Privacy notice

Last updated 17 October 2026 · pre-launch version

Who we are

Kayyal is operated by Homes of Substance Investment FZCO, a company licensed by the International Free Zone Authority (IFZA), Dubai, United Arab Emirates (licence no. 61603) ("Kayyal", "we"). We decide how and why the personal data described here is processed, so we are its controller under the UAE Personal Data Protection Law, Federal Decree-Law No. 45 of 2021 (PDPL).

Questions or requests about your data: sami@kayyal.ae.

The waitlist

What we collect: your name, WhatsApp number, email (optional), city, whether you are a homeowner, agent, developer, landlord, supplier or maker, your project type, your language and, if present, the campaign link you came from.

Why: to tell you about early access and the launch in your city, and to understand demand by city and project type.

Legal basis: your consent, given by ticking the box on the form (PDPL Articles 4 and 6). We record which version of the consent text you agreed to.

Supplier price sheets

What we collect: the business name, trades and emirates served, a contact name and (optionally) role, business email and phone, and optionally the website, Instagram handle and trade licence number, together with the prices and notes entered.

• Prices are used only anonymised and combined with other suppliers' prices, as ranges or statistics by trade and emirate. We never publish, sell or share an individual supplier's prices, and never show them under the business's name.
• Contact details are used to send the private quarterly price report, to manage the business's listing and benefits under the Supplier Terms and, only if the business ticked that box, to forward client quote requests matching its trade and area. They are not sold or shared with other suppliers.
• Legal basis: the consent given on the price sheet (PDPL Articles 4 and 6) and, for the listing and its benefits, performing the Supplier Terms the business accepts (PDPL Article 4).
• Sending a sheet never changes how Kayyal rates any quote.
• While you fill in the sheet, your answers are saved only in your own browser so you don't lose them. They reach us only when you press submit.

Quotes you upload (after launch)

Quotes are used to prepare your report. We only add a quote to our price database with your explicit consent, after removing names, phone numbers, addresses and contractor identities. We never send your quote or your details to a contractor without your permission.

Website data

Our website host processes your IP address and basic request data to deliver and secure the site. We do not use advertising cookies, analytics trackers or social media pixels.

What we never do

• Sell your personal data.
• Share a homeowner's details with contractors or suppliers without their permission.
• Let sponsors, paid listings or suppliers influence any score, range or ranking.

Who processes data for us

We use a small number of service providers, each bound by its data-processing terms and allowed to use the data only to provide its service to us:

• Supabase (database): your form data is stored in its Mumbai, India region.
• Cloudflare (website hosting, security, and forwarding of emails sent to @kayyal.ae addresses): a global network.
• Our email and WhatsApp providers, to send you the messages described above.

Transfers outside the UAE

Because our database is hosted in India and our website runs on a global network, your data is processed outside the UAE. No list of countries with an adequate level of protection has yet been issued under the PDPL, so we rely on our providers' contractual data-protection commitments (PDPL Article 23(1)(a)) and on the explicit consent you give on our forms (PDPL Article 23(1)(b)).

How long we keep it

• Waitlist: until 12 months after the service launches in your city, or sooner if you withdraw consent or ask us to delete it.
• Supplier contact details: while the listing is active and for 24 months after our last contact, unless you ask us to delete them sooner.
• Individual price submissions: up to 36 months, so we can check and refresh our ranges. After that, or when a business withdraws, they are left out of future updates. Aggregated statistics that cannot identify anyone may be kept.
• If you ask us to stop contacting you, we keep a minimal record of that request so that we don't contact you again.

Your rights

Under the PDPL you can, free of charge:

• get information about and a copy of the data we hold about you (Article 13), and receive it in a machine-readable format (Article 14);
• have it corrected or completed, or erased (Article 15);
• restrict or object to its processing, including for direct marketing (Articles 16 and 17);
• withdraw your consent at any time, as easily as you gave it (Article 6). This does not affect processing that took place before.

To use any of these rights, email sami@kayyal.ae or reply "STOP" to any WhatsApp message from us. We aim to reply within 30 days. If you think we have not handled your data lawfully, you can complain to the UAE Data Office (PDPL Article 24).

Security

Data is encrypted in transit. Our public forms can only add new entries: nobody can read, change or delete stored entries through the website. Access to stored data is limited to the Kayyal team members who need it.

Children and changes

Kayyal is not meant for anyone under 18. We will update this notice before the service launches; we will tell you about important changes by email or WhatsApp.