Privacy Policy
This privacy policy (“Policy”) explains how Infinity Homes International FZ-LLC (doing business as “Infinity Homes”, “we”, “us” or “our”) collects, uses and protects personal data when you use the infinityhomes.ae website, the owner portal and any related services (together, the “Services”).
Infinity Homes International FZ-LLC is a free zone limited liability company licensed by the Ras Al Khaimah Economic Zone (RAKEZ) under Services Licence number 47037574, with its registered office at B4709B2A, Business Center 04, RAKEZ Business Zones, Al Nakheel Area, Ras Al Khaimah, United Arab Emirates. We are the controller of the personal data described in this Policy.
For questions about this Policy or to exercise your rights, contact privacy@infinityhomes.ae.
Who this policy applies to
This Policy applies to visitors to our website, people who contact us, property owners using the owner portal once it is launched, and employees and authorised agents using our internal systems. The owner portal is under development and is not yet available to customers.
Our website is currently offered in English; further languages may be introduced. Our business and services operate in the United Arab Emirates. We do not direct advertising campaigns at persons in the European Union. We may receive and respond to enquiries initiated by people located abroad. Indicative conversions from UAE dirhams into euros or pounds sterling are shown for convenience only. UAE data protection law is our principal operating framework. Where EU, UK or other privacy law applies to a specific activity, the rights and obligations under that law also apply. The language of this website does not by itself decide which privacy laws apply.
What personal data we collect
Information you give us
When you submit a general or property enquiry, viewing or brochure request, an owner enquiry about selling or letting, an enquiry about a development, or a request for our smart home, interior design, real estate, engineering or security-related services, we collect the details you provide, which may include:
- your name;
- your email address;
- your telephone number, including the country code;
- your preferred method of contact (telephone, WhatsApp or email);
- the content of your message; and
- where relevant, the property or development your enquiry relates to.
We use enquiries to respond personally to your requests. We do not currently send newsletters, unsolicited property offers or automated property-search alerts by email or WhatsApp, and we do not require marketing consent to answer an enquiry.
Information we record automatically
Consent records. When you accept or decline a consent, we record which consent it was and when it was given or withdrawn, so that we can demonstrate the choice you made.
Campaign and referral information. Where links or campaigns are used, we may record relevant referral sources, landing pages and campaign identifiers (for example UTM parameters, gclid or fbclid) to understand the origin of enquiries. These identifiers may also constitute personal data. We do not target advertising campaigns at people in the EU.
Technical information. Our website and infrastructure providers may process connection information such as IP addresses, device/browser information, timestamps, security logs and session identifiers to deliver and secure the Services. Our application-level abuse controls may store salted IP hashes; other providers may process ordinary IP addresses. Restricted services use session information for authentication and security. Platform diagnostics may process technical session, error and performance information where enabled.
Optional interactive maps
On property, project, community or contact pages, we may offer an interactive map using map tiles supplied by the OpenStreetMap Foundation (OSMF). Map tiles are not fetched from OSMF until you choose “Show map”. When activated, your browser sends technical request data to the OSMF tile service, potentially including your IP address, browser and device details, requested map tiles and referrer information. The geographical location of a tile is not necessarily your personal location. OSMF operates a global tile-cache network; processing locations may vary. For its own processing and retention practices, see https://osmfoundation.org/wiki/Privacy_Policy.
The website stores your map-display choice locally in your browser under ih_map_consent. This is a separate map preference, not the six-month cookie-banner selection. In the current preview implementation, it is retained until you use “Hide map again” or clear the relevant browser storage; it does not have a fixed automatic expiry. Hiding the map prevents further tile requests from the hidden map but cannot undo information already sent to OSMF. The optional “Open in your map app” link opens Google Maps only when you select it; Google’s own privacy practices then apply.
Information in the owner portal
Once the owner portal is available and you have been granted access, we will process information required to show you your properties and relevant records. Depending on the service, this may include purchase and acquisition data, financing details, payments, rent received, expenses, valuations, documents, and returns calculated from entered information. These portal functions are not yet open to customers.
Identity and due-diligence documents. We do not routinely require identity documents to grant owner-portal access. We may request identity documents and relevant due-diligence information where needed for a transaction, a requirement of a developer, seller or competent authority, or our own anti-money-laundering and know-your-customer duties. Access is limited to people with a legitimate need. Legally regulated records are kept for the required period, which may be at least five years from the latest applicable statutory event, or longer where proceedings or orders require.
