ANAX DEVELOPMENTS L.L.C.

PRIVACY POLICY

Effective Date: [26-07-2026]

Last Updated: [26-07-2026]

 

1.     INTRODUCTION

ANAX Developments L.L.C. (”ANAX”, “we”,“our” or “us”) is committed to protecting and respecting yourprivacy.

This Privacy Policy explains how ANAXcollects, uses, stores, discloses, transfers and otherwise processes PersonalData relating to individuals who interact with us through our website, mobileapplications, sales centres, show apartments, project sites, customer servicechannels, social media platforms, events, marketing campaigns and any otherproducts or services provided by ANAX (collectively, the “Services”).

Protecting your Personal Data is an integralpart of our corporate governance framework. We recognise that privacy isfundamental to maintaining the trust of our customers, investors, brokers,suppliers, contractors, consultants, employees and other stakeholders.

This Privacy Policy has been prepared inaccordance with applicable data protection legislation, including, whereapplicable:

 

·       UAEFederal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data(PDPL);

·       itsExecutive Regulations;

·       otherapplicable UAE federal and emirate-level legislation;

·       applicableanti-money laundering legislation;

·       regulationsissued by the Dubai Land Department (DLD), the Real Estate Regulatory Agency(RERA), and other competent governmental authorities; and

·       anyother applicable privacy or data protection laws.

 

By accessing or using our Services, youacknowledge that your Personal Data may be processed as described in thisPrivacy Policy.

 

2.     WHO WE ARE

 

For the purposes of applicable data protectionlegislation, ANAX Developments L.L.C. is the primary DataController responsible for determining the purposes and means by whichPersonal Data is processed.

 

Where certain services are delivered jointlywith carefully selected third-party service providers, those providers willprocess Personal Data only in accordance with applicable law and appropriatecontractual safeguards.

 

3.     OUR PRIVACY COMMITMENT

 

ANAX is committed to processing Personal Datain accordance with the following principles:

  • lawfully, fairly and transparently;
  • only for specified and legitimate     purposes;
  • limited to what is necessary;
  • accurate and kept up to date;
  • retained only for as long as necessary;
  • protected using appropriate technical and     organisational security measures; and
  • processed in a manner that ensures     confidentiality, integrity and availability.

 

Privacy considerations are incorporated intoour business operations, technology systems and governance framework throughprivacy-by-design and privacy-by-default principles wherever appropriate.

4.     DEFINITIONS

For the purposes of this Privacy Policy:

“Applicable Laws” meansall applicable laws, regulations, governmental requirements and regulatoryguidance relating to privacy, data protection, cybersecurity, anti-moneylaundering, sanctions, real estate transactions and electronic communications.

“Controller” meansthe entity that determines the purposes and means of processing Personal Data.

“Processor” meansany person or organisation processing Personal Data on behalf of ANAX.

“Personal Data” meansany information relating to an identified or identifiable natural person,whether directly or indirectly.

“Sensitive Personal Data” includes any Personal Data requiringenhanced protection under applicable law, including biometric information,health information, financial information, government identificationinformation and other categories recognised by law.

“Processing” meansany operation performed on Personal Data including collection, recording,organisation, storage, adaptation, alteration, retrieval, consultation, use,disclosure, transmission, transfer, restriction, deletion or destruction.

“Services” meansall products, services, projects, websites, applications, sales centres, eventsand customer engagement channels operated by ANAX.

“Website” meansany website owned or operated by ANAX.

 

5.     SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to all PersonalData collected by ANAX through:

 

  • our website;
  • online enquiry forms;
  • customer accounts;
  • reservation forms;
  • expressions of interest;
  • property purchases;
  • sales centres;
  • show apartments;
  • project launches;
  • exhibitions;
  • marketing campaigns;
  • investor enquiries;
  • customer support;
  • social media interactions;
  • telephone calls;
  • email correspondence;
  • WhatsApp communications where used for     business purposes;
  • construction site access;
  • visitor registrations;
  • CCTV systems;
  • mobile applications;
  • recruitment activities;
  • supplier onboarding;
  • contractor engagement; and
  • any other interaction with ANAX.

 

This Privacy Policy applies regardless of thetechnology used to access our Services.

6.     PERSONAL DATA WE COLLECT

Depending on the nature of your relationshipwith ANAX, we may collect the following categories of Personal Data:

Identity Information

  • full name;
  • nationality;
  • passport details;
  • Emirates ID details;
  • visa information;
  • date of birth;
  • gender;
  • photographs;
  • signatures;
  • government-issued identification numbers.

