Introduction
Steven Leckie (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website stevenleckie.com (the “Site”) or engage with our services.
Steven Leckie operates as an Associate Director at haus & haus Real Estate, Dubai, UAE. This policy complies with the EU General Data Protection Regulation (GDPR) and UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
Data Controller
For the purposes of applicable data protection laws, the data controller is:
Information We Collect
Information You Provide
We collect information you voluntarily provide when you:
- Fill out our contact or enquiry forms
- Download our guides or resources (e.g., Due Diligence Playbook)
- Book a consultation through our website
- Subscribe to our newsletter or updates
- Communicate with us via email or other channels
This information may include:
- Name and contact details (email, phone number)
- Country of residence
- Investment preferences and budget range
- Property interests and investment timeline
- Any other information you choose to share
Information Collected Automatically
When you visit our Site, we may automatically collect certain information about your device and usage patterns, including:
- IP address and approximate location
- Browser type and version
- Device type and operating system
- Pages visited and time spent on pages
- Referring website or source
We use Vercel Analytics for website performance monitoring, which collects anonymised usage data in compliance with privacy regulations.
Legal Basis for Processing
We process your personal data on the following legal grounds, as required by GDPR Article 6 and UAE Federal Decree-Law No. 45 of 2021:
- Consent: Where you have given clear consent for us to process your personal data for specific purposes (e.g., marketing communications).
- Contractual necessity: Processing necessary to fulfil our obligations or take steps at your request before entering into a contract (e.g., responding to property enquiries).
- Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services and website functionality, where these do not override your rights.
- Legal obligation: Processing necessary to comply with applicable laws and regulations.
How We Use Your Information
We use the information we collect to:
- Respond to your enquiries and provide requested services
- Send you the resources you've requested (guides, playbooks)
- Schedule and conduct consultations
- Send relevant market updates and investment opportunities (with your consent)
- Improve our website and services
- Comply with legal obligations under UAE and international law
Data Storage and Security
Your data is stored securely using industry-standard encryption and security measures. We use trusted third-party services including:
- Supabase — Secure database hosting for enquiry data
- Airtable — CRM and property management
- Vercel — Website hosting and analytics
- Calendly — Appointment scheduling
Data Retention
We retain your personal data as follows:
- Enquiry data: 3 years from your last interaction, or longer if required for ongoing business relationships or legal obligations.
- Marketing preferences: Until you withdraw consent or unsubscribe.
- Transaction records: As required by UAE law (typically 5 years for financial/property records).
- Analytics data: Anonymised and aggregated; no personal data retained.
Sharing Your Information
We do not sell your personal information. We may share your data with:
- haus & haus Real Estate — Our affiliated brokerage, to facilitate property transactions
- Service providers — Third parties who assist in operating our website and services (subject to data processing agreements)
- Legal requirements — When required by UAE law, court order, or to protect our legal rights
- Regulatory authorities — Dubai Land Department, RERA, or other bodies as required by law
Your Rights
Under GDPR (for EU residents) and UAE Federal Decree-Law No. 45 of 2021, you have the following rights:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your data where there is no compelling reason for continued processing.
- Right to restrict processing: Request limitation of processing in certain circumstances.
- Right to data portability: Receive your data in a structured, commonly used, machine-readable format.
- Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent: Withdraw consent at any time for processing based on consent.
To exercise any of these rights, please contact us using the details below. We will respond within 30 days (or one month for GDPR requests). We may request proof of identity before processing your request.
If you are dissatisfied with our handling of your data, you have the right to lodge a complaint with:
- UAE: The UAE Data Office or relevant regulatory authority
- EU: Your local supervisory authority (for EU residents)
Cookies
Our website uses essential cookies required for basic functionality. We use Vercel Analytics which does not require cookie consent as it collects only anonymised data.
Third-party services (such as embedded Calendly widgets or YouTube videos) may use their own cookies. Please refer to their respective privacy policies for more information.
International Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United Arab Emirates and the United States (where our service providers operate).
For transfers outside the UAE or EEA, we ensure appropriate safeguards including:
- Standard contractual clauses approved by relevant authorities
- Data processing agreements with all third-party processors
- Assessment of the data protection laws in the receiving country
Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the “Last updated” date. Material changes affecting your rights will be communicated via email where we have your contact details.
Contact Us
If you have any questions about this privacy policy, wish to exercise your rights, or have concerns about our data practices, please contact us:
We aim to respond to all enquiries within 30 days.
