Privacy Policy.

Introduction

DIGIDEED MORTGAGE BROKER L.L.C ("DigiDeed", "we", "us", or "our"), trading under the brand name Banqy, is a mortgage brokerage licensed by the Department of Economy and Tourism, Dubai, under Trade Licence No. 1200167, and authorised to practise as a Mortgage Broker through the Real Estate Regulatory Agency (RERA) of the Dubai Land Department. We help individuals and businesses compare and obtain mortgage and home-finance products offered by UAE banks and financial institutions, and provide related advisory and processing support.

This Privacy Policy (the "Policy") explains how Banqy collects, uses, discloses, transfers, retains, and otherwise processes your personal data when you visit our website, mobile applications, social media properties, or communicate with us through email, phone, WhatsApp, or any other channel (together, the "Services").

We are committed to processing personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "UAE PDPL"), its executive regulations, and any other applicable data protection laws.

By using the Services, submitting a lead form, uploading documents, or otherwise providing personal data to us, you confirm that you have read and understood this Policy.

Personal data we collect

We collect the following categories of personal data, depending on how you interact with us:

2.1 Identity and contact data

• Full name, date of birth, gender, nationality, marital status, and number of dependants.
• Emirates ID number, passport details, and residence visa details.
• Phone number, email address, residential address, and preferred contact channel (including WhatsApp).

2.2 Financial and employment data

• Monthly income, employer name, employment type and length of service, or details of self-employment / business ownership.
• Existing debt obligations, liabilities, monthly commitments, and other affordability data.
• Bank account details and statements provided as part of the application process.
• Credit information obtained from credit bureaus (including Al Etihad Credit Bureau) with your authorisation.

2.3 Property and transaction data

• Property type, location, status (ready / off-plan), purchase price or valuation, intended use, and developer or seller details.
• Down-payment source, sale and purchase agreements, Oqood / title-deed documents, and related transaction records.

2.4 KYC and verification documents

• Copies of Emirates ID, passport, residence visa, and proof of address.
• Salary certificates, payslips, bank statements, and (for self-employed applicants) trade licences, audited financials, and corporate documents.
• Any additional documents requested by partner banks or required for anti-money-laundering, counter-terrorism-financing, or sanctions screening.

2.5 Technical and usage data

• Device information (model, operating system, browser, language, time zone) and approximate location derived from IP address.
• Pages visited, features used, links clicked, session duration, referrer URLs, and other analytics signals.

2.6 Cookies and similar technologies

Our Services use cookies, pixels, tags, and similar technologies, including Google Analytics and Meta (Facebook) Pixel, to understand how visitors use the Services and to support marketing. See Section 10 for details.

2.7 Communications and marketing preferences

• Records of your messages, calls, WhatsApp chats, and emails with our team (with notice and where lawful).
• Your marketing consents, opt-ins, and opt-outs.

How we use your personal data

We process personal data for the following purposes:

• To respond to enquiries, provide quotes, and recommend mortgage and home-finance products.
• To assess eligibility, prepare and submit mortgage applications to partner banks and financial institutions on your behalf.
• To coordinate with valuers, developers, conveyancing partners, insurance providers, and the Dubai Land Department (and equivalent authorities in other emirates).
• To comply with UAE regulatory obligations, including identity verification, AML / CTF screening, sanctions checks, record-keeping, and reporting.
• To prevent, detect, and investigate fraud, misuse, and security incidents.
• To send service updates and, where you have consented, marketing communications about Banqy and selected partners.
• To improve our Services, develop new features, conduct analytics, and produce de-identified or aggregated insights.
• To establish, exercise, or defend legal claims and to enforce our Terms & Conditions.

Legal bases for processing

We rely on one or more of the following legal bases under the UAE PDPL:

• Your consent — for example, when you submit a lead form, opt in to marketing, or authorise a credit check.
• Performance of a contract — to provide the brokerage and advisory services you have requested.
• Compliance with a legal obligation — including AML / CTF, sanctions, tax, and regulatory record-keeping obligations.
• Our legitimate interests — including fraud prevention, network and information security, service improvement, and business operations, balanced against your rights.
• Protection of vital interests, where required.

