
Privacy Policy
Grand Stone Real Estate LLC is committed to protecting your personal data.
Effective Date: 27/12/2025
Grand Stone Real Estate LLC ("Grand Stone", "we", "our", or "us"), registered and operating in Dubai, United Arab Emirates, is committed to protecting personal data in accordance with applicable data protection laws, including:
- UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL)
- India Digital Personal Data Protection Act, 2023 (DPDP Act)
- Meta Platforms global data use and advertising policies
This Privacy Policy explains how we collect, process, store, use, disclose, and protect personal data when you interact with us through our website, advertisements, lead forms, and communication channels including Facebook, Instagram, and WhatsApp.
Personal Data We Collect
We may collect and process the following personal data:
- Full name
- Mobile number, including WhatsApp number
- Email address
- Property preferences, budget, and investment intent
- City and country-level location data
- Any information voluntarily shared through forms, messages, calls, or emails
We do not intentionally collect sensitive personal data such as government ID numbers, financial details, biometric data, health data, or religious or political information.
Lawful Basis for Processing
Personal data is processed only where permitted by law, based on one or more of the following lawful grounds:
- Explicit consent provided by you through lead forms, inquiries, or direct communication
- Performance of a contract or steps taken at your request prior to entering into a contract
- Legitimate business interests related to real estate advisory, sales, leasing, and marketing
- Compliance with legal, regulatory, or governmental obligations
Consent may be withdrawn at any time.
Methods of Data Collection
We collect personal data through:
- Meta lead generation forms on Facebook and Instagram
- Click-to-WhatsApp advertisements
- Website inquiry and contact forms
- Phone calls, emails, and direct messages
- Cookies, Meta pixels, and similar tracking technologies
All Meta advertising data collection is carried out in accordance with Meta's Business Tools Terms and Data Use Policy.
Purpose of Data Processing
Personal data is collected and used only for clearly defined and lawful purposes, including:
- Responding to property inquiries and information requests
- Providing real estate consultation and customer support
- Sharing property listings, offers, and updates relevant to your interests
- Managing leads, internal reporting, and business operations
- Improving marketing effectiveness and ad performance
- Complying with applicable UAE and Indian legal requirements
Personal data will not be used for purposes incompatible with those stated above.
Marketing, Ads, and WhatsApp Communication
By submitting your contact details or interacting with our advertisements, you consent to being contacted via WhatsApp, phone calls, SMS, or email for property-related communication.
You may opt out of marketing communication at any time by replying "STOP", requesting removal, or contacting us directly. Opting out will not affect lawful processing already carried out.
Data Sharing and Disclosure
We do not sell or rent personal data.
Personal data may be shared only with:
- Authorized internal employees and teams on a need-to-know basis
- Trusted third-party service providers such as CRM platforms, marketing tools, analytics providers, and IT services
- Meta Platforms for advertising measurement, attribution, and lead delivery
- Government authorities or regulators where required by law
All third parties are contractually obligated to maintain confidentiality and comply with applicable data protection laws.
Cross-Border Data Transfers
Personal data may be processed or stored outside your country of residence, including outside India or the UAE, through cloud services or marketing platforms.
In such cases, we ensure appropriate safeguards are in place in accordance with UAE PDPL, India DPDP Act, and Meta's global data transfer mechanisms.
Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or to meet legal and regulatory obligations.
When data is no longer required, it is securely deleted, anonymized, or archived in accordance with applicable laws.
Data Security
We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure, including access controls and secure systems.
Your Rights
Subject to applicable laws, you have the right to:
- Access personal data held about you
- Request correction or updating of inaccurate data
- Request deletion of personal data, where legally permitted
- Withdraw consent for marketing or data processing
- Object to certain processing activities
Requests can be made using the contact details provided below and will be addressed within legally prescribed timelines.
Cookies and Tracking Technologies
Our website uses cookies, Meta pixels, and similar technologies to analyze traffic, personalize advertising, and measure campaign performance.
You may manage or disable cookies through your browser settings. Disabling cookies may affect certain website functionalities.
Policy Updates
This Privacy Policy may be updated periodically to reflect changes in law, regulations, or business practices. The latest version will always be available on our website with an updated effective date.