Privacy Policy

1Who We Are

The data controller responsible for your personal information is:

Land of Profits is a cross-border real estate platform operating across 11 markets: the United Arab Emirates, United Kingdom, Saudi Arabia, Portugal, Qatar, Turkey, India, Pakistan, Bahrain, Kuwait and Oman. We provide five distinct member roles on our platform: LopBuyer, LopBroker, LopBuilder, LopLandlord and LopTenant.

Where we have local entities or appointed representatives in specific markets, those entities may act as joint data controllers or data processors for data processed in those markets. Details of local representatives are available on request.

2Data We Collect

The personal data we collect depends on your role on the platform and how you use it. We collect data in three ways: information you provide directly, information generated by your use of the platform, and information from third parties.

2.1 Information you provide directly

2.2 Information generated automatically

• Usage data: Pages visited, features used, search queries, filters applied, properties viewed or saved, time spent on pages, click patterns
• Device & technical data: IP address, browser type and version, operating system, device type, screen resolution, time zone
• Transaction data: Enquiries sent and received, viewings requested, applications submitted, tenancy agreements signed, listing creation and update records
• LOP Score data: KPI inputs generated from your platform activity — including listing counts, response times, completion rates, review scores and compliance document status
• Location data: General location inferred from IP address; precise GPS location only if you grant permission in your browser or device settings

2.3 Information from third parties

• Identity verification providers: Verified ID status, document authenticity results from our KYC partners
• Regulatory bodies: Licence verification results from RERA, REAA, SRB and equivalent bodies in other markets
• Social login providers: If you sign in using Google or Apple, we receive your name and email address from those providers
• Public registers: Company registration data, property registry information, planning records where publicly available

3How We Use Your Data

We use personal data for the following purposes:

4Legal Basis for Processing

Under UK GDPR and applicable data protection law, we must have a lawful basis for each processing activity. We rely on the following bases:

• Contract performance (Article 6(1)(b)): Processing necessary to provide the services you have signed up for — account management, LOP Score calculation, listing verification, AI matching, member-to-member communication and tenancy management.
• Legal obligation (Article 6(1)(c)): Processing required by law — anti-money laundering (AML) checks, KYC identity verification, regulatory reporting to RERA and equivalent bodies, and record-keeping obligations.
• Legitimate interests (Article 6(1)(f)): Processing for purposes such as fraud prevention, platform security, analytics to improve the service, and to enforce our Terms and Conditions. We have assessed these interests against your rights and they do not override them.
• Consent (Article 6(1)(a)): Marketing emails, optional cookies, AI-personalisation features beyond core service delivery, and any processing of special category data not covered by another basis. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5Sharing Your Data

We do not sell your personal data. We share it only as described below.

5.1 With other platform members

When you interact with another member on the platform, certain profile data and transaction data is shared with them. For example:

• Buyers can see a broker's LOP Score, licence status, reviews, operating locations and profile
• Landlords can see a tenant applicant's LOP Score, verified ID status and rental history summary
• Brokers and builders can see a buyer's verified status and general budget range (not specific financial documents)
• Message content is shared between the sender and recipient only

We never share your government-issued ID documents or full financial statements with other members.

5.2 With service providers (data processors)

We share data with carefully selected third parties who process it on our behalf under strict data processing agreements:

• Identity verification (KYC) providers: To verify government-issued documents
• Cloud infrastructure providers: To host and operate the platform
• Payment processors: To process subscription and transaction fees (they receive only the data necessary for payment processing)
• Email and communications providers: To send platform notifications and marketing emails
• Analytics providers: To understand platform usage (data is anonymised or pseudonymised)
• Customer support tools: To manage support tickets

5.3 With regulatory and legal authorities

We may disclose personal data to regulatory bodies, law enforcement agencies, courts or other competent authorities when required by law — including RERA in the UAE, the Financial Conduct Authority (FCA) in the UK, and equivalent bodies in other markets.

5.4 Business transfers

If Land of Profits is involved in a merger, acquisition, financing, or sale of company assets, your personal data may be transferred as part of that transaction. We will give reasonable notice before your data becomes subject to a different privacy policy.

6International Data Transfers

Land of Profits operates across 11 countries. Your personal data may be transferred to and processed in countries outside of the UK or European Economic Area (EEA), including the United Arab Emirates, Saudi Arabia, India, Pakistan and Turkey.

Where we transfer personal data from the UK or EEA to countries that do not have an adequacy decision, we use one or more of the following safeguards:

• UK International Data Transfer Agreements (IDTAs) or EU Standard Contractual Clauses (SCCs) — legally binding contractual terms that impose equivalent data protection standards on the recipient
• Binding Corporate Rules (BCRs) where applicable for transfers within our corporate group
• Adequacy decisions where the destination country has been recognised by the UK or EU as providing adequate protection

You may request a copy of the specific safeguards we have in place for any transfer by contacting us at privacy@landofprofits.com.

7Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law. Our standard retention periods are:

When data is no longer required, we securely delete or anonymise it. In some cases, we may retain anonymised or aggregated data indefinitely for statistical and research purposes.

8Your Rights

Depending on your location and applicable law, you have the following rights over your personal data. To exercise any of these rights, contact us at privacy@landofprofits.com. We will respond within 30 days (or sooner where required by law). We may need to verify your identity before processing a request.

To exercise any right, email privacy@landofprofits.com with your full name, email address registered on the platform, and a clear description of your request. There is no fee for exercising your rights unless a request is manifestly unfounded or excessive.

9Cookies & Tracking

We use cookies and similar technologies to operate and improve the platform. A cookie is a small text file stored on your device. Some cookies are essential for the platform to work; others require your consent.

You can manage your cookie preferences at any time by clicking "Cookie Settings" in the footer of any page, or through your browser settings. Blocking essential cookies will prevent the platform from functioning correctly.

We do not use cookies to identify you across websites not operated by Land of Profits, or to sell your browsing data to third parties.

10Children's Privacy

The Land of Profits platform is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you are under 18, please do not create an account or submit any personal information through our platform.

If we become aware that we have inadvertently collected personal data from a child under 18, we will delete it promptly. If you believe we may have collected data from a minor, please contact us at privacy@landofprofits.com.

11Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Multi-factor authentication (MFA) for account access
• Role-based access controls limiting staff access to personal data
• Regular penetration testing and security audits
• Secure document storage with restricted access for KYC materials
• Incident response procedures and a data breach notification process

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware and, where required, notify affected individuals without undue delay.

No method of electronic transmission or storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

12Third-Party Links & Services

Our platform may contain links to third-party websites, services or social media platforms. Once you leave our platform, this Privacy Policy no longer applies. We are not responsible for the privacy practices of third-party sites and encourage you to read their privacy policies before sharing any personal data.

If you choose to sign in using a third-party service (such as Google or Apple), your use of those services is also governed by their respective privacy policies.

13Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or for other reasons. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send an email notification to all registered users
• Display a banner on the platform for 30 days after the update
• Where required by law, seek fresh consent for any new processing activities

We encourage you to review this policy periodically. Your continued use of the platform after a policy update constitutes your acknowledgment of the changes.

Previous versions of this Privacy Policy are available on request by contacting privacy@landofprofits.com.

14Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your rights, or have a concern about how we handle your personal data, please contact our Privacy team:

Right to lodge a complaint

If you are not satisfied with our response, or believe we are processing your personal data in breach of applicable law, you have the right to lodge a complaint with the relevant supervisory authority:

We would, however, appreciate the opportunity to address your concerns before you approach a supervisory authority. Please contact us first and we will do our best to resolve any issue promptly.