You may withdraw your consent at any time by contacting us at privacy@banqy.ae. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Who we share your personal data with

We share personal data only as necessary to deliver the Services and to comply with the law. Recipients may include:

• UAE-licensed banks and financial institutions, to obtain quotes, submit applications, and process your mortgage.
• Credit bureaus, including Al Etihad Credit Bureau, where you have authorised a credit check.
• Insurance providers (life, property, takaful), valuers, conveyancers, developers, and the Dubai Land Department or other relevant land authorities, where required for your transaction.
• Service providers acting on our behalf, including cloud hosting, CRM, communications, analytics, identity-verification, and document-management vendors, under appropriate confidentiality and security obligations.
• Professional advisors such as lawyers, auditors, and accountants.
• Regulators, government authorities, law-enforcement bodies, and courts, where required by applicable law or to protect our rights.
• Successors in interest in the context of a merger, acquisition, financing, or sale of all or part of our business, subject to equivalent protections.

We do not sell your personal data.

International data transfers

Some of our service providers and partner institutions may be located outside the UAE. Where we transfer personal data internationally, we do so in accordance with the UAE PDPL — including transfers to countries that the UAE Data Office considers to provide an adequate level of protection, transfers subject to appropriate contractual safeguards, or transfers made with your explicit consent or as necessary for the performance of a contract.

How long we keep your personal data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements.

• Customer relationship data: for the duration of your relationship with Banqy plus a minimum of five (5) years thereafter, in line with UAE AML / CTF and regulatory record-keeping requirements.
• Marketing data: until you withdraw consent or object to processing.
• Data subject to a legal hold or active dispute: for as long as required to resolve the matter.

When personal data is no longer required, we securely delete or anonymise it.

How we protect your personal data

We use a combination of organisational, technical, and physical safeguards designed to protect personal data, including encryption in transit and at rest, access controls, role-based permissions, secure development practices, vendor due-diligence, monitoring, and incident-response procedures.

No system is completely secure. You play an important role in protecting your data by safeguarding your login credentials, using strong unique passwords, and notifying us immediately of any suspected unauthorised access.

Your rights

Subject to the UAE PDPL, you have the following rights in relation to your personal data:

• The right to be informed about how your personal data is processed.
• The right to access your personal data and obtain a copy.
• The right to request correction of inaccurate or incomplete data.
• The right to request erasure of your personal data, subject to our legal and regulatory retention obligations.
• The right to restrict or object to certain types of processing.
• The right to data portability, where technically feasible.
• The right to withdraw consent at any time, without affecting prior lawful processing.
• The right to lodge a complaint with the UAE Data Office or other competent supervisory authority.

To exercise any of these rights, please contact us at privacy@banqy.ae. We may need to verify your identity before responding. We aim to respond within the timelines required by applicable law.

Cookies and tracking technologies

We use the following categories of cookies and similar technologies:

• Strictly necessary cookies — required for the Services to function (e.g., session management, security).
• Analytics cookies — including Google Analytics, to understand how the Services are used and to improve them.
• Marketing cookies — including Meta (Facebook) Pixel and other advertising tags, to measure campaign performance and show relevant content on third-party platforms.
• Functional cookies — to remember preferences and improve your experience.

You can manage cookies through your browser settings or our cookie banner where available. Disabling certain cookies may affect the functionality of the Services.

Third-party links and services

Our Services may contain links to third-party websites, applications, and platforms (including those of partner banks, developers, and social media networks). We are not responsible for the privacy practices or content of those third parties. We encourage you to read their privacy notices before sharing personal data.

Children

The Services are intended for individuals who are 18 years of age or older. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact privacy@banqy.ae so we can take appropriate action.

Changes to this Policy

We may update this Policy from time to time. The "Effective date" shown above will indicate when the Policy was last updated. Material changes will be communicated through the Services or by email where appropriate. Your continued use of the Services after the changes take effect constitutes acceptance of the updated Policy.

Contact us

If you have any questions, requests, or complaints regarding this Policy or our processing of your personal data, please get in touch: