Legal
Privacy policy
This website collects nothing about you on its own. Personal data reaches us only when you choose to send it — by e-mail, through the enquiry form, or in a conversation with the assistant — and this policy explains what happens to it then.
Last updated 8 October 2026
1. Who is responsible
Global Cities Development Limited is responsible for the personal data described in this policy. Our corporate particulars, including our registered office and registration number, are published on the About page. Enquiries about this policy and requests concerning your personal data go to legal@globalcities.ae.
2. No cookies, no trackers, no accounts
The site is a set of static pages. It sets no cookies and carries no analytics, advertising, social or tag-management scripts. No part of a page is loaded from a third party: fonts, images and scripts are served from this domain only, so visiting a page does not reveal your visit to anyone else. There is no newsletter and no account, and there is no consent banner because there is nothing to consent to.
One thing is kept in your browser, and only if you use the assistant: the text of your conversation is held in the browser's session storage so that it survives moving from one page of this site to another. That storage belongs to the browser tab. It is not a cookie, it does not identify you, it is not read by anyone else, and it is emptied when you end the conversation or close the tab.
3. Technical data: server logs
Delivering a web page requires your browser to make a request, and the server that answers it necessarily sees that request. The web server that serves this site, and the hosting provider on whose infrastructure it runs, may therefore process standard technical data — such as the IP address the request came from, the page requested, the time, and the browser's user-agent string — in order to serve the site and to protect it against attack and abuse. We do not use that data to build profiles, we do not combine it with anything else, and it is not used for marketing.
The service that receives the enquiry form and the assistant's conversations also records, for each request it handles, the network address the request came from, the time and the outcome — accepted, refused or failed — in a server log kept for a short period for abuse prevention. That log is rotated and overwritten, is not used for anything else, and does not contain the text of a message or a conversation. The same service counts requests per network address for a short period, in memory, so that it can refuse floods of them.
4. The enquiry form
The form on the Contact page asks for your name, your organisation and its type, your e-mail address, your message, and your confirmation that you have read this policy. We do not ask for a telephone number. When you submit the form, those fields are sent by e-mail to Global Cities Development Limited, together with the time, the page of this site the form was sent from and, if a content-delivery provider in front of our server supplies it, the country your network address resolves to. Your network address itself is not included in the e-mail. The website and the service that relays the form keep no copy once the e-mail has been sent: there is no database of enquiries. From that point the enquiry is handled like any other e-mail, as described in section 6.
5. The assistant
The assistant is an automated system that answers questions from the published content of this site. It is not a person, it does not speak for the company, and nothing it says is an offer, a commitment or a confirmation of any approval, concession or agreement. If you need an answer you can rely on, write to us.
What you type is sent to our server, which uses a language-model service operated by a third-party provider, acting on our instructions, to generate the reply. That provider receives the text of the conversation for that purpose and for no other. The conversation is held on our server while it is going on, and is then sent to Global Cities Development Limited by e-mail so that a person can follow up — when you end it, when you leave the site, or after a period of inactivity. That e-mail contains the conversation, the time it started and ended, the pages of this site on which you used the assistant and, if a content-delivery provider in front of our server supplies it, the country your network address resolves to; your network address itself is not included. Once sent, the conversation is deleted from the server. Please do not enter sensitive personal data, identity documents or confidential material into the assistant.
6. When you write to us
Whether you e-mail us directly, use the form or talk to the assistant, what we receive is what you chose to send: your e-mail address, your name and organisation if you give them, and the content of your message and any attachments. We use it to answer you, to deal with the matter you raised, and to keep a record of our correspondence — including, where a message concerns a transaction or a legal notice, because we are expected to be able to show what was said.
Where a counterparty asks us for due diligence material, or where we carry out the counterparty screening described under governance and integrity, that process may involve personal data about directors, shareholders and beneficial owners. We use such data for verification and compliance purposes only.
We keep correspondence for as long as it is needed for the matter it concerns and for as long as we are required to keep records, and then we delete it. Please do not send us sensitive personal data, identity documents or confidential material unless we have asked you for them.
7. Who else sees it
We do not sell personal data and we do not share it for anyone else's marketing. Your message is handled by the people in our organisation who need to deal with it. It may also be processed by the providers who operate our e-mail and document systems on our instructions and, for the assistant, by the language-model provider described in section 5; and it may be disclosed to our professional advisers, or to a court or authority, where we are legally required or entitled to do so.
In addition to e-mail, we may receive a copy of enquiries and of assistant conversations through a messaging service (Telegram), delivered to a private channel used only by the people in our organisation who deal with them. Where that channel is in use, the operator of the messaging service processes the content in order to deliver it, and may do so outside the United Arab Emirates and the European Union.
We work across jurisdictions, and the providers we use may be located outside the United Arab Emirates, so personal data in correspondence may be processed in more than one country. Where we pass personal data to a service provider, we require it to be protected to a standard consistent with this policy.
8. Your rights
Subject to the law that applies to you and to us, you can ask us to tell you what personal data of yours we hold, to correct it if it is wrong, to delete it, or to stop using it for a particular purpose. You can also object to our use of it or ask us to restrict that use.
Write to legal@globalcities.ae and say what you are asking for. We will confirm that we have received your request, deal with it within a reasonable period, and tell you if there is a legal reason we cannot do what you ask. We may need to verify who you are before we act. We do not charge for this.
9. Data protection law
Which law applies depends on where you are and what the processing concerns. Two regimes are relevant in general terms to how we work.
- South Africa — POPIA. The Protection of Personal Information Act may apply where we process personal information in connection with activity in South Africa, including our Clear City programme. POPIA gives data subjects rights of access, correction and deletion, and provides for complaints to the Information Regulator of South Africa.
- European Union and United Kingdom — GDPR. The General Data Protection Regulation, and its United Kingdom equivalent, may apply where we process the personal data of people in those territories. Where it does, our lawful bases are normally our legitimate interests in corresponding with you and in running our business, the performance of a contract, and compliance with a legal obligation. Data subjects there have the rights set out in section 8 above and may complain to their national supervisory authority.
This section is a general description, not legal advice, and it does not extend any right beyond what the applicable law gives you.
10. Changes
We may update this policy — for example if we change how we handle correspondence, or if the site itself changes. The current version is always the one published here, with the date of its last revision at the top of the page.