Contact Information

  • residential address;
  • mailing address;
  • telephone number;
  • mobile number;
  • email address;
  • preferred communication language.

Property Transaction Information

  • reservation information;
  • property preferences;
  • unit selections;
  • purchase history;
  • payment schedules;
  • escrow-related information;
  • title deed information;
  • mortgage information;
  • financing information;
  • ownership information;
  • beneficiary details;
  • investment preferences.

Financial Information

  • bank account information;
  • payment history;
  • IBAN;
  • card information (processed through     secure payment providers);
  • invoices;
  • receipts;
  • financial standing where required.

Compliance Information

To comply with applicable legal and regulatoryobligations, ANAX may collect and process information required for:

  • Know Your Customer (KYC);
  • Customer Due Diligence (CDD);
  • Enhanced Due Diligence (EDD);
  • Anti-Money Laundering (AML);
  • Counter-Terrorist Financing (CTF);
  • sanctions screening;
  • politically exposed person (PEP)     screening;
  • source of funds verification;
  • source of wealth verification;
  • beneficial ownership verification;
  • fraud prevention;
  • identity verification;
  • regulatory reporting.

7.     HOW WE COLLECT PERSONAL DATA

ANAX may collect Personal Data directly fromyou, automatically through your use of our Services, and from authorised thirdparties.

Information You Provide

We collect Personal Data when you:

  • submit enquiries;
  • register interest in a development;
  • reserve or purchase a property;
  • complete customer onboarding;
  • request brochures;
  • subscribe to newsletters;
  • contact customer support;
  • communicate with us by email, telephone,     WhatsApp or social media;
  • register for events;
  • visit our offices, sales centres or show     apartments;
  • participate in surveys or promotional     activities;
  • submit employment applications;
  • register as a broker, supplier,     contractor or consultant.

Information Collected Automatically

When you access our Website or digitalplatforms, we may automatically collect:

  • IP address;
  • browser type and version;
  • operating system;
  • device identifiers;
  • language settings;
  • referring website;
  • pages visited;
  • clickstream data;
  • session duration;
  • approximate geographic location;
  • cookies and similar technologies;
  • diagnostic information;
  • security logs.

Information from Third Parties

We may obtain Personal Data from:

  • Dubai Land Department;
  • RERA;
  • government authorities;
  • banks;
  • mortgage providers;
  • payment processors;
  • brokers;
  • authorised sales agents;
  • business partners;
  • marketing partners;
  • sanctions screening providers;
  • credit reference agencies where     permitted;
  • publicly available sources;
  • identity verification providers;
  • fraud prevention providers;
  • analytics providers.

We only collect such information where legallypermitted and necessary for legitimate business or legal purposes.

8.     PURPOSES FOR WHICH WE PROCESS PERSONAL DATA

ANAX processes Personal Data only wherenecessary for legitimate business purposes or to comply with legal obligations.

These purposes include:

Customer Relationship Management

  • responding to enquiries;
  • arranging meetings;
  • managing customer relationships;
  • maintaining customer accounts;
  • providing customer support;
  • communicating regarding projects.

Property Sales

  • processing reservations;
  • issuing reservation forms;
  • preparing sale documentation;
  • managing SPA execution;
  • coordinating title registration;
  • processing handover;
  • customer after-sales services.

Property Management

Where applicable:

  • managing owners’ records;
  • facilitating community management;
  • coordinating maintenance;
  • communicating operational updates.

Compliance

ANAX processes Personal Data to comply with:

  • UAE laws;
  • PDPL;
  • AML legislation;
  • sanctions obligations;
  • DLD requirements;
  • RERA regulations;
  • escrow requirements;
  • beneficial ownership obligations;
  • fraud prevention obligations;
  • court orders;
  • regulatory investigations.

Identity Verification

Including:

  • KYC;
  • passport verification;
  • Emirates ID verification;
  • sanctions screening;
  • PEP screening;
  • fraud detection.

Marketing

Subject to applicable law, ANAX may usePersonal Data to:

  • send newsletters;
  • provide project updates;
  • invite individuals to launches and     events;
  • distribute brochures;
  • announce new developments;
  • provide investment opportunities;
  • conduct customer surveys.

Recipients may opt out at any time using theunsubscribe facility or by contacting ANAX.

Website Administration

Including:

  • website functionality;
  • analytics;
  • security;
  • troubleshooting;
  • fraud detection;
  • abuse prevention;
  • system administration.

Recruitment

Where applicable:

  • evaluating applications;
  • arranging interviews;
  • conducting background checks where     legally permissible;
  • onboarding successful candidates.

