Privacy Policy

Last updated: 19 September 2026

Who controls your information

Invest Dubai Real Estate is operated by FIMCO Real Estate LLC, Dubai, United Arab Emirates. FIMCO Real Estate LLC is the data controller responsible for personal information collected through this website.

How to contact us about privacy

For any privacy question, or to make a request about your personal information, contact us using our enquiry form and select a privacy-related topic. Your request reaches the team responsible for handling personal information.

Information we collect

We collect only what we need, grouped by how it reaches us:

Enquiry / contact form

• full name;
• email address;
• mobile / WhatsApp number and the country dialling code you select;
• country of residence;
• company name (optional);
• the services you select and any sub-options;
• any property or premises requirement you indicate;
• an optional, non-sensitive indication of where investment funds would come from (funding-source triage);
• your decision stage and optional context (budget range, business activity, target location);
• your message and preferred contact method;
• separately and optionally, your email newsletter choice.

Newsletter / subscription

• email address;
• optional first name;
• the marketing-consent record and the newsletter-preference stored in your browser (see Cookies, analytics & local storage).

Calculators (Decision Lab)

• the figures you enter are processed in your browser to produce an illustrative result. We do not store calculator inputs unless you submit them to us with a request, in which case the contact details you provide with that request are stored.

Analytics

• if analytics is active (see Cookies, analytics & local storage), we receive aggregate usage events — for example which pages and tools are opened. We do not intentionally send your name, email, phone, WhatsApp number, message or enquiry text to our analytics provider, though your browser, device, cookie and online-identifier information may be processed by that provider in accordance with its services and our settings.

Technical and source data

• the source page and referring domain, and any source / medium / campaign (UTM) parameters present in the link you followed;
• a submission identifier and timestamp generated when you send an enquiry;
• IP address, browser / device information and standard server and security logs generated when you use the site.

Please do not submit passports, bank statements, account numbers or other sensitive source-of-funds documents through the general enquiry form.

Why we use it and our lawful basis

We use your information to review and respond to your enquiry, route the request to an appropriate consultant or specialist, provide the information and any report you request, operate and secure the website, measure in aggregate how the site is used so we can improve it, keep consent and preference records, and — only where you have separately opted in — send Market Intelligence. Our lawful bases are: your consent (email newsletter marketing, and the Meta advertising pixel); steps taken at your request / performance of what you ask for (handling and responding to your enquiry or report request, including transactional follow-up); and, for aggregate analytics to improve the site and to keep the site secure, an interest-based measurement approach with a clear, always-available opt-out. Sri Lanka's statutory lawful-basis regime (including legitimate interests) takes effect on 1 January 2027; where those provisions are in force and we rely on legitimate interests, we will document and apply the required balancing and safeguards. We do not use your information to make solely automated decisions that produce legal or similarly significant effects about you.

Marketing is separate

Submitting an enquiry does not subscribe you to marketing. Our email newsletter (Market Intelligence) is a separate, optional choice that is unticked by default, and you can withdraw it at any time. WhatsApp and phone are used to respond to and deliver what you request — for example sending a report you asked for or replying to your enquiry, and reasonable transactional follow-up about that request — not marketing broadcasts. This site is capture-only: no automated marketing message is sent from it, and where any marketing is later activated, each message includes an easy way to opt out and we honour do-not-contact requests.

Sharing

We do not sell your personal information. We share it only with the service providers that help us operate the website and respond to your enquiry, and only as needed: our hosting and infrastructure provider, our content-management platform, our analytics provider (Google Analytics, anonymous events only) and — where and when activated — form / spam-protection, advertising-measurement (Meta, only with your consent) and email tooling. Where your requirement needs specialist support (for example real-estate, business-licensing, legal / documentation, marketing or trade services), the relevant enquiry information may be made available to the appropriate service provider so that your request can be actioned.

International handling

This website is directed to Sri Lankan investors but is operated from the United Arab Emirates, and the Dubai services you ask about involve UAE-based teams and providers. Some providers (for example analytics and advertising-measurement platforms) may process data outside Sri Lanka and the UAE. Personal information you submit is therefore processed outside Sri Lanka. We apply appropriate safeguards and access controls, and share information only for the purposes described in this policy. We do not make unsupported adequacy claims.

Retention

We keep personal information only for as long as reasonably necessary for the purpose it was collected for — handling your enquiry and any resulting relationship, sending the newsletter until you unsubscribe, and demonstrating the consent and preference choices you made — together with any legal, compliance, recordkeeping and dispute / security needs, after which we delete or anonymise it. Aggregate analytics data is retained per our analytics provider's standard retention. Security and server logs are kept only for the short period needed to keep the site secure and diagnose problems.

Security

We use reasonable administrative and technical measures appropriate to the risk — including access controls, secure hosting and transport encryption — to protect personal information. No website or method of transmission can be guaranteed as completely secure; we work to protect your information and to respond appropriately if an issue arises.

Cookies, analytics and local storage

We use Google Analytics 4 for aggregate usage measurement to improve the site; we do not intentionally send your name, email, phone or WhatsApp number to Google Analytics, though it may process browser, device, cookie and online-identifier information in accordance with Google's services and our settings. You can opt out at any time using the "Your privacy choices" notice or the Cookie preferences link in the footer. We use the Meta Pixel for advertising measurement only if you consent; it is off by default. A first-party idre_consent cookie records your choices, and a functional newsletter-preference value may be stored in your browser if you interact with the newsletter prompt. Full details, providers and how to change your choices are in our Cookie Policy.

Sri Lanka data protection

Sri Lanka's data-protection framework comprises the Personal Data Protection Act No. 9 of 2022, the Amendment Act No. 22 of 2025 and the related Extraordinary Gazette, under which key provisions — including scope, core processing requirements and controller / processor obligations — are scheduled to become operational from 1 January 2027 (appointed by Extraordinary Gazette No. 2498/16 dated 22 July 2026, which brings Sections 2 and 3, Part I — Processing of Personal Data, and Part III — Controllers and Processors into operation on that date). The Act recognises several lawful bases for processing, including consent and legitimate interests subject to the required protections; because that regime is not yet fully operative, our current wording is transition-aware and we do not present those statutory provisions as already in force. Because this website is directed to data subjects in Sri Lanka while operated from outside Sri Lanka, we have built it to a privacy-ready standard: clear collection purposes with an identified lawful basis for each technology, minimum necessary form fields, a clear submission notice separate from optional marketing consent, an easy opt-out from analytics and from marketing, a processor inventory, retention rules, a data-subject contact route, cross-border-processing disclosure and security controls.

Your rights and requests

You may ask us to access, correct or delete your personal information, withdraw a consent you have given (for example the newsletter or the Meta advertising pixel), opt out of / object to analytics, or raise a concern about how your information is handled. You can change your analytics and marketing choices instantly using the Cookie preferences link in the footer, or contact us using the enquiry form referenced above for any other request. We respond to requests in line with the data-protection standards described in this policy.

Children

This website is intended for adults considering property, business, investment and related matters. It is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided personal information, please contact us so we can address it.

Changes to this policy

We may update this policy to reflect changes in our processing, technology or the law. The current version is indicated by the "last updated" date above, and material changes are reflected in the policy itself.