Privacy Policy

GHEDC ("we," "our," "us," or the "Company"), established in 1999 and headquartered at Gate Village 4, Level 3, Dubai International Financial Centre (DIFC), Dubai, United Arab Emirates (RERA License No. 33554), is committed to protecting the privacy and confidentiality of our clients, website visitors, and all individuals who interact with our services.

This Privacy Policy applies to all personal information collected through our website (ghedc.com), mobile applications, email communications, telephone inquiries, in-person consultations, property viewings, and any other interactions with GHEDC and its representatives.

As a leading luxury real estate investment consultancy serving ultra-high-net-worth individuals, family offices, and institutional investors, we understand that privacy and discretion are paramount. We handle all client information with the utmost confidentiality and implement industry-leading security measures to protect your data.

By engaging with GHEDC, you acknowledge that you have read, understood, and agree to the terms outlined in this Privacy Policy. If you do not agree with any part of this policy, please refrain from using our services or providing personal information.

We process your personal information based on the following legal grounds:

• Contractual Necessity: Processing required to fulfill our service agreement with you, including property searches, viewings, and transactions.
• Legal Obligation: Processing required to comply with UAE laws, including RERA regulations, AML requirements, and tax reporting obligations.
• Legitimate Interests: Processing for our legitimate business interests, such as improving services, marketing (where permitted), and fraud prevention, provided such interests do not override your fundamental rights.
• Consent: Where you have explicitly consented to specific processing activities, such as receiving marketing communications or participating in surveys.

GHEDC does not sell, rent, or trade your personal information to third parties for their marketing purposes.

Your information is primarily stored and processed in the United Arab Emirates. However, in serving our international clientele, we may transfer data to other jurisdictions. When transferring data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by relevant data protection authorities
• Binding corporate rules for transfers within our corporate group
• Your explicit consent for specific transfers
• Compliance with applicable data protection laws in both origin and destination countries

We implement comprehensive security measures to protect your personal information:

• Encryption: All data transmissions are encrypted using TLS 1.3 protocols; sensitive data is encrypted at rest
• Access Controls: Role-based access restrictions ensuring only authorized personnel can access client information
• Infrastructure Security: Enterprise-grade firewalls, intrusion detection systems, and regular security audits
• Physical Security: Secure office facilities with controlled access and 24/7 surveillance
• Staff Training: Regular privacy and security awareness training for all employees
• Incident Response: Documented procedures for identifying, responding to, and reporting security incidents

While we employ industry-leading security measures, no system is completely immune to threats. We continuously monitor and update our security practices to address emerging risks.

We retain your personal information for as long as necessary to:

• Provide our services and maintain our business relationship
• Comply with legal and regulatory obligations (typically 7-10 years for transaction records)
• Resolve disputes and enforce agreements
• Support legitimate business purposes

When information is no longer required, we securely delete or anonymize it in accordance with our data retention policies.

You have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information, subject to legal retention requirements
• Right to Restriction: Request limitation of processing in certain circumstances
• Right to Portability: Request transfer of your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw previously given consent at any time

To exercise any of these rights, please contact our Privacy Officer at info@ghedc.com. We will respond to your request within 30 days.

Our website uses cookies and similar technologies to:

• Essential Cookies: Enable core website functionality and security features
• Analytics Cookies: Understand how visitors interact with our website to improve user experience
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Deliver relevant content and measure advertising effectiveness (with your consent)

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.

Our services are intended for individuals aged 18 and above who have the legal capacity to enter into real estate transactions. We do not knowingly collect personal information from children under 18. If we become aware of any such collection, we will promptly delete the information.

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

We are committed to resolving any concerns you may have about our data practices. If you are not satisfied with our response, you may lodge a complaint with the relevant data protection authority in your jurisdiction.