Privacy notice

Last updated: 12 September 2026

Offplix ("we") operates the website offplix.com, a buyer-side information platform for off-plan property in the United Arab Emirates. This notice explains what personal data we collect, why, and your rights.

1. Data we collect

• Account data: name, email address, phone number, country of residence, role (investor, agent, other), preferred language, password (stored hashed by our authentication provider, never readable by us).
• Usage data: projects you save, compare or request information about, your language and currency choices.
• Technical data: IP address, browser type, pages visited, approximate location, collected through analytics cookies only if you accept them.
• Broker details you type for PDF brochures are stored in your browser only, not on our servers.

2. Why we use it

• To create and secure your account (including optional two-step login).
• To answer your requests for availability and prices about a project. Requests are recorded on Offplix and handled manually by Offplix, which replies to you by email; there is no automatic notification and no automatic transfer of your details to a real-estate agent or developer. If you make a request from a selection a professional shared with you, the technical origin of the request (that selection and that professional) is recorded with it, for follow-up only: it gives that professional no right and no access to your data. On a shared selection, the “Contact” buttons (call, WhatsApp, email) put you directly in touch with that professional, outside Offplix.
• To send you service emails (confirmation, password reset) and, with your explicit and optional consent, information about off-plan opportunities. You can withdraw consent at any time in My account.
• To measure and improve the service (analytics, with your consent).

3. Legal basis and retention

We process account data to perform the service you asked for, marketing communications on the basis of your consent, and analytics on the basis of your consent. Account data is kept while your account exists and deleted within 30 days of a deletion request. Leads are kept for 24 months.

4. Processors and transfers

We rely on Supabase (database and authentication, EU/US), Netlify (hosting), Cloudflare (bot protection), Google Analytics (audience measurement, only with consent) and OpenFreeMap (map tiles, no personal data). Some of these providers are located outside the UAE and the EU; they are bound by contractual safeguards.

5. Your rights

You can access, correct or delete your data from the "My account" page or by writing to ly@daouda.fr. You can object to marketing at any time and lodge a complaint with your data-protection authority.

6. Security

Connections are encrypted (HTTPS), passwords are hashed, access to project and account data is restricted by row-level security, sign-up and login are protected by Cloudflare Turnstile, and you can enable an authenticator app for two-step login.