Last updated: September 2025

Privacy policy

1. Introduction

This Privacy Policy explains how OPAL Estates (“we”, “us”, or “our”) collects, uses, and protects your personal data when you visit our website estates.flyopal.com, complete our online forms, make payments, or engage with our property investment services.

We are committed to safeguarding your privacy and ensuring transparency in how your information is processed in accordance with the UK Data Protection Act 2018 and the UK General Data Protection Regulation (GDPR).

2. Data We Collect

We collect and process personal information to provide our real estate, property sourcing, and financial services effectively. The data collected includes:

Personal Identification: Full name, address, date of birth, nationality, and proof of identity.
Contact Information: Email address, phone number, and mailing address.
Financial Information: Payment card details, billing address, and property investment amounts.
Transactional Data: Details relating to reservation fees, deposits, or financial commitments made through OPAL Estates.
Digital Signatures: Electronic confirmations and signatures for property commitments or financial agreements.
Technical Data: Browser type, device identifiers, and IP address (for fraud prevention and analytics).

3. How We Use Your Data

We process your information for the following purposes:

To manage your property reservation and payment process through our Commitment to Buy system and integrated Stripe checkout.
To verify your identity and prevent fraudulent transactions.
To communicate project updates, property allocations, and payment confirmations.
To fulfil our legal and contractual obligations with developers, financial institutions, and regulatory authorities.
To maintain internal records, accounting, and compliance documentation.
To provide customer service, respond to enquiries, and improve our platform’s performance.

We will not sell or rent your personal data to any third party.

4. Legal Basis for Processing

We process your data under the following lawful bases:

Contractual necessity — to fulfil obligations related to your reservation or property investment.
Legal obligation — to comply with UK and Dubai property laws, anti-money-laundering (AML), and financial regulations.
Legitimate interest — to improve services, verify client information, and prevent misuse of our systems.
Consent — when you opt in to receive marketing updates or sign your digital Commitment to Buy agreement.

5. Payment Information

All card payments are securely processed through Stripe, a PCI-compliant payment gateway.
We do not store your full card details on our servers. Stripe may retain necessary information to process future payments or refunds in accordance with their own Privacy Policy.

We maintain strict encryption and secure data channels for all payment and financial communication.

6. Data Retention

Your data will be retained only for as long as necessary:

Transactional and contractual data — retained for up to 7 years for accounting and legal purposes.
Marketing and communication data — retained until you unsubscribe or withdraw consent.
Digital signatures and agreements — retained in encrypted form for the duration of your contractual relationship with OPAL Estates.

7. Data Sharing & Transfers

We may share certain data with trusted third parties, such as:

Developers and escrow agents for property allocations.
Payment processors (e.g., Stripe).
Legal and compliance partners for verification and documentation.

Where transfers occur outside the UK (for example, to Dubai developers), we ensure appropriate safeguards are in place under the UK GDPR international data transfer framework.

8. Data Security

We use encryption, firewalls, and secure servers to protect all personal and financial data.
Access to sensitive data (financial records, signatures, identity documents) is restricted to authorised OPAL Estates personnel and compliance officers only.

9. Your Rights

Under the UK GDPR, you have the following rights:

To access and receive a copy of your personal data.
To correct inaccurate information.
To request erasure of data where legally permissible.
To restrict or object to processing.
To withdraw consent for marketing communications at any time.

To exercise these rights, please contact us at request@flyopal.com.

10. Cookies and Analytics

Our website uses essential and analytical cookies to improve usability and measure engagement.
You can control cookie preferences through your browser settings.

11. Updates to This Policy

We may update this policy from time to time to reflect changes in our business practices or legal requirements.
Any updates will be published on this page with a revised effective date.

12. Contact Us

If you have any questions or concerns about how your data is processed, please contact:

Data Protection Officer
OPAL International Estates Ltd
45 Albemarle Street, London, W1S 4JL
request@flyopal.com