Privacy Policy
Tier7Advisory | Last Updated: 9 June 2026
This Privacy Policy explains how Tier7 Advisory (“we”, “us”,“our”) collects, uses, stores, and protects personal data submitted through ourwebsite, https://www.tier7advisory.com (the “Website”). We are committed toprotecting your privacy and to handling your personal data in accordance withUAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the“PDPL”).
1. Who We Are — The Data Controller
Tier7 Advisory is a governance-led real estate developmentadvisory firm licensed by the Department of Economic Development (DED) in theEmirate of Dubai, United Arab Emirates. For the purposes of the PDPL, we act asthe data controller responsible for the personal data collected through theWebsite. Questions about this policy, or about how we handle your data, can bedirected to us at rs@tier7advisory.com.
2. Scope of This Policy
This policy applies to personal data we collect through theWebsite. It does not apply to personal data processed under a separate signedengagement letter between you and us, which is governed by the terms of thatengagement.
3. Personal Data We Collect
We collect the following categories of personal data:
— Information you provide directly — when you complete the contact form on the Website, we collectyour full name, company email address, company name, your role, and any contextnote you choose to include.
— Technical information collected automatically — when you visit the Website, we and our processor may collectyour IP address and limited browser and device information, such as browsertype, operating system, and pages viewed, through cookies and similartechnologies.
We do not intentionally collect sensitive personal data, and weask that you do not submit such data through the contact form.
4. How We Collect Personal Data
We collect personal data in two ways — directly from you, whenyou submit the contact form, and automatically, through cookies and similartechnologies operated by our customer relationship management (CRM) platform,HubSpot. Further detail is set out in our Cookie Policy.
5. Legal Basis for Processing
We process personal data on the following legal bases under thePDPL:
— Your consent — given whenyou submit the contact form and accept cookies, which you may withdraw at anytime.
— Steps taken at your request prior to anengagement — such as responding to your enquiry andassessing whether our services meet your needs.
— Our legitimate business interests — in operating, securing, and improving the Website and infollowing up on enquiries, provided these interests are not overridden by yourrights.
6. How We Use Your Personal Data
We use personal data for the following purposes:
— to respond to your enquiry and provide the information you haverequested;
— to manage and maintain our CRM records and contact history;
— to send follow-up communications relating to your enquiry and toour advisory services;
— to operate, secure, and improve the Website; and
— to comply with applicable legal and regulatory obligations.
We do not sell personal data, and we do not use it for automateddecision-making that produces legal or similarly significant effects.
7. Third-Party Processing — HubSpot
We use HubSpot as our CRM and marketing automation platform.When you submit the contact form, your data is processed and stored by HubSpot,which acts as our data processor and handles personal data on our instructionsand on our behalf. HubSpot operates servers located outside the United ArabEmirates, which means your personal data may be transferred to, and stored in,jurisdictions outside the UAE. Where such transfers occur, we rely on HubSpot’scontractual data protection commitments and recognised safeguards to ensureyour data receives an adequate level of protection consistent with the PDPL. Wedo not currently use any other third-party analytics or tracking tools.
8. International Transfers of Personal Data
As described above, personal data submitted through the Websitemay be transferred outside the UAE in the course of being processed by HubSpot.We take reasonable steps to ensure that any such transfer is subject toappropriate safeguards and that your data is protected in accordance with thePDPL.
9. Data Retention
We retain personal data only for as long as necessary to fulfilthe purposes for which it was collected. Enquiry and CRM records are ordinarilyretained for up to twenty-four (24) months from your last interaction with us,after which they are deleted or anonymised, unless a longer period is requiredto comply with a legal obligation, resolve a dispute, or enforce ouragreements. Where you ask us to delete your data sooner, we will do so unlesswe are required to retain it by law.
10. Data Security
We and our processor apply appropriate technical andorganisational measures to protect personal data against unauthorised access,loss, misuse, or disclosure. While no method of transmission or storage isentirely secure, we maintain safeguards designed to protect your data andreview them as our practices evolve.
11. Your Rights
Subject to the PDPL and applicable exemptions, you have thefollowing rights in relation to your personal data:
— Access — to request confirmationof whether we hold your personal data and to obtain a copy of it.
— Correction — to request thatinaccurate or incomplete data be corrected.
— Deletion — to request that we deleteyour personal data where there is no lawful reason for us to continue holdingit.
— Objection — to object to theprocessing of your personal data in certain circumstances, including processingfor direct marketing.
— Portability — to requestthat the data you have provided be transferred to you or, where technicallyfeasible, to another controller in a structured, commonly used format.
— Withdrawal of consent — to withdraw any consent you have given at any time, withoutaffecting the lawfulness of processing carried out before withdrawal.
— Restriction — to requestthat we restrict the processing of your personal data in certain circumstances.
12. How to Exercise Your Rights
To exercise any of these rights, contact us atrs@tier7advisory.com. We will respond within the period required by the PDPL,and we may need to verify your identity before acting on a request. There is nofee for making a request, although we may charge a reasonable fee or decline toact where a request is manifestly unfounded or excessive, to the extentpermitted by law. If you believe your data protection rights have not beenrespected, you may lodge a complaint with the UAE Data Office.
13. Cookies
The Website uses functional cookies and HubSpot tracking cookiesto enable the contact form, attribute enquiries, and capture leads in our CRM.For full details of the cookies we use, their purposes, and how to manage them,please see our Cookie Policy.
14. Children’s Data
The Website is intended for business and professional users. Itis not directed at children, and we do not knowingly collect personal data fromindividuals under the age of eighteen (18).
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflectchanges in our practices or in applicable law. The current version will alwaysbe available on the Website, with the “Last Updated” date shown at the top. Weencourage you to review it periodically.
16. Governing Law and Jurisdiction
This Privacy Policy is governed by the laws of the United ArabEmirates as applied in the Emirate of Dubai. Any dispute arising out of or inconnection with it is subject to the exclusive jurisdiction of the courts ofDubai.
17. Contact Us
For any questions, requests, or concerns regarding this PrivacyPolicy or your personal data, contact us at rs@tier7advisory.com.