Privacy Policy

SY Capital Estates ("SY Capital", "we", "us") is a real estate brokerage and investment advisory firm based at 201, Building 4, Dubai Hills Business Park, Dubai Hills Estate, Dubai, United Arab Emirates. Our real estate services are regulated by the Dubai Land Department and the Real Estate Regulatory Agency (RERA).

This policy applies to sycapitalestates.com, any SY Capital mobile application, our social media and advertising lead forms (including Google and Meta lead forms), and any other channel that links to it. We are the controller of the personal data described here.

Questions about this policy or your data: info@sycapitalestates.com or +971 4 579 9888.

Data you give us when you enquire, book a viewing, request a brochure or details, register interest, subscribe or contact an advisor:

• Identity and contact details: salutation, name, email address, phone number and country code.
• Your enquiry: the property or project you asked about, your areas of interest, budget, buying, selling or renting intent, and any message you write.
• Email verification: a one-time code we send to confirm that an email address is yours.
• Conversations with our advisors by phone, email or WhatsApp, and messages you type into our AI property assistant.
• If you are selling or letting: details of the property you ask us to market.

Data collected automatically when you use the site or app:

• Campaign attribution: the page you landed on, the referring site, UTM parameters and advertising click identifiers (gclid, fbclid, msclkid), saved with any enquiry you submit so we know which advertising works.
• Usage and device data via Google Analytics 4 and Google Tag Manager: pages viewed, interactions, approximate location (city / country), browser and device type. See our Cookie Policy.
• Article reading statistics: a salted, one-way hash of your IP address and browser identifier. We do not store the raw IP address.
• Preferences kept on your own device: your colour theme, display currency and whether you have already unlocked a brochure.

We may also receive your details from property portals (such as Property Finder, Bayut and dubizzle) and from Google or Meta lead forms when you submit an enquiry there.

We do not knowingly collect sensitive personal data (such as health or biometric data), and we do not collect payment card details on the site.

• To respond to your enquiry and connect you with an advisor, including by phone, email and WhatsApp.
• To arrange viewings, send brochures, price lists and project details you asked for.
• To provide our brokerage, leasing, sales and investment advisory services, and to perform any agreement we enter into with you.
• To send you property updates and market insights where you have agreed to receive them. You can opt out at any time.
• To measure and improve our website, app and advertising, including counting conversions on advertising platforms.
• To keep our services secure, prevent fraud and abuse, and defend against automated attacks.
• To meet our legal and regulatory obligations, including UAE anti-money-laundering (AML) and know-your-customer (KYC) requirements that apply to real estate transactions, and RERA / Dubai Land Department rules.

We process personal data under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and, where it applies to you, the EU / UK General Data Protection Regulation (GDPR). We rely on:

• Your consent: for example when you submit a form and ask to be contacted, or opt in to marketing. You can withdraw consent at any time.
• Performing a contract or taking steps at your request before entering one.
• Our legitimate interests: running, securing and improving our business and measuring our marketing, balanced against your rights.
• Compliance with a legal obligation, such as AML record-keeping.

We do not sell your personal data. We share it only as needed for the purposes above, with:

• Our advisors and staff who handle your enquiry.
• Our CRM provider (Goyzer), which stores enquiries and manages our follow-up.
• Hosting and infrastructure providers: Amazon Web Services (servers and file storage) and MongoDB Atlas (database).
• Communication providers we use to send email and messages (such as MSG91) and WhatsApp, when you choose to message us there.
• Analytics and advertising providers: Google (Analytics, Tag Manager, Ads) and, where you interact with our ads on their platforms, Meta (Facebook and Instagram).
• AI providers (such as Anthropic, OpenAI or Google) that process the text you type into our AI property assistant or search so it can answer. Do not include sensitive personal details in those messages.
• Developers, landlords, sellers, mortgage advisors, conveyancers and other parties involved in a transaction you ask us to progress, only with your knowledge.
• Regulators, courts, law enforcement and the Dubai Land Department where the law requires it.

Our service providers act on our instructions and are bound to protect your data.

Some of our providers store or process data outside the UAE, including in the European Union and the United States. Where we transfer data abroad we rely on the safeguards permitted by the PDPL and, where relevant, the GDPR, such as standard contractual clauses or the recipient country’s adequate level of protection.

We keep enquiry and client records for as long as we are in contact with you and then for up to five years after our last interaction, which is the period UAE AML law requires for real estate transaction records. Analytics data is kept for up to 14 months. Data we no longer need is deleted or anonymised.

Subject to the law that applies to you, you have the right to:

• Access the personal data we hold about you and receive a copy.
• Correct inaccurate or incomplete data.
• Have your data deleted. See Data Deletion for how to ask.
• Restrict or object to processing, including objecting to direct marketing at any time.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting processing that has already taken place.
• Complain to a data protection authority, such as the UAE Data Office or your local authority in the EU / UK.

To exercise any right, contact info@sycapitalestates.com or +971 4 579 9888. We may need to verify your identity first, and we will respond within 30 days.

We send marketing messages only where you have agreed to receive them or where the law otherwise allows it. Every marketing email has an unsubscribe link. You can also reply "STOP" to a WhatsApp message or ask any advisor to stop contacting you.

We use encryption in transit (HTTPS), access controls by role, and reputable hosting providers to protect your data. No system is perfectly secure. If a breach affects you, we will notify you and the authorities where the law requires.

Our services are intended for adults. We do not knowingly collect data from anyone under 18. If you believe a child has given us their details, contact us and we will delete them.

Our site links to developers, property portals, maps, social networks and WhatsApp. Their privacy practices are their own; read their policies before giving them your data.

We will update this policy when our practices change and revise the "Last updated" date above. Where a change is significant, we will tell you on the site or by email.