Supplier and Contractor Management

Including:

  • due diligence;
  • procurement;
  • contract administration;
  • payment processing;
  • project coordination.
       
       

9.     LEGAL BASIS FOR PROCESSING

Where required by applicable law, ANAXprocesses Personal Data on one or more of the following legal bases:

  • your consent;
  • performance of a contract;
  • compliance with legal obligations;
  • protection of vital interests;
  • performance of tasks carried out in the     public interest where applicable;
  • ANAX’s legitimate business interests,     provided such interests do not override your fundamental rights and     freedoms.

Where processing is based on consent, you maywithdraw that consent at any time, without affecting the lawfulness ofprocessing undertaken before withdrawal.

 

10.  ARTIFICIAL INTELLIGENCE AND AUTOMATEDTECHNOLOGIES

ANAX may use artificial intelligence, machinelearning and other automated technologies to improve the efficiency, qualityand security of its operations.

Such technologies may assist with:

  • customer support;
  • chatbot functionality;
  • document management;
  • fraud detection;
  • cybersecurity;
  • marketing optimisation;
  • website analytics;
  • operational efficiency;
  • quality assurance.

Where AI tools are used, appropriate humanoversight and governance measures are implemented.

 

ANAX does not make decisions producing legalor similarly significant effects solely through automated processing unlessauthorised by applicable law.

11.  COOKIES AND SIMILAR TECHNOLOGIES

ANAX uses cookies and similar technologies toimprove user experience, maintain website security and understand how visitorsinteract with our Website.

Cookies may be used for:

  • authentication;
  • security;
  • remembering user preferences;
  • website functionality;
  • analytics;
  • performance monitoring;
  • marketing effectiveness.

You may manage cookie preferences through yourbrowser settings or the cookie consent tools made available on our Website.

Further information regarding cookies isavailable in our separate Cookie Policy.

12.  MARKETING COMMUNICATIONS

Where permitted by law, ANAX may contact youregarding:

  • new developments;
  • project launches;
  • investment opportunities;
  • exhibitions;
  • events;
  • newsletters;
  • promotional campaigns;
  • surveys;
  • company announcements.

 

You may withdraw your marketing preferences atany time by:

  • clicking the unsubscribe link;
  • contacting ANAX;
  • updating your communication preferences.

Withdrawal from marketing communications doesnot affect service-related communications necessary to administer yourrelationship with ANAX.

13.  CCTV AND VISITOR MONITORING

For the safety and security of our customers,visitors, employees and assets, ANAX operates CCTV systems at selectedlocations, including:

  • offices;
  • sales centres;
  • show apartments;
  • project sites;
  • reception areas;
  • parking facilities.

 

CCTV recordings may be used for:

  • crime prevention;
  • fraud prevention;
  • health and safety;
  • security investigations;
  • legal proceedings;
  • regulatory compliance.

Recordings are retained only for as long asreasonably necessary or as required by law.

14.  DISCLOSURE OF PERSONAL DATA

ANAX treats Personal Data as confidential andwill not sell, rent or otherwise disclose Personal Data except where necessaryfor legitimate business purposes, to perform contractual obligations, to complywith applicable law, or with your consent where required.

 

Depending on the circumstances, ANAX maydisclose Personal Data to:

  • governmental authorities;
  • Dubai Land Department (DLD);
  • Real Estate Regulatory Agency (RERA);
  • courts and judicial authorities;
  • law enforcement agencies;
  • regulatory authorities;
  • escrow agents;
  • banks and financial institutions;
  • mortgage providers;
  • payment service providers;
  • external legal advisers;
  • auditors;
  • insurers;
  • consultants;
  • IT service providers;
  • cloud hosting providers;
  • cybersecurity providers;
  • customer relationship management (CRM)     providers;
  • marketing agencies;
  • brokers and authorised sales agents;
  • contractors;
  • consultants engaged in connection with a     development or transaction;
  • any other service provider engaged by     ANAX for legitimate business purposes.

All third parties processing Personal Data onbehalf of ANAX are required to implement appropriate confidentiality, securityand data protection measures.

15.  INTERNATIONAL TRANSFERS OF PERSONAL DATA

Given the international nature of ANAX’sbusiness operations, Personal Data may be transferred to, stored in or accessedfrom jurisdictions outside the United Arab Emirates.

Where such transfers occur, ANAX implementsappropriate safeguards to ensure that Personal Data continues to receive anadequate level of protection consistent with applicable law.

