Privacy Policy

Effective Date: July 2026

Last Updated: July 2026

1. Data Controller

Dynamic Web Lab FZE LLC (trading as BuyOrSell24) is the data controller for personal data collected through the Service.

Registered office: Sharjah Publishing City Free Zone, United Arab Emirates (Formation Number: 4426361).

Website: https://dynamicweblab.com

We are committed to compliance with UAE Federal Decree-Law No. 45 of 2021 (PDPL), Dubai Data Law No. 26 of 2015, and applicable data protection regulations.

2. Lawful Basis for Processing (PDPL Art. 4)

We process personal data under the following lawful bases:

Processing ActivityLawful Basis

|--------------------|--------------|

Account creation & managementContractual necessity (Art. 4(1))API rate limiting & abuse preventionLegitimate interest (Art. 4(3))Service communicationsContractual necessityProduct updates & marketingConsent (Art. 4(2)) — optional opt-inLegal complianceLegal obligation (Art. 4(4))

3. What We Collect

When you use the BuyOrSell24 API, we collect:

Account Information: Email address, name (provided during registration)
Marketing Consent Status: Whether you opted into product updates
API Usage Data: Request logs, timestamps, response codes, rate limit usage
Authentication Data: API key (stored as SHA-256 hash), IP address, user agent
Payment Information: Processed by our payment provider (we do not store card details)

4. How We Use Your Data

To provide and maintain the Service
To enforce rate limits and quotas
To communicate about your account and service updates
To send product updates and market insights (only with your consent)
To detect and prevent abuse
To improve our API and analytics

5. What We Do NOT Collect

Buyer or seller personal information from DLD records
Property owner identities
Any personal data from government open data sources

All property transaction data sourced from DLD inherently excludes personal identifying information — buyer/seller names are not part of the public registry.

6. Cross-Border Data Transfer (PDPL Art. 15)

Your personal data is stored and processed on servers located in Germany (European Union). By using the Service, you acknowledge that your data will be transferred to and processed in Germany. We have implemented appropriate safeguards to ensure your data receives adequate protection in accordance with UAE PDPL requirements.

7. Data Retention

Data CategoryRetention PeriodReason

|--------------|-----------------|--------|

Account information (email, name)Until account deletionService provisionAPI key hashUntil account deletionAuthenticationAPI request logs90 daysSecurity & abuse preventionMarketing consent recordUntil consent withdrawalCompliancePayment records5 years (UAE legal requirement)Tax & legal compliance

8. Your Rights (PDPL Art. 7-14)

Under UAE PDPL, you have the following rights:

Right to be informed — what data we collect and why (this policy)
Right of access — request a copy of your personal data
Right to rectification — correct inaccurate data
Right to erasure — delete your account and personal data
Right to restrict processing — limit how we use your data
Right to data portability — export your data in a machine-readable format
Right to object — object to processing for marketing

To exercise any of these rights:

1. Self-service deletion: Use the delete form on our homepage (requires your API key)

2. Email us: support@buyorsell24.com

3. WhatsApp: +971581812436

We will respond to your request within 15 business days as required by UAE PDPL.

9. Marketing Consent

We only send product updates and market insights if you explicitly opted in during signup. You can withdraw your consent at any time by:

Emailing support@buyorsell24.com
Deleting your account via the self-service delete form

10. Data Security

API keys are stored as SHA-256 hashes (irreversible)
All data is encrypted in transit (TLS 1.3)
Database access is restricted and logged
Regular security reviews
Infrastructure hosted in ISO 27001-certified data centers

11. Cookies

The API documentation site uses essential cookies only. No tracking, analytics, or advertising cookies are used.

12. Children's Privacy

The Service is not directed at individuals under 18. We do not knowingly collect data from children. If we discover that a child under 18 has provided us with personal data, we will delete it immediately.

13. Data Processing Register

A detailed register of all data processing activities is available at [/data-processing](/data-processing), as required by UAE PDPL Art. 22.

14. Changes to Policy

We may update this policy. Material changes will be communicated via email to account holders and posted on this page. Continued use of the Service after changes constitutes acceptance.

15. Contact & DPO

For privacy inquiries or to contact our Data Protection Officer:

Email: support@buyorsell24.com
WhatsApp: +971581812436
Response time: Within 5 business days

16. Complaints

If you believe we have not complied with UAE PDPL, you have the right to file a complaint with the UAE Data Office (formerly UAE Data Protection Office).