Your data, plainly.

Off-Plan Crypto ("we", "us", "our") operates offplancrypto.com, a property portal listing off-plan developments across the United Arab Emirates for buyers who intend to settle in digital assets. We are the data controller for the personal data described in this policy.

This policy explains what we collect, why we collect it, who we share it with and what you can do about it. It is written to comply with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL"), and with the EU and UK General Data Protection Regulation where you are located in those jurisdictions.

Information you give us. When you register interest in a project, request a call back, subscribe to launch alerts or contact us by WhatsApp, email or phone, we collect your name, email address, telephone number, preferred language, the project you enquired about and anything you write in a message field.

Information we collect automatically. When you use the site we collect your IP address, approximate location derived from it, browser and device type, referring page, the pages you view and how long you spend on them. This comes from cookies and similar technologies — see section 7.

What we do not collect. We do not collect wallet addresses, private keys, seed phrases, exchange credentials, card numbers or bank details through this website, and we will never ask you for them. Settlement is handled entirely by our licensed payment partner on their own infrastructure.

To respond to you. Answering an enquiry, sending availability, payment plans and pricing, and arranging a call. Our basis is the performance of a contract, or the steps you asked us to take before entering one.

To send you launch alerts. Only where you have subscribed. Our basis is your consent, and every message carries an unsubscribe link that works.

To operate and improve the site. Understanding which projects and documents get read, diagnosing faults and preventing abuse. Our basis is our legitimate interest in running a functioning service, balanced against your interests.

To meet legal obligations. Anti-money-laundering, counter-terrorist-financing, tax and record-keeping requirements that apply to UAE property transactions. Our basis is compliance with a legal obligation.

Developers. When you enquire about a specific project, we pass your name and contact details to that developer or their appointed agent so they can register the enquiry and quote you. This is how off-plan sales work in the UAE, and it is the point of making the enquiry.

Our licensed payment partner. If you proceed to settle in digital assets, your onboarding, KYC and payment details are handled by a partner licensed under Dubai's Virtual Assets Regulatory Authority (VARA) and the Abu Dhabi Global Market (ADGM), under their own privacy policy and terms. We do not receive, store or have access to your financial credentials.

Service providers. Hosting, analytics, email delivery and customer messaging providers who process data on our instructions and are contractually barred from using it for anything else.

Authorities. Where we are legally required to disclose, including to the Dubai Land Department, RERA, or a regulator, court or law enforcement body acting within its powers.

We do not sell your personal data, and we do not share it with advertisers or data brokers.

Our servers and service providers are located in the UAE, the European Union and the United States. Where personal data leaves the UAE, we transfer it only to jurisdictions the UAE Data Office recognises as providing adequate protection, or under contractual safeguards that meet the PDPL's requirements for cross-border transfer.

If you are in the EU or UK, transfers out of your region are made under the European Commission's Standard Contractual Clauses or the UK Addendum, as applicable.

Enquiries and lead records: three years from your last contact with us, after which they are deleted or anonymised. Property purchases are slow decisions and buyers frequently return a year or two later.

Marketing subscriptions: until you unsubscribe, plus a minimal suppression record so we do not accidentally contact you again.

Transaction and compliance records: as long as UAE anti-money-laundering and tax law requires, currently five years from the completion of a transaction.

Analytics data: twenty-six months, in aggregated form.

Strictly necessary cookies keep the site working — remembering your currency selection, your consent choice and basic security state. These do not require consent and cannot be switched off without breaking the site.

Analytics and performance cookies tell us which pages and documents are read and where people give up. These are only set after you accept.

You can change your mind at any time by clearing this site's cookies in your browser, which will bring the consent banner back on your next visit. You can also block cookies entirely in your browser settings, though parts of the site will stop remembering your preferences.

We do not use advertising or cross-site tracking cookies, and we do not run retargeting pixels.

Under the PDPL you have the right to be informed about how your data is processed, to request a copy of it, to have inaccurate data corrected, to have data erased where we no longer have grounds to keep it, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent at any time without affecting processing already carried out.

You also have the right not to be subject to a decision based solely on automated processing that significantly affects you. We do not make any such decisions.

To exercise any of these, email us at the address below. We will respond within thirty days. There is no charge unless a request is manifestly unfounded or excessive, in which case we will tell you before doing anything.

If you are not satisfied with our response, you may complain to the UAE Data Office, or to your local supervisory authority if you are in the EU or UK.

The site is served over TLS, access to enquiry data is restricted to staff who need it, and our service providers are contractually required to maintain appropriate technical and organisational measures.

No system is perfectly secure and we will not pretend otherwise. If a breach occurs that is likely to risk your rights and freedoms, we will notify the UAE Data Office and affected individuals as the PDPL requires.

Be aware that anyone asking you to send digital assets to a wallet address by email, WhatsApp or SMS is not us. Confirm every payment instruction directly with our licensed partner through a channel you initiated.

This site is not directed at anyone under 18 and we do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We will update this policy when our practices change or the law does. The effective date at the top of this page tells you which version you are reading. Where a change materially affects your rights, we will tell subscribers by email before it takes effect.