DATA PROTECTION POLICY

Last Updated: July 8, 2025

1. Introduction

At rentinit L.L.C-FZ ("rentinit", "we", "us", or "our"), we are committed to protecting your personal data and respecting your privacy. This Data Protection Policy explains how we collect, use, disclose, and safeguard your information in accordance with applicable data protection laws, including the UAE Federal Decree-Law No. 24 of 2024 on Data Protection.

2. Data Protection Principles

We adhere to the principles of lawfulness, fairness, and transparency in all data processing activities. We collect data only for specified, explicit, and legitimate purposes and do not process it in a manner incompatible with those purposes. We ensure data minimization by collecting only what is necessary, maintain accuracy through regular updates, limit storage to required periods, and guarantee integrity and confidentiality through appropriate security measures. We remain accountable for demonstrating compliance with all applicable data protection laws.

3. Your Rights

You have the right to access your personal data and obtain information about how we process it. You may request rectification of any inaccurate or incomplete data. Under certain circumstances, you have the right to request erasure of your personal data, restriction of processing, and data portability. You may object to certain types of processing and withdraw consent at any time where we rely on consent as our legal basis for processing.

4. Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption of data in transit and at rest, regular security assessments and audits, access controls and authentication mechanisms, employee training on data protection, incident response procedures, and regular backups with disaster recovery plans.

5. Data Retention

We retain personal data in accordance with UAE legal requirements. Transaction and financial records are retained for a minimum of five years as required by law. Identity verification data is retained for five years after account closure. General account information is retained for the duration of our relationship plus five years. All retention periods are subject to applicable legal, regulatory, and business requirements.

6. Data Sharing

We may share your data with government authorities as required by law, including the Dubai Land Department and other regulatory bodies. We may share necessary information with other platform users to facilitate rental transactions. We engage service providers who assist us in operating our platform under strict confidentiality obligations. We will disclose data to law enforcement when legally required. We do not sell your personal data to third parties.

7. Automated Decision-Making

We use automated systems for certain processes including tenant scoring and risk assessment. These systems analyze various data points to assist in decision-making processes. You have the right to request human review of any automated decisions that significantly affect you and to understand the logic involved in such automated processing.

8. International Data Transfers

When we transfer personal data outside the UAE, we ensure appropriate safeguards are in place. These safeguards include standard contractual clauses approved by relevant authorities and obtaining your explicit consent where required by law. All international transfers comply with applicable data protection regulations.

9. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within the timeframes required by law. Such notification will include the nature of the breach, likely consequences, and measures taken or proposed to address the breach.

10. Children's Privacy

Our services are not directed to individuals under the age of eighteen. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take immediate steps to delete such information from our systems.

11. Contact Information

For any questions about this Data Protection Policy or to exercise your rights, please contact us at contact@rentinit.ae or by phone at +971 58 538 2460. Written correspondence may be sent to rentinit L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.

12. Updates to This Policy

We reserve the right to update this Data Protection Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date. Your continued use of our services after such modifications constitutes your acknowledgment and acceptance of the updated policy.