What we do not collect
Our Services are not directed at children and we do not knowingly solicit enquiries from persons under 18. Please do not send sensitive information or identity documents unless we have specifically requested them for a legitimate transaction or compliance purpose.
Why we use your data, and on what basis
We do not make decisions about you by automated means alone. Figures calculated in the owner portal are information for you, not decisions about you.
| Purpose | Purpose and legal justification (subject to applicable law) |
|---|---|
| Answering your enquiry and taking steps you ask for before entering into a contract | We respond to a request you initiate and, where relevant, take steps to enter into or perform an agreement with you; any consent required by law will be obtained. |
| Providing the owner portal and our services under an agreement with you | Providing agreed services and operating the Portal in accordance with our agreement and applicable law. |
| Analytics and advertising cookies and related services, as described in our cookie policy | Google Analytics, Google Ads and Meta Pixel are used subject to the required consent choices in the cookie settings and applicable law. |
| Keeping our systems secure: rate limiting, sign-in protection, audit records | Appropriate security measures and other lawful bases/exceptions available under applicable law. |
| Keeping records we are required to keep | Legal and regulatory obligations, including where applicable AML/KYC requirements. |
| Sending a Dubai enquiry to an identified developer with your express permission | We first obtain and record your explicit agreement to share the necessary contact and enquiry details with the identified developer; no referral is sent without it. |
| Requesting interactive maps | A map is loaded only after the visitor selects “Show map”; local preference is stored in the visitor’s browser. |
For an interactive map, we process a separate affirmative choice to display external map tiles. The local map preference can be withdrawn with “Hide map again”; external processing by OSMF follows its published privacy terms.
We communicate individually in response to requests you send us. If we introduce any newsletter, property alert or other outbound marketing programme in future, we will first update the relevant notices and obtain any consent required before using your contact details for that purpose.
Who your data is shared with
We do not sell personal data, upload customer contact lists to advertising platforms for customer-list targeting, or use enquiry details for newsletters or unsolicited offers. Google Analytics, Google Ads and Meta Pixel are used for website measurement and advertising-related functions, subject to applicable consent controls. Providers may receive online identifiers, device/browser information and interaction events, which can be personal data. For selected Dubai developments, we send the necessary contact and enquiry information to an identified developer only after the interested person expressly authorises that specific introduction. We may also share relevant data with property counterparties, banks, transaction advisers and authorities where permitted or required.
The following organisations may process data in connection with our website and business operations. Their legal roles can differ: some act as processors for specified services, while others act as independent controllers or, for certain tracking-related operations where applicable law so provides, joint controllers. For Meta Pixel, the collection and transmission of event data may involve joint responsibility with Meta to the extent applicable; subsequent processing by Meta may be carried out independently. The allocation of responsibilities is governed by the applicable provider terms and law.
Application-platform sub-processors. Base44 maintains a contractual list at https://base44.com/dpa/exhibitc and a processing agreement at https://base44.com/dpa. The list can change and includes infrastructure, transmission, logging and other technology providers. Information about those processors and relevant transfer safeguards can be requested from us. A service-provider contract does not by itself establish that every cross-border transfer meets every applicable legal requirement.
| Provider | Purpose | Where data is processed |
|---|---|---|
| Base44 (application platform and database) | Hosting the website, the owner portal and our records | United States |
| Cloudinary | Processing and delivering images | Cloud infrastructure; location depends on the configured service and provider arrangements |
| IONOS | Sending and receiving our email | Germany |
| Google (Analytics and Ads) | Website analytics, advertising attribution and campaign measurement after relevant consent | United States and other countries |
| Meta | Meta Pixel events and advertising performance measurement after relevant consent | United States and other countries |
| OpenStreetMap Foundation | Interactive map tile delivery, after “Show map” | Global tile-cache network; location varies |
Platform diagnostics. Datadog is identified as an infrastructure logging or monitoring sub-processor in the Base44 contractual list. The exact diagnostic requests and any storage on end-user devices depend on the deployed environment and must be checked against the published website. We do not treat all diagnostic technologies as automatically essential.
We may also disclose personal data where we are required to do so by law or by a competent authority, and to our professional advisers where necessary.
For Dubai referrals, you decide whether we may send the relevant contact information to the identified developer. We transfer it only after your express authorisation and keep a record of that choice. The developer then handles its own follow-up and processes the information under its own privacy terms; our responsibilities for collecting and sharing the information remain with us.
