Privacy Policy
Effective Date: 1 January 2026
Last Updated: 20 March 2026
This Privacy Policy explains how Kapstone FZE LLC, trading as Kapstone ("Kapstone", "we", "us", or "our"), collects, uses, stores, discloses, and protects personal data when you visit www.kapstone.ae, submit an enquiry, communicate with us, or otherwise interact with our website and services.
This Privacy Policy is intended to align with applicable laws and regulations of the United Arab Emirates, including the UAE Personal Data Protection Law, Federal Decree-Law No. 45 of 2021, together with other applicable laws relating to electronic transactions, consumer protection, and website use in the UAE. The federal PDPL is the primary UAE data protection framework outside the DIFC and ADGM free zones.
1. Who We Are
Kapstone is a UAE-based firm providing strategic services relating to retail real estate, mixed-use developments, asset performance, commercial strategy, retail and F&B growth, and related business advisory services.
For the purposes of applicable data protection law, the entity responsible for your personal data is:
Kapstone
Dubai, United Arab Emirates
Email: info@kapstone.ae
Website: www.kapstone.ae
2. Personal Data We Collect
We may collect and process the following categories of personal data:
Information you provide directly
Full name
Company name
Job title
Email address
Mobile or telephone number
Enquiry details, messages, attachments, and correspondence
Any other information you voluntarily submit through contact forms, email, WhatsApp, or meetings arranged through the website
Information collected automatically
IP address
Browser type and version
Device type
Operating system
Referral source
Website pages viewed
Date, time, and duration of visits
Technical and usage data collected through cookies or similar technologies
Business relationship data
Records of discussions, proposals, meetings, mandates, transactions, and service enquiries
Preferences relevant to providing or tailoring our services
We do not intentionally collect sensitive personal data unless it is necessary for a legitimate business purpose and lawfully permitted.
3. How We Use Personal Data
We may use your personal data to:
respond to enquiries and requests
communicate with you about our services
assess whether we are the right fit for a potential engagement
prepare proposals, presentations, and commercial correspondence
manage and administer our business relationship with you
improve our website, content, and user experience
maintain website security and prevent misuse
comply with legal, regulatory, risk management, accounting, and record-keeping obligations
protect our legal rights and business interests
We will process personal data only where we have a lawful basis to do so under applicable law, including where processing is necessary for contractual steps, compliance obligations, legitimate business purposes, or your consent where required. The UAE PDPL recognises data subject rights and sets obligations on those processing personal data.
4. Marketing Communications
We may send you updates, insights, market communications, or business information where you have requested them, where you have engaged with us in a business context, or where otherwise permitted by applicable law.
Where required, we will obtain your consent before sending marketing communications. You may opt out at any time by using the unsubscribe facility, replying to the message, or contacting us directly.
We do not sell personal data, and we do not permit third parties to use your personal data for their own unrelated marketing purposes. UAE consumer protection rules prohibit misuse of consumer data for marketing.
5. Cookies and Similar Technologies
Our website may use cookies, analytics tools, and similar technologies to support site functionality, understand website traffic, improve performance, and enhance user experience.
These technologies may collect technical and behavioural information such as browser details, pages visited, time spent on the site, and referral source.
You may adjust your browser settings to refuse or limit cookies. However, doing so may affect parts of the website’s functionality..
6. Disclosure of Personal Data
We may disclose personal data, where necessary and lawful, to:
our employees, principals, and authorised representatives
professional advisers, auditors, accountants, and service providers
website hosting, IT, analytics, CRM, and communications providers
counterparties, landlords, developers, brand partners, or transaction participants where relevant to your request or engagement
regulatory authorities, courts, law enforcement agencies, or government bodies where required by law
any purchaser, successor, or transferee in connection with a business restructuring, transfer, or sale
All such disclosure will be limited to what is reasonably necessary for the relevant purpose.
7. International Transfers
Because we operate in an international business environment, your personal data may be stored in or accessed from countries outside the UAE, including by cloud, email, CRM, hosting, or software providers.
Where cross-border transfers occur, we will take appropriate steps to ensure that personal data remains protected in a manner consistent with applicable law and with reasonable contractual, organisational, and technical safeguards. The UAE PDPL is the federal framework governing personal data protection in the UAE outside DIFC and ADGM.
8. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:
responding to enquiries
maintaining business and transaction records
complying with legal, tax, accounting, and regulatory obligations
resolving disputes
protecting our legal rights
When personal data is no longer required, we will delete, anonymise, or securely archive it as appropriate.
9. Data Security
We implement reasonable administrative, organisational, and technical measures to protect personal data against unauthorised access, misuse, loss, alteration, disclosure, or destruction.
No method of internet transmission or electronic storage is completely secure. However, we maintain safeguards designed to reduce risk and protect the integrity and confidentiality of personal data. UAE electronic transactions law recognises technical and organisational measures used to verify identity and protect data integrity in electronic environments.
10. Your Rights
Subject to applicable law, you may have the right to request access to your personal data and to request correction of inaccurate data. The UAE government states that the federal PDPL gives data owners rights including requesting correction of inaccurate personal data and requesting restriction or cessation of processing in certain circumstances.
Depending on the circumstances and applicable law, you may also request that we:
update or correct your data
withdraw consent where processing is based on consent
restrict or object to certain processing
delete personal data where retention is no longer required or legally justified
To exercise any privacy-related request, contact us at: info@kapstone.ae
We may need to verify your identity before acting on your request.
11. Third-Party Links
Our website may contain links to third-party websites, platforms, or social media pages. We are not responsible for the privacy practices, content, or security of third-party sites. You should review their privacy terms separately.
12. Children’s Privacy
Our website and services are intended for business and professional use. They are not directed to children, and we do not knowingly collect personal data from minors through the website.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, regulatory, operational, or website changes. The updated version will be posted on this page with a revised effective date.
14. Contact Us
For any privacy-related enquiries or requests, contact:
Kapstone
Email: info@kapstone.ae
Website: www.kapstone.ae
Address: Downtown, Dubai, United Arab Emirates
Copyright © 2026 KAPSTONE ALL RIGHTS RESERVED.