Privacy Policy
Effective date: 2026-07-10
punamwalia.com ("we", "us", "our") is operated by Punam Walia, Associate Partner at DRE Homes. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and your rights.
We are committed to compliance with:
- United Arab Emirates Federal Decree-Law No. 45 of 2021 (PDPL) — Personal Data Protection
- EU General Data Protection Regulation (GDPR) + UK GDPR — for EU and UK residents
- United Arab Emirates Telecommunications and Digital Government Regulatory Authority (TDRA) regulations, including the Do Not Call Registry (DNCR)
For details on our regulatory status, see the Disclaimer.
1. What we collect
Information you provide. When you submit the contact quiz, a form, or a WhatsApp click on this Site, we collect: your first name, phone number, email address (optional), and your answers to the quiz questions (whether you're exploring an investment or a home to live in, budget range, and timeline).
Information collected automatically. Browsing data (pages visited, referrer) via Google Analytics 4 + Plausible, where configured. Device data (browser, OS, screen size). IP address — hashed before storage; raw IP retained only briefly for fraud prevention.
Information from other sources. None. We do not buy data from data brokers.
2. How we use your data
| Purpose | Lawful basis (PDPL / GDPR) |
|---|---|
| Respond to your enquiry by phone, SMS, WhatsApp, or email | Legitimate interest (you submitted an enquiry; direct response is reasonably expected) |
| Understand which property is the right fit for your situation | Legitimate interest |
| Send marketing updates on new launches | Consent (only if you opted in) |
| Improve the Site | Legitimate interest |
| Comply with legal obligations + prevent fraud | Legal obligation / legitimate interest |
3. How we contact you
By submitting an enquiry on this Site, you expressly consent to being contacted about your enquiry by:
- Telephone call to the number you provided
- SMS / text message to the number you provided
- WhatsApp to the number you provided
- Email to the address you provided (if any)
This consent applies to the specific enquiry you submitted. For broader marketing, we contact you only if you separately opted in.
UAE Do Not Call Registry (DNCR) compliance
We comply with the UAE TDRA Do Not Call Registry. For the specific enquiry you submit, our follow-up communications are direct response — not marketing — and DNCR rules do not restrict them. For all other marketing, we will not contact you if you are registered on the DNCR or have opted out with us.
How to opt out
You can withdraw your consent and ask us to stop contacting you at any time. We will honour your request within 7 days.
To opt out:
- Reply STOP to any SMS or WhatsApp message
- Email [email protected] with "Opt out" in the subject
4. Who we share your data with
We share your data only with the categories of recipient needed to respond to your enquiry. We do not sell your data.
- Customer relationship management (CRM) — lead management and follow-up tracking
- Hosting + content-delivery infrastructure — site delivery, security, and abuse prevention
- Site analytics services — where configured (privacy-friendly + standard)
- Error monitoring and uptime monitoring — site reliability; non-PII technical events
- DRE Homes — as the RERA-registered brokerage the enquiry is routed through
For international transfers from the UAE / EU, we rely on standard contractual clauses, adequacy decisions, or your explicit consent.
5. Cookies and similar technologies
We use:
- Strictly necessary: Cloudflare Turnstile (anti-abuse), Vercel routing
- Analytics: Google Analytics 4 (cookies), Plausible (cookieless) — where configured
We do not currently display a cookie consent banner. Our analytics fall under "legitimate interest" basis under PDPL + GDPR (anonymised aggregated metrics, no individual profiling). Use your browser's "Do Not Track" setting or an ad-blocker if you'd prefer not to be tracked.
6. Retention
| Data | Retention |
|---|---|
| Active enquiries (you've reached out, we're in conversation) | Until conversion + 3 years thereafter, or until you opt out (whichever first) |
| Opted-out records | Anonymised, retained only for compliance audit, 5 years |
| Closed / cold enquiries (no response after 90 days) | 3 years from last interaction, then deleted |
| Hashed IP / fraud-prevention data | 90 days |
7. Your rights
Under PDPL + GDPR, you have the right to access, rectify, erase, restrict, port, object to, and withdraw consent for your data. To exercise any right, email [email protected]. We respond within 30 days.
If we cannot resolve your concern, you may complain to:
- UAE: TDRA — tdra.gov.ae
- EU: your local data-protection authority
- UK: Information Commissioner's Office — ico.org.uk
8. Security
We protect your data using industry-standard measures including encryption in transit (TLS 1.2+) and access controls. No system is 100% secure; we cannot guarantee absolute security. If we become aware of a personal-data breach, we will notify you and the relevant regulator within 72 hours where required by law.
9. Children
The Site is not directed at children under 18. We do not knowingly collect personal data from anyone under 18.
10. Updates to this policy
We may update this policy from time to time. The "Effective date" at the top reflects the latest version.
11. Contact us
For privacy questions, opt-out requests, or to exercise your rights: [email protected]
12. Governing law
This policy is governed by the laws of the United Arab Emirates. Disputes are subject to the exclusive jurisdiction of the Dubai courts.