Privacy and your data

Dalil DXB (dalildxb.com) is an independent information portal about Dubai: company setup, schools, events and attractions, and residency. It is operated by Oussama Messaoud, an individual based in Dubai, United Arab Emirates ("Dalil DXB", "we", "us"). For the personal data described in this notice, we are the "controller" (the party that decides why and how the data is used). Contact: privacy@dalildxb.com. If the operator of the site changes (for example to a company), we will update this notice and say so on this page.

What we do not collect: payment card details, passport or Emirates ID numbers, health data, precise location, or any information about children. Please only enter information about yourself, and please do not enter details about your child on the school forms.

Optional information: the form fields about your needs are optional guidance for partners. Your name, WhatsApp number and email are required to send a request because partners need them to contact you.

Sources other than you: the facts shown on this site (fees, ratings, events) come from public and official sources and do not relate to identifiable individuals.

Consent is optional and you can withdraw it at any time. If you do not consent, you can still use all the information on the site. We do not use your data for automated decisions that produce legal or similarly significant effects, and we do not build advertising profiles.

If you are in the European Economic Area or the United Kingdom, the equivalent legal bases under the GDPR apply (consent, legitimate interests, legal obligation) and you also have the rights in section 9.

We share personal data only as described below.

• Partner businesses (independent recipients). When you send a request and consent, we send your name, contact details and request details to up to two partners relevant to your request, for example a company formation provider, a school admissions team or a visa and PRO services provider. Partners then contact you by WhatsApp, phone or email about that request only. Once they receive your data, each partner uses it under its own privacy notice and is responsible for it. We select partners we consider reputable and ask them to use your data only for your request, to respect your withdrawal of consent and to protect it appropriately. Where a partner has agreed to be named, we may mention it on the site.
• Service providers (processors). Companies that help us run the site under contract and only on our instructions: our application hosting and database platform (Lovable and its infrastructure sub-processors, including Supabase and its cloud hosting provider) and our authentication provider. Pages also load fonts from Google Fonts, which means your IP address is sent to Google when a page loads.
• Ticket and affiliate partners. When you click a ticket link (for example Platinumlist) you leave our site. We do not send them your personal data from our forms. They may set their own cookies to credit us with the referral.
• Authorities and advisers. If required by law, a court or a competent authority, or to protect rights and safety, and to our professional advisers under confidentiality.
• Business changes. If the operation of the site is transferred to a company or another owner, your data may transfer with it, subject to this notice and applicable law.

We do not sell your personal data to advertisers or data brokers.

Your data is stored in a managed cloud database (PostgreSQL) operated for us by our hosting platform and its infrastructure providers. Data is encrypted in transit (HTTPS), and access to the database is restricted by row-level security rules and role-based permissions, so that website visitors cannot read other people's requests. Only the operator and authorised partner admins can see request data. The servers used by these providers may be outside the UAE.

We may keep data longer where the law requires it or where it is needed to establish, exercise or defend a legal claim.

Because our hosting providers may store or access data outside the UAE, your data may be transferred abroad. We only use providers that apply appropriate safeguards, such as contractual data protection terms, encryption in transit and access controls, and we transfer data in line with the cross-border transfer rules of the PDPL. By sending a request you understand that your data may be processed outside the UAE for these purposes. You can contact us for more information about the safeguards.

We apply technical and organisational measures proportionate to the risk: encryption in transit, row-level access control in the database, role-based access for admins, minimal data collection and logging of consent. No system is perfectly secure. If a personal data breach is likely to harm you, we will notify you and the competent authority as required by law.

Under the PDPL (and, where it applies, the GDPR) you have the right to:

• be informed about how your data is used (this notice);
• access your data and receive a copy (including in a portable format where applicable);
• have inaccurate data corrected;
• have your data erased;
• restrict or object to processing;
• withdraw your consent at any time (this does not affect processing done before withdrawal);
• not be subject to decisions based only on automated processing (we do not make such decisions).

How to use them

Use the form at the bottom of this page or email privacy@dalildxb.com from the address you used. We may ask you to confirm your identity to protect you. We reply within 30 days. It is free unless a request is clearly unfounded or excessive. If you withdraw consent or ask for deletion, we stop sharing your data, delete or anonymise it as described above, and tell the partners we sent it to so they stop contacting you and delete your data where the law requires. We cannot recall messages a partner already sent you, and we cannot control data a partner already holds under its own legal duties.

Complaints

If you are unhappy with how we handled your data, please contact us first so we can fix it. You also have the right to complain to the competent UAE data protection authority (the UAE Data Office), or, if you are in the EEA or UK, to your local data protection authority.

We only use cookies and browser storage that are strictly necessary, for example to keep authorised partners signed in to the admin area and to remember interface settings. We do not use advertising or cross-site tracking cookies, so no cookie banner is needed. Third parties can set their own cookies if you click through to their sites (for example ticket sellers). You can block or delete cookies in your browser settings; the site works without them, but admin sign-in will not.

Some links on this site are affiliate links. If you buy tickets through them we may earn a commission at no extra cost to you. Those links are marked as sponsored. We may also receive a referral fee or commission from partners to whom we pass requests you have consented to send. These arrangements do not affect the price you pay, and we aim to keep our facts independent and sourced. Every figure on the site shows its source and the date it was last verified.

The site is for adults. We do not knowingly collect data from anyone under 18. Parents using our school pages should give only their own contact details. If you believe a child has sent us data, email privacy@dalildxb.com and we will delete it.

This site links to official, news and commercial websites that have their own privacy practices. We are not responsible for them.

We may update this notice when our practices or the law change. The date and version at the top will change, and for material changes affecting consent we will ask for your consent again. Version 1.0 (9 October 2026): first publication.

This notice is governed by the laws of the United Arab Emirates as applied in the Emirate of Dubai, without affecting any mandatory rights you have under the law of your own country. Questions: privacy@dalildxb.com. Operator: Oussama Messaoud, Dubai, United Arab Emirates.