Transfers outside your country
Our application platform stores data in the United States, and some of our other providers process data outside the United Arab Emirates and the European Economic Area.
International transfer safeguards. Personal data stored or accessed abroad is assessed under the applicable UAE data-transfer requirements. Where the EU or UK GDPR applies to a particular processing and transfer, we assess the need for appropriate safeguards such as an applicable adequacy decision, recognised transfer framework or standard contractual clauses and related assessments. Base44 publishes the transfer mechanisms on which it relies in its DPA; these statements are not a guarantee that a specific mechanism covers every transfer in our configuration.
You can ask us for details of the safeguards that apply to your data by writing to privacy@infinityhomes.ae.
How long we keep your data
- Enquiries and the customer and lead records created from them: for as long as needed to deal with your enquiry and our ongoing relationship, and afterwards where we have a legal reason to keep them.
- Submissions identified as spam: 30 days.
- Raw data received from connected systems: 90 days.
- Submissions that failed to be processed: 180 days.
- System and administrative audit records: retained according to their security, operational and applicable legal purpose. Records forming part of regulated transaction files or other legally required business records may have to be kept for five years or longer. The specific period depends on the record category and the applicable legal obligation.
- Records of the consents you gave or withdrew: for as long as we act on the consent, and afterwards for as long as we may need to demonstrate the choice you made.
- Identification, KYC and AML records: for the legally applicable minimum period, normally at least five years from the relevant completion, end-of-relationship or later regulatory/judicial event, as applicable. We will not automatically delete them at the earlier of those dates.
- Contracts and documents subject to a legal retention period: until that period ends.
Retention and deletion arrangements are applied according to the purpose of the information and the applicable law. Automated deletion is used only where configured and validated; some technical provider logs may be retained under the relevant provider terms. Documents required for AML/KYC, contractual or official proceedings are not deleted prematurely.
Your rights
You can ask us to:
- give you access to the personal data we hold about you, and a copy of it;
- correct data that is wrong or incomplete;
- erase your data;
- restrict or object to how we use it;
- receive it in a portable form or have it sent to another controller, where that applies; and
- withdraw a consent you have given, at any time, without affecting what we did before you withdrew it.
How erasure works in practice. We review each request against the applicable legal requirements. Where deletion is appropriate, we erase or irreversibly anonymise the relevant personal information, including associated files when lawful and technically practicable. Truly anonymised business statistics may be retained. Contract, AML/KYC and other legally protected records may be retained until the applicable obligation or lawful ground ends.
You may submit a privacy request by emailing privacy@infinityhomes.ae, or by using any privacy-request function that we make available on the website. We will respond as required under the law applicable to your request. Where the EU or UK GDPR applies to your data, any additional rights and complaint mechanisms under that law remain available.
How we protect your data
- All traffic to the Services is encrypted, and our email is sent over an encrypted connection.
- Files that are not public are held in private storage and are reachable only through links that expire after a short time.
- Access to restricted records is managed by account permissions and intended to prevent owners seeing other owners’ information. Account access, individual document links and permissions are subject to security controls appropriate to the relevant service. Customer access to the owner portal is not yet available.
- Forms and sign-in pages are rate limited, and refused attempts are logged.
- Sessions end automatically after a period of inactivity and have a maximum lifetime.
- Passwords must meet a minimum complexity standard.
- Changes to prices, statuses, assignments and settings are recorded in an audit log.
- Credentials and keys are held in secure storage and are never included in the pages your browser receives.
No online system can be guaranteed to be completely secure. Where a data incident creates a duty to notify affected people or a competent authority under applicable law, we will make the required notifications.
Related documents
Our cookie policy describes the cookies and similar storage we use. Our terms of use govern your use of the Services, our disclaimer covers the property information we publish, and the owner portal terms apply if you have access to the owner portal.
Interactive maps are also described in this notice and in our Cookie Policy. External map links are separate from the embedded maps and only open if you select them.
Changes to this policy
We may revise this notice when our practices, technology or legal obligations change. The revision date will be shown on the published page. Additional notice will be provided where required. Continuing to browse is not consent to new optional tracking or processing that requires separate permission.
Contacting us
Infinity Homes International FZ-LLC
B4709B2A, Business Center 04
RAKEZ Business Zones, Al Nakheel Area
Ras Al Khaimah, United Arab Emirates
RAKEZ Services Licence no. 47037574
privacy@infinityhomes.ae
This document was revised on 25 October 2026.