Privacy Policy

02.Data Controller Identity

For the purposes of applicable data protection legislation, the data controller responsible for your personal information is:

03.UAE PDPL & Regulatory Framework

We operate strictly under the provisions of UAE Federal Decree-Law No. 45 of 2021 regarding Personal Data Protection (PDPL) and its executive regulations. Where interactions touch entities within the Dubai International Financial Centre (DIFC) or cross-border investors based in the European Union or United Kingdom, our processing is aligned with the DIFC Data Protection Law No. 5 of 2020 and the General Data Protection Regulation (GDPR).

04.Information We Collect

We collect and process only the minimum necessary data to provide our commercial consultancy services, categorized as follows:

05.Lawful Bases & Purposes of Processing

Under Article 4 and Article 6 of UAE Federal Decree-Law No. 45 of 2021, Auri Bespoke processes information exclusively under the following lawful grounds:

• Pre-Contractual & Contractual Fulfillment: To evaluate prospective developments, prepare cost planning proposals, execute chartered quantity surveying commissions, and manage formal appointments.
• Legitimate Commercial Advisory Interests: To optimize our digital platform, evaluate market trends in UAE construction pricing, prevent malicious traffic, and maintain commercial records.
• Statutory & Regulatory Obligations: To comply with UAE corporate tax declarations, anti-money laundering (AML) / know-your-customer (KYC) screening, and municipal authority filings.
• Consent: Where explicitly provided, such as opting into our executive market reports and research publications.

06.Commercial Confidentiality & NDAs

In the UAE development ecosystem, financial pro-formas, land acquisition costs, and contractor pricing structures are highly proprietary. Auri Bespoke maintains an unyielding commitment to commercial confidentiality:

• All development data shared during discovery is treated under implicit non-disclosure principles prior to formal bilateral NDA signing.
• We never sell, rent, monetize, or broker developer data, contractor rate libraries, or procurement bids to third parties.
• All employees and specialist partners are bound by permanent non-disclosure obligations and RICS professional ethics.

07.Third Parties & Disclosures

We disclose information strictly on a need-to-know basis to:

08.Cross-Border Data Transfers

Where personal data is transferred outside the United Arab Emirates (for example, to secure international cloud computing facilities), Auri Bespoke ensures compliance with Article 22 and 23 of the UAE PDPL. Transfers occur only to jurisdictions with adequate data protection laws or pursuant to Standard Contractual Clauses (SCCs) and robust technical safeguards.

09.Data Retention & Archival

We retain personal and commercial data only for as long as necessary to satisfy the purposes for which it was collected:

• Consultation Enquiries: Retained for 24 months from the last active correspondence unless converted into a formal retainer.
• Active Project & Contract Records: Retained for 10 years following completion of construction works in alignment with UAE civil code decennial liability periods and statutory commercial record obligations.
• Web Telemetry & Logs: Retained for a maximum of 12 months in anonymized format before automated purge.

10.Enterprise Security Protocols

We deploy industry-standard multi-layer cybersecurity measures, including:

11.Your Rights under UAE Law

Pursuant to Articles 13–18 of UAE Federal Decree-Law No. 45 of 2021, data subjects possess the following enforceable rights:

12.Contact & Data Protection Officer

To exercise your rights or if you have any questions regarding our compliance with UAE data protection standards, please submit your formal request to our appointed Data Protection Officer: