Privacy Policy
Effective Date: 14 May 2025 Last Updated: 11 April 2026
1. Who We Are
L A L Real Estate L.L.C (License No. 1504112), trading as "LION & LAND" ("we", "us", or "our"), is a company registered and operating in the United Arab Emirates. We provide international real estate advisory, property marketing and residency planning services for globally mobile investors, founders and families.
Data Protection Contact: L A L Real Estate L.L.C Office C-69, 169, Salim Ali Al Mazroua Al Nahda Second, Dubai United Arab Emirates Email: privacy@lionandland.com Phone: +971 55 224 0349
2. Scope and Applicability
This Privacy Policy applies to all personal data we collect through our website lionandland.com, our contact and booking forms, email correspondence, phone calls, WhatsApp communication and in-person meetings.
We process personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL), the EU General Data Protection Regulation (GDPR), the Swiss Federal Act on Data Protection (DSG/nDSG), the UK General Data Protection Regulation (UK GDPR) and other applicable data protection laws.
Where you are located in the European Economic Area (EEA), the United Kingdom or Switzerland, LION & LAND acts as the data controller within the meaning of Art. 4(7) GDPR.
3. What Personal Data We Collect
We collect the following categories of personal data:
Identity and Contact Data: Name, email address, phone number, nationality, country of residence.
Investment and Advisory Data: Real estate and investment interests, budget range, preferred locations, visa and residency preferences, property enquiries.
Communication Data: Content of messages sent via contact forms, email, phone or WhatsApp.
Technical Data: IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, time and date of access, time spent on pages.
Consent Data: Cookie consent preferences, marketing opt-in status, date and time of consent.
Booking Data: Appointment details submitted via our booking system (Zoho Bookings), including preferred date, time and consultation topic.
4. How We Collect Personal Data
Directly from you when you submit a contact form, book a consultation, subscribe to our newsletter, send us an email or message us via WhatsApp.
Automatically through cookies and similar tracking technologies when you visit our website (subject to your consent where required by law).
From third parties where you have given your consent to share data with us, for example through referral partners or real estate platforms.
5. Legal Basis for Processing
We process your personal data on the following legal bases (Art. 6(1) GDPR):
Consent (Art. 6(1)(a) GDPR): For newsletter subscriptions, marketing communications, non-essential cookies and analytics tracking. You may withdraw your consent at any time (see Section 9).
Contract or Pre-contractual Measures (Art. 6(1)(b) GDPR): To respond to your enquiries, provide property recommendations, facilitate bookings and deliver our advisory services.
Legal Obligation (Art. 6(1)(c) GDPR): To comply with tax, anti-money laundering and regulatory requirements applicable to real estate transactions.
Legitimate Interests (Art. 6(1)(f) GDPR): For website security, fraud prevention, internal analytics and improving our services. Our legitimate interests do not override your fundamental rights and freedoms.
Where the UAE PDPL applies, we process your data based on the equivalent legal grounds under Federal Decree-Law No. 45 of 2021, including your consent, the performance of a contract, compliance with legal obligations and legitimate interests.
Where the Swiss DSG applies, we process your data on the basis of your consent, the performance of a contract, overriding interests or compliance with legal obligations.
6. How We Use Your Personal Data
We use your data for the following purposes:
Responding to enquiries and providing real estate advisory services. Recommending properties, residency programmes and visa options. Processing and managing consultation bookings. Sending marketing communications and newsletters (where you have opted in). Operating, maintaining and improving our website. Analysing website usage to improve content and user experience. Ensuring website security and preventing fraud. Complying with legal and regulatory obligations.
7. Cookies and Tracking Technologies
We use cookies and similar technologies on our website. Our consent management is provided by Complianz GDPR Premium, which presents you with a consent banner on your first visit.
We use Google Tag Manager (GTM-5T348L8L) to manage tracking scripts. Google Consent Mode v2 is implemented, which ensures that all non-essential tracking is denied by default for users in the EEA, the United Kingdom and Switzerland. Tracking scripts only fire after you have given explicit consent.
Cookie Categories:
Strictly Necessary: Required for the website to function. Cannot be disabled. Includes session cookies and security cookies set by Complianz.
Functional: Remember your preferences such as language or region settings.
Statistics: Help us understand how visitors interact with our website. Includes Google Analytics 4 (Measurement ID configured via GTM). Only activated after your consent.
Marketing: Used to deliver relevant advertising and measure campaign performance. Only activated after your consent.
You can manage or withdraw your cookie preferences at any time via the Cookie Settings in the website footer. For full details, see our Cookie Policy at lionandland.com/cookies.
8. Data Sharing and Sub-Processors
We do not sell your personal data. We share your data only with the following categories of recipients, and only to the extent necessary:
Service Providers (Sub-Processors):
Cloudflare, Inc. (USA) - Content delivery network, DDoS protection and DNS. Cloudflare processes IP addresses and technical data to deliver website content. Data Processing Agreement in place. Cloudflare is certified under the EU-US Data Privacy Framework.
Google LLC (USA) - Google Analytics 4 and Google Tag Manager for website analytics (consent-gated). Google processes technical data and usage data. Data Processing Agreement in place. Google is certified under the EU-US Data Privacy Framework.
ShortPixel (Romania, EU) - Image optimisation and CDN. ShortPixel processes image requests including IP addresses. Data Processing Agreement in place. Data remains within the EU.
Zoho Corporation Pvt. Ltd. (India/EU) - Zoho Bookings for consultation scheduling. Zoho processes booking data including name, email, phone and appointment details. Data Processing Agreement in place. EU data is processed in Zoho's EU data centre.
WhatsApp Ireland Limited / Meta Platforms, Inc. (Ireland/USA) - When you contact us via WhatsApp, your message content and phone number are processed by WhatsApp/Meta. WhatsApp's own privacy policy applies to this processing. We use WhatsApp only as a communication channel and do not use it for automated marketing.
GoDaddy Operating Company, LLC (USA) - Web hosting. Our website runs on WordPress, hosted on GoDaddy's European infrastructure (EU data centre). GoDaddy processes all data transmitted to and from our website, including IP addresses, form submissions and technical data. Data Processing Agreement in place. Website data is stored and processed within the European Union.
Complianz BV (Netherlands, EU) - Consent management. Complianz processes consent records including anonymised IP address, consent status and timestamp. Data remains within the EU.
Business Partners: We may share your contact details and investment interests with selected real estate developers, property agents or residency programme providers where this is necessary to deliver the services you have requested. We will inform you before sharing your data with a specific partner.
Legal Authorities: We may disclose your data to government authorities, regulators or law enforcement where required by law or in connection with legal proceedings.
9. Your Rights
Depending on your location, you have the following rights regarding your personal data:
Right of Access (Art. 15 GDPR): You may request a copy of the personal data we hold about you.
Right to Rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete data.
Right to Erasure (Art. 17 GDPR): You may request deletion of your personal data where there is no compelling reason for continued processing.
Right to Restriction of Processing (Art. 18 GDPR): You may request that we restrict processing of your data in certain circumstances.
Right to Data Portability (Art. 20 GDPR): You may request to receive your data in a structured, commonly used and machine-readable format.
Right to Object (Art. 21 GDPR): You have the right to object to processing based on legitimate interests or direct marketing at any time. To object, send an email to privacy@lionandland.com with the subject line "Objection to Data Processing". We will cease the relevant processing within 30 days unless we can demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent (Art. 7(3) GDPR): Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent for marketing emails, use the unsubscribe link in any email. To withdraw cookie consent, use the Cookie Settings in the website footer.
Right to Lodge a Complaint: If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this is the data protection authority of your country of residence. For UAE residents, complaints may be directed to the UAE Data Office.
To exercise any of these rights, contact us at privacy@lionandland.com. We will respond within 30 days (or within the timeframe required by your applicable law).
10. International Data Transfers
As a UAE-based company serving international clients, your personal data may be transferred to and processed in countries outside your jurisdiction, including the United Arab Emirates, the United States and India.
For transfers from the EEA, the UK or Switzerland, we rely on the following safeguards:
EU-US Data Privacy Framework: For transfers to US-based providers certified under the EU-US DPF (Cloudflare, Google).
Standard Contractual Clauses (SCCs): Where the Data Privacy Framework does not apply, we use the European Commission's Standard Contractual Clauses (Decision 2021/914) as the transfer mechanism.
Adequacy Decisions: Where the European Commission has recognised a country as providing an adequate level of data protection.
You may request a copy of the relevant transfer safeguards by contacting privacy@lionandland.com.
11. Data Retention
We retain your personal data for the following periods:
Contact form submissions and email correspondence: 3 years from last interaction, unless an ongoing business relationship exists.
Booking data (Zoho): 2 years from the date of the consultation.
Newsletter subscriber data: Until you unsubscribe, plus 30 days for processing the removal.
Website analytics data (Google Analytics): 14 months (configured in GA4 settings).
Cookie consent records (Complianz): 12 months from the date of consent.
Contractual and transaction data: 7 years from completion of the transaction, as required by UAE commercial law and tax regulations.
Legal and compliance records: As long as required by applicable law.
When retention periods expire, we securely delete or anonymise the data. If deletion is not technically feasible (for example, in backup systems), we ensure the data is isolated and protected until deletion is possible.
12. Automated Decision-Making
We do not use your personal data for automated decision-making or profiling that produces legal effects or similarly significant effects on you (Art. 22 GDPR).
Google Analytics and similar tools generate aggregated, anonymised reports about website usage. These reports do not identify individual users and are not used to make decisions about you.
13. Children's Data
Our services are directed at adults. We do not knowingly collect personal data from children under 16 years of age. If we become aware that we have collected data from a child under 16, we will delete it promptly. If you believe we have inadvertently collected a child's data, please contact us at privacy@lionandland.com.
14. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These measures include:
Encryption of data in transit (TLS/SSL via Cloudflare). Web application firewall and DDoS protection (Cloudflare). Access controls and role-based permissions for internal systems. Regular security updates for our website platform and plugins. Consent-gated tracking with Google Consent Mode v2.
No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
15. Third-Party Links
Our website may contain links to third-party websites, including real estate platforms, government visa portals and social media profiles (Facebook, Instagram, LinkedIn, X/Twitter, YouTube). We are not responsible for the privacy practices of these third-party sites. We encourage you to read their privacy policies before providing any personal data.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services or applicable law. Changes will be posted on this page with an updated "Last Updated" date. Where changes are material, we will notify you via email or a prominent notice on our website.
17. Multilingual Versions
This Privacy Policy may be made available in additional languages. In the event of any discrepancies between language versions, the English version shall prevail unless otherwise required by applicable law.
18. Contact
If you have questions, requests or complaints regarding your personal data or this Privacy Policy, please contact:
L A L Real Estate L.L.C Data Protection Contact Email: privacy@lionandland.com Phone: +971 55 224 0349 Office C-69, 169, Salim Ali Al Mazroua Al Nahda Second, Dubai, United Arab Emirates
