Privacy Policy

01Who we are and what this covers

This website is published and operated by Wincasa LLC, trading as Wincasa Properties, a real estate brokerage in Dubai, United Arab Emirates. It is not the official website of Meraas, it is not operated by or on behalf of the developer, and the developer is not responsible for its content.

Wincasa LLC is the controller of the personal data described here. We decide why and how it is processed, and we are the people you deal with about it.

This policy covers personal data collected through this website — its enquiry forms, its popups and the storage described below — and through the WhatsApp, telephone and email conversations that follow from an enquiry made here, up to and including a reservation.

It does not cover the developer's own website, WhatsApp's own service, Google Maps, virtual-tour hosts or any other third-party service we link to. Each of those has its own policy.

This site stores nothing beyond what it needs to work until you tell it otherwise: measurement stays switched off until you allow it in the cookie banner, and no advertising or cross-site tracking is used here at all.

02Collection of personal information — what you give us

Every enquiry form on this site — the contact form, the register-interest band, a project form, the menu form or a popup — asks for the same short set of fields. Fields marked required are the ones we need in order to reply.

• Your full name.
• Your email address.
• Your mobile number and its country dialling code.
• The project you are interested in, if you pick one.
• An indicative budget range, if you pick one.
• The type of enquiry — buying to live, investing, a brochure, a viewing, a call back, or something else.
• A free-text message, if you write one.
• Your confirmation that you are happy for Wincasa to contact you about the enquiry.

03Collection of personal information — what we record automatically

So that we can tell which page or campaign produced an enquiry, and so that the forms cannot be abused, the following is recorded alongside each submission:

• Which form you used and which button opened it, for example a project register band or the contact page.
• The address of the page you submitted from, and the page you first landed on in that browsing session.
• The referring website, where your browser sends one.
• Campaign tags in the address you arrived on (utm_source, utm_medium, utm_campaign, utm_term, utm_content, utm_id) and advertising click identifiers (gclid, fbclid) where present. These are held in your browser's session storage for the length of the session so the enquiry is credited to the campaign that brought you here rather than the page you happened to convert on.
• Your browser's user-agent string — browser and operating-system family.
• The date and time of submission.
• Your IP address, used by our server to rate-limit submissions from one address and to detect automated abuse, and written to the server-side enquiry log with the fields above.

04Collection of personal information — conversations and transactions

If you message us on WhatsApp we see the number you use, your WhatsApp profile name and picture where you share them, and the content of the conversation. If you telephone or email, we hold the number or the message and any attachments.

If you go on to reserve or purchase, we will need the identity and transaction information the developer, the Dubai Land Department and UAE anti-money-laundering rules require — typically a passport copy, Emirates ID or residence visa where you hold one, a residential address and evidence of the source of funds. We collect these only at that stage and never through a web form.

We do not take payments on this website and we do not operate a payment processor. Purchase money is paid by you to the project's escrow account under the developer's instructions, and we never see your card or bank credentials.

05Marketing communications

If you have enquired with us, we may occasionally send you news of new releases, price changes or launch offers in the projects we market. We do this because you asked us about buying, and only through the channel you used to reach us.

You can stop these at any time — reply “stop” to any message or email, or tell your consultant. We keep a minimal record of the opt-out so that we can honour it. Stopping marketing does not stop us replying to an enquiry you have made or to a transaction in progress.

We do not sell your data, we do not rent our list, and we do not pass your details to anyone for their own marketing.

06Use, sharing and retention — how we use it

We process personal data for the purposes below. Where we rely on your consent you can withdraw it at any time; where we rely on our legitimate interests you can object.

• To answer your enquiry, call you back, send brochures, floor plans, the developer's price lists and payment plans, arrange viewings and follow up — on the basis of your consent, and, once you decide to reserve, the steps needed to enter into a contract.
• To match you with suitable units across the projects we market, using the project, budget and enquiry type you gave us — on the basis of your consent.
• To send occasional marketing to people who have already enquired — on the basis of our legitimate interest in marketing to them, subject to your right to object.
• To measure which pages and campaigns produce enquiries, so that marketing spend is sensible — on the basis of our legitimate interest, and only with analytics consent where a cookie is involved.
• To protect the site and our inbox from spam and automated abuse through rate limiting and honeypot checks — on the basis of our legitimate interest in security.
• To meet the obligations that apply to a Dubai brokerage, including record keeping, anti-money-laundering checks and cooperation with regulators — on the basis of legal obligation.

07Use, sharing and retention — who we share it with

We share personal data only as set out here.

We never sell it.

• Inside Wincasa LLC, with the consultant handling your enquiry and the colleagues supporting them.
• With Meraas, only when you decide to reserve or purchase, and only what the developer needs to hold the unit, raise the reservation form and the sale and purchase agreement and register the sale. Until then your enquiry stays with Wincasa.
• With the Dubai Land Department, the Real Estate Regulatory Agency and the project's escrow bank, where a transaction requires it.
• With our hosting provider. Enquiries are received by a script on our own hosting server, which validates them, applies the rate limit, writes them to a log held outside the public web directory and emails them to the Wincasa sales desk.
• With Web3Forms, a form-delivery service used as a secondary route so that an enquiry still reaches us if our own server is unavailable. Your browser sends the same fields to Web3Forms, which forwards them to our inbox and keeps a copy in its dashboard, acting on our instructions.
• With Google, through Google Analytics, only if you accept analytics in the cookie banner and only where analytics is enabled on the site. Without that consent no analytics script is loaded.
• With WhatsApp (Meta Platforms) when you choose that channel; the conversation is carried under WhatsApp's own terms.
• With courts, regulators or law-enforcement bodies where we are legally required to do so, or to establish, exercise or defend a legal claim.

