Legal · Data Protection
Privacy Policy
Last updated: 1 July 2026
1Who we are
This Privacy Policy explains how Covertstone Real Estate L.L.C - S.P.C ("Covertstone", "we", "us") collects and uses personal data in connection with this website and our real estate services in Abu Dhabi.
Covertstone is the data controller. We are licensed in mainland Abu Dhabi (Licence No. CN-6433562) and operate through a branch registered in the Abu Dhabi Global Market (Registration No. 37122).
Depending on the context of your dealings with us, our processing of personal data is governed by the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and, in respect of our ADGM branch, the ADGM Data Protection Regulations 2021. Where both apply, we seek to meet the higher standard.
2The personal data we collect
We collect personal data that you provide to us directly, and a limited amount of technical data collected automatically when you use this website.
Information you provide
- Identity and contact details, such as your name, email address, and telephone number.
- The content of your enquiry or correspondence with us.
- Any information relevant to a service you ask us to provide.
Information collected automatically
- Technical data, such as IP address, browser type, device information, and pages viewed.
- Cookie and usage data, as described in section 9.
3How and why we use your personal data
We use personal data for the following purposes, relying on the lawful bases indicated.
- To respond to and manage your enquiries and correspondence, on the basis of your consent, or our legitimate interest in responding to you.
- To provide, and to perform our agreement for, the services you engage us for, on the basis of performance of a contract.
- To operate, maintain, and improve this website and its security, on the basis of our legitimate interests.
- To comply with legal, regulatory, and professional obligations, including record-keeping and anti-money-laundering requirements, on the basis of compliance with a legal obligation.
Where we rely on your consent, you may withdraw it at any time; this will not affect the lawfulness of processing carried out before withdrawal.
4Sharing your personal data
We do not sell your personal data. We may share it with:
- service providers who process data on our behalf (for example, IT, hosting, and communications providers), under appropriate contractual safeguards;
- our professional advisers, such as legal, accounting, and compliance advisers;
- counterparties, and their advisers, where necessary to progress a transaction you have instructed us on;
- regulators, authorities, and law-enforcement bodies where we are required or permitted by law to do so.
5International transfers
Your personal data may be transferred to, or accessed from, locations outside the UAE or the ADGM, for example where a service provider operates internationally. Where we make such a transfer, we ensure an appropriate level of protection using the mechanisms available under the PDPL and the ADGM Data Protection Regulations 2021: transferring only to jurisdictions recognised as providing an adequate level of protection or, where that is not the case, under appropriate contractual safeguards such as standard contractual clauses.
6How long we keep your personal data
We retain personal data only for as long as necessary for the purposes for which it was collected. Where you engage us, records relating to our relationship are retained for at least five years following its conclusion, in order to meet UAE record-keeping and anti-money-laundering obligations. Correspondence and enquiries that do not lead to an engagement are retained for no longer than 24 months. When personal data is no longer required, it is securely deleted or anonymised.
7How we protect your personal data
We maintain appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, or misuse. No transmission of information over the internet can be guaranteed to be completely secure, and any transmission is at your own risk. If we become aware of a personal data breach, we will act in accordance with our obligations under applicable law.
8Your rights
Subject to applicable law, you have the right to:
- request access to the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request erasure of your data in certain circumstances;
- object to, or request restriction of, certain processing;
- request the portability of data you have provided to us;
- withdraw consent where processing is based on consent; and
- lodge a complaint with the relevant supervisory authority.
To exercise any of these rights, please contact us using the details in section 12.
9Cookies and website data
This website uses only essential cookies that are necessary for it to function and to keep it secure. We do not use advertising cookies or third-party tracking cookies. You can restrict or block cookies through your browser settings; if you do, some parts of the website may not function as intended.
10Children
This website and our services are directed at adults and are not intended for individuals under the age of 18. We do not knowingly collect personal data relating to children.
11Changes to this policy
We may update this Privacy Policy from time to time. The version published on this website is the current version, and the date of the most recent update is shown above.
12How to contact us
For any question about this Privacy Policy, or to exercise your rights, please contact us at privacy@covertstone.com, or by post at our registered offices in Abu Dhabi. We will respond to your request within the period required by applicable law.