitimate interests, including direct marketing, and ask us to restrict processing while a dispute is resolved.
• Receive the data you gave us in a portable, machine-readable format.
• Complain to the UAE Data Office or another supervisory authority with jurisdiction over you, if you believe we have not handled your data properly. We would ask that you contact us first so that we can try to put things right.

13How to exercise your rights

Email or WhatsApp us using the details at the end of this policy and tell us what you would like us to do. We may ask you to confirm your identity so that we do not release data to the wrong person. We aim to respond within 30 days; if a request is complex we will tell you why more time is needed.

To stop receiving marketing messages, simply reply "stop" to any message or email from us, or ask your consultant. We will keep a minimal record of your opt-out so that we can honour it.

14How we protect your data

The site is served over HTTPS. Enquiries are transmitted encrypted to our server, which validates them, applies rate limiting and stores them in a log outside the public web directory before emailing them to the Wincasa sales desk. Access to that mailbox and log is limited to Wincasa staff who need it. Transaction documents are stored on access-controlled systems and shared with the developer and authorities through their official channels.

No method of transmission or storage is completely secure. If we become aware of a breach affecting your personal data we will tell you and the relevant authority as required by law.

15Children

This website is aimed at adults considering the purchase of property. We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted information to us, contact us and we will delete it.

16Links to other sites

This site links to the developer's website, to WhatsApp and, where set, to a map service for our office. We are not responsible for the content or privacy practices of those sites. Please read their policies before sharing personal data with them.

17Changes to this policy

We will update this policy when our practices, our tools or the law change. The date at the top shows the current version. Material changes will be flagged on this page, and where we rely on your consent for a new purpose we will ask for it again.

18Contact

Data controller: Wincasa LLC (Wincasa Properties), Dubai, United Arab Emirates. Use the email address or WhatsApp number shown below for any question, request or complaint about personal data. If you write to us about a specific enquiry, please include the name and email you used on the form so that we can find it quickly.