Such safeguards may include:

  • contractual data protection obligations;
  • confidentiality undertakings;
  • technical security controls;
  • restricted access measures;
  • encrypted transmission and storage;
  • organisational policies governing     international transfers.

ANAX will take reasonable steps to ensure thatrecipients process Personal Data only for authorised purposes and maintainappropriate standards of security and confidentiality.

16.  INFORMATION SECURITY

ANAX maintains a comprehensive informationsecurity programme designed to protect Personal Data against accidental orunlawful destruction, loss, alteration, unauthorised disclosure or unauthorisedaccess.

Our security measures may include:

  • encryption of data in transit and, where     appropriate, at rest;
  • multi-factor authentication;
  • role-based access controls;
  • least-privilege access management;
  • password management standards;
  • network security monitoring;
  • firewalls and intrusion detection     systems;
  • malware protection;
  • vulnerability assessments;
  • penetration testing;
  • security logging and audit trails;
  • secure backup and recovery procedures;
  • disaster recovery planning;
  • business continuity measures;
  • physical security controls;
  • secure disposal of information;
  • employee confidentiality obligations;
  • mandatory privacy and cybersecurity     awareness training.

 

While ANAX implements reasonable andappropriate technical and organisational measures, no method of transmissionover the internet or electronic storage can be guaranteed to be completelysecure. Accordingly, ANAX cannot guarantee absolute security but will continueto review and enhance its security controls in line with industry bestpractices.

 

17.  DATA RETENTION

ANAX retains Personal Data only for as long asnecessary to fulfil the purposes described in this Privacy Policy, to complywith legal and regulatory obligations, to resolve disputes, to enforcecontractual rights and to protect ANAX’s legitimate business interests.

Retention periods are determined by referenceto factors including:

  • applicable legal requirements;
  • contractual obligations;
  • limitation periods;
  • regulatory expectations;
  • ongoing litigation or investigations;
  • operational necessity;
  • business continuity requirements.

 

Where Personal Data is no longer required,ANAX will securely delete, anonymise or otherwise dispose of it in accordancewith its internal records management procedures.

18.  YOUR PRIVACY RIGHTS

Subject to applicable law, you may have theright to:

  • request confirmation that ANAX processes     your Personal Data;
  • request access to your Personal Data;
  • request correction of inaccurate or     incomplete Personal Data;
  • request deletion of Personal Data where     legally permissible;
  • request restriction of processing;
  • object to certain processing activities;
  • withdraw consent where processing is     based on consent;
  • request transfer of Personal Data where     applicable;
  • lodge a complaint with the competent     supervisory authority.

 

To protect your privacy, ANAX may requireverification of your identity before responding to any request.

ANAX may decline or limit requests wherepermitted by law, including where compliance would adversely affect the rightsof others, prejudice legal proceedings, compromise legal privilege, conflictwith regulatory obligations, or where requests are manifestly unfounded orexcessive.

19.  CHILDREN’S PRIVACY

ANAX does not knowingly collect Personal Datafrom children except where reasonably necessary in connection with propertyownership, family records, guardianship arrangements or other lawful purposes.

Where ANAX becomes aware that Personal Datarelating to a child has been collected contrary to applicable law, appropriatesteps will be taken to delete or otherwise appropriately manage suchinformation.

 

Parents or legal guardians who believe that achild has provided Personal Data may contact ANAX using the contact detailsprovided below.

20.  FRAUD PREVENTION AND WEBSITE SECURITY

ANAX continuously monitors its digitalplatforms and systems to protect against:

  • fraud;
  • identity theft;
  • cyberattacks;
  • malicious software;
  • denial-of-service attacks;
  • credential abuse;
  • unauthorised access;
  • automated scraping;
  • suspicious account activity;
  • misuse of the Website.

Where necessary, security logs and technicalinformation may be analysed to investigate incidents, maintain system integrityand comply with applicable legal obligations.

21.  LEGAL PROCEEDINGS AND LEGAL PRIVILEGE

ANAX may retain, review, disclose or otherwiseprocess Personal Data where reasonably necessary to:

  • establish, exercise or defend legal     claims;
  • obtain legal advice;
  • preserve legal professional privilege;
  • comply with court orders;
  • cooperate with governmental or regulatory     authorities;
  • investigate suspected misconduct, fraud     or criminal activity.

Nothing in this Privacy Policy limits ANAX’srights to process Personal Data where required or authorised by applicable law.