08Use, sharing and retention — where it is stored and for how long

The website, its enquiry log and the form-delivery service may store data on servers outside the United Arab Emirates, and our email and messaging tools may process it outside the UAE. Where personal data leaves the UAE we rely on the provider's contractual commitments to keep it secure and to process it only on our instructions, in line with the transfer rules of the UAE data protection law. Anything shared with the developer, the Dubai Land Department or an escrow bank is held in the UAE.

• Enquiries that do not lead to a transaction — form submissions, WhatsApp and email threads: up to 24 months from our last contact with you, then deleted or anonymised.
• Server rate-limit records (an IP address and a count): discarded on a rolling window, normally within 24 hours.
• Copies held by the form-delivery service: for the period set in our account, and deleted on request.
• Transaction files — reservation, sale and purchase agreement, identity and source-of-funds documents: for the period required by UAE anti-money-laundering and real estate regulations, generally at least five years after the transaction or the end of our relationship, whichever is later.
• Analytics data, where you consented: for the retention period configured in our analytics account, after which it is aggregated.
• Browser storage: for the periods listed in the cookie policy below, or until you clear this site's data.

09Cookie policy

This site is a set of static pages and uses very little browser storage. It sets no advertising cookies, no remarketing pixels and no cross-site trackers, and it loads no third-party consent platform.

Storage falls into four categories. Only the first is set without asking you.

• Necessary — the consent choice itself, the flags that stop a promotional popup reappearing after you close it, and the session record of how you arrived. The site cannot behave sensibly without these.
• Preferences — none are set on this site today. If we add any, this section will list them before they are used.
• Statistics — Google Analytics, loaded only after you choose “Accept all”. It sets identifiers beginning “_ga” that tell us which pages are viewed, roughly where visitors come from and which enquiries completed. Choose “Essential only” and no analytics script is loaded and no analytics identifier is set.
• Marketing — none. We do not run advertising or remarketing tags on this website.

10Changing your cookie choice

To change your mind, clear this site's data in your browser — the banner will appear again on your next visit and you can choose differently. Withdrawing analytics consent stops the script loading; identifiers already set by Google are cleared with the same browser action.

Blocking or clearing the necessary items above will not break the site, but a prompt you had dismissed may reappear.

11Your rights

Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and under the laws that apply where you live, you may have the right to:

• Ask what personal data we hold about you and receive a copy of it.
• Ask us to correct data that is wrong or incomplete.
• Ask us to delete data where we no longer need it and no legal duty requires us to keep it.
• Withdraw a consent you gave, including consent to marketing, at any time — without affecting processing that already took place.
• Object to processing based on our legitimate interests, including direct marketing, and ask us to restrict processing while a dispute is resolved.
• Receive the data you gave us in a portable, machine-readable format.
• Complain to the UAE Data Office, or to the supervisory authority for the country you live in.

12If you are in the United Kingdom or the European Economic Area

Where the UK GDPR or the EU GDPR applies to you, our lawful bases are those named above: your consent for enquiry handling and matching, our legitimate interests for security, measurement and marketing to existing enquirers, our contractual steps once you reserve, and legal obligation for anti-money-laundering and record keeping.

Sending your enquiry to us transfers your data to the United Arab Emirates, which is outside the UK and the EEA and is not the subject of an adequacy decision. We rely on your explicit consent for that transfer, on the standard contractual clauses our processors offer where they are available, and on the contractual commitments described above. You may withdraw that consent at any time, though we will then be unable to answer the enquiry.

You also have the rights listed in the previous section, and the right to lodge a complaint with your own supervisory authority — in the UK, the Information Commissioner's Office.

13How to contact us and change your information or preferences

Email wincasallc@gmail.com or message +971 50 327 1300 on WhatsApp and say what you would like us to do. We may ask you to confirm your identity so that we do not release data to the wrong person.

We aim to answer within 30 days. If a request is complex we will tell you why more time is needed and when to expect a reply. There is no charge unless a request is manifestly unfounded or repetitive.

14How we protect personal data

The site is served over HTTPS. Enquiries are transmitted encrypted, validated and rate-limited on receipt, then stored in a log outside the public web directory and emailed to the Wincasa sales desk. Access to the mailbox, the log and the form-delivery dashboard is limited to the Wincasa staff who need it. Transaction documents sit on access-controlled systems and reach the developer and the authorities through their own official channels.

No method of transmission or storage is completely secure. If a breach affecting your personal data occurs we will notify you and the relevant authority as the law requires.

15Children

This site is aimed at adults considering the purchase of property. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us information, tell us and we will delete it.

16Modifications to this Privacy Policy

We update this policy when our practices, our tools or the law change. The date at the top is the current version. Material changes are flagged on this page, and where we want to rely on your consent for a new purpose we will ask for it again rather than assume it.

17Questions, concerns or complaints

Write to Wincasa LLC (Wincasa Properties), Dubai, United Arab Emirates — wincasallc@gmail.com, or +971 50 327 1300 on WhatsApp. If you are unhappy with our answer you may complain to the UAE Data Office or to the supervisory authority where you live, but we would rather you came to us first so that we can put it right.