22.  BUSINESS TRANSFERS AND CORPORATE TRANSACTIONS

ANAX may disclose or transfer Personal Datawhere reasonably necessary in connection with:

  • the sale or acquisition of assets;
  • mergers;
  • acquisitions;
  • corporate reorganisations;
  • restructuring;
  • refinancing;
  • joint ventures;
  • strategic partnerships;
  • business transfers;
  • insolvency proceedings;
  • investment transactions; or
  • any transaction involving all or part of     ANAX’s business.

 

Where such a transaction occurs, ANAX willtake reasonable steps to ensure that any recipient continues to processPersonal Data in accordance with applicable law and appropriate confidentialityobligations.

23.  THIRD-PARTY WEBSITES

The Website may contain links to third-partywebsites, platforms or applications for your convenience.

ANAX does not control, endorse or assumeresponsibility for the privacy practices, security measures or content ofthird-party websites.

Accessing third-party websites is at your ownrisk, and you are encouraged to review their respective privacy policies beforeproviding any Personal Data.

24.  SOCIAL MEDIA

If you interact with ANAX through social mediaplatforms, including by following our accounts, submitting enquiries,participating in campaigns or communicating through social media messagingservices, ANAX may process the Personal Data you choose to provide.

Such processing remains subject to thisPrivacy Policy in addition to the privacy policies of the relevant social mediaplatform.

25.  INTERNAL DATA GOVERNANCE

ANAX maintains an internal privacy andinformation governance framework designed to ensure the responsible handling ofPersonal Data.

This framework may include:

  • internal privacy policies and procedures;
  • information security policies;
  • access management procedures;
  • records management standards;
  • employee confidentiality obligations;
  • mandatory privacy and cybersecurity     training;
  • vendor due diligence procedures;
  • incident response procedures;
  • breach management processes;
  • periodic compliance reviews;
  • internal audits; and
  • governance oversight by the Legal &     Compliance Department and senior management.

ANAX regularly reviews and updates itsinternal controls to reflect evolving legal requirements, technologicaldevelopments and industry best practices.

 

26.  CHANGES TO THIS PRIVACY POLICY

ANAX may amend this Privacy Policy from timeto time to reflect:

  • changes in applicable law;
  • regulatory guidance;
  • technological developments;
  • changes to our Services;
  • business operations; or
  • improvements to our privacy practices.

The updated version will be published on theWebsite together with the revised “Last Updated” date.

Where required by applicable law, ANAX willprovide appropriate notice of material changes.

Your continued use of the Services followingpublication of an updated Privacy Policy constitutes acknowledgement of therevised Privacy Policy, to the extent permitted by law.

27.  CONTACT US

If you have any questions regarding thisPrivacy Policy or wish to exercise your privacy rights, please contact:

Legal & Compliance Department
ANAX Developments L.L.C.

Email: privacy@anaxdevelopments.com (or such other dedicated privacyemail address as ANAX may designate)

Telephone: +971 4 358 3688

Address: Dubai, United Arab Emirates

 

ANAX may request reasonable information toverify your identity before responding to any privacy request.

28.  GOVERNING LAW

 

This Privacy Policy shall be governed by andconstrued in accordance with the laws of the United Arab Emirates and, whereapplicable, the laws and regulations of the Emirate of Dubai.

 

Nothing in this Privacy Policy limits anyrights or obligations arising under applicable mandatory laws.

29.  DISCLAIMER

This Privacy Policy is intended to explain howANAX processes Personal Data and should not be interpreted as creatingcontractual rights beyond those provided under applicable law or under anyseparate written agreement entered into with ANAX.

Nothing in this Privacy Policy limits ANAX’sright to process Personal Data where such processing is required or authorisedby applicable law, regulatory requirements, court orders or lawful governmentalrequests.

If any provision of this Privacy Policy isdetermined to be invalid, unlawful or unenforceable, the remaining provisionsshall continue in full force and effect.

30.  CONTACTING THE COMPETENT AUTHORITY

Where you believe that ANAX has not handledyour Personal Data in accordance with applicable law, you may have the right,subject to applicable legislation, to submit a complaint to the competentsupervisory authority responsible for personal data protection in the UnitedArab Emirates.

ANAX encourages individuals to contact theLegal & Compliance Department in the first instance so that we mayinvestigate and, where appropriate, resolve any concerns promptly and amicably.

FINAL STATEMENT

ANAX recognises that protecting Personal Datais fundamental to maintaining the confidence of its customers, investors,brokers, suppliers, contractors, consultants, employees and business partners.

Accordingly, ANAX is committed to maintainingrobust technical, organisational and administrative safeguards designed toensure that Personal Data is processed responsibly, securely, transparently andin accordance with the highest standards of legal and ethical compliance.