Privacy Policy

Last updated: 28 April 2026. This Privacy Policy explains how Mortgease collects, uses, shares, and protects your personal data when you use our website (mortgease.ae) or our mortgage advisory and pre-approval services. We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "UAE PDPL") and its executive regulations.

1. Who is the data controller

Mortgease is the data controller of the personal data described in this Policy. We determine the purposes and means of processing your personal data when you use our Platform, submit an enquiry, or complete an application.

Contact us at enquiries@mortgease.ae for any data-related question, or use the dedicated channels listed in clause 14 below.

2. What personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

2.1 Identity & contact data

• Full name, nationality, date of birth.
• Mobile number, email address, residential city/area.
• Emirates ID number, passport number, and visa status (collected only when you proceed to a formal pre-approval application).

2.2 Financial & employment data

• Employer, job title, monthly salary, additional income.
• Existing liabilities (credit cards, personal loans, other mortgages).
• Bank statements, salary certificates, and supporting documents you upload during pre-approval.

2.3 Property & mortgage data

• Whether you have identified a property, target purchase price, deposit available.
• Preferred tenor, fixed vs variable preference, salary-transfer preference.

2.4 Technical data

• IP address, browser type, device identifiers, pages visited, referrer URL.
• Calculator inputs and outputs (property value, downpayment, loan duration).
• Cookie identifiers (see clause 9).

2.5 Communications data

• Messages you send via WhatsApp, email, or contact form.
• Call records and notes from advisory conversations (calls may be recorded for quality and compliance — you will be notified at the start of any recorded call).

3. Why we collect it (purposes)

We use your personal data only for the following purposes:

• Service delivery: to assess your eligibility, prepare a comparison, facilitate your pre-approval, and submit your application to the bank you select.
• Communication: to respond to your enquiries, send pre-approval status updates, and provide advisory follow-up.
• Compliance: to meet our obligations under UAE Central Bank regulations, anti-money-laundering (AML) requirements, and other applicable law.
• Service improvement: to understand how the Platform is used and to improve our content, calculator, and rate ticker.
• Marketing (optional, with your consent): to send you newsletters, market briefs, or new product information. You can opt out at any time.

4. Lawful basis for processing

Under Article 5 of the UAE PDPL, we process your personal data on one or more of the following bases:

• Consent — you have given clear consent (e.g. by ticking "I agree" on a contact form, or replying to a marketing communication).
• Contractual necessity — processing is necessary to take steps at your request before entering into a contract (e.g. preparing a pre-approval application).
• Legal obligation — processing is required to comply with UAE law, including AML/KYC checks and Central Bank guidance.
• Legitimate interests — processing is necessary for our legitimate interests (e.g. fraud prevention, network security, internal quality monitoring), provided those interests are not overridden by your fundamental rights.

5. Who we share it with

We share your personal data only as follows:

• The Service Provider you select — when you instruct us to submit a pre-approval or full application, we share the application package with the bank or Islamic finance house you choose. The bank then processes your data under its own privacy notice.
• Trusted processors acting on our behalf — for example, our form provider (Web3Forms), email/SMS delivery providers, hosting provider (Hostinger), website analytics, and customer-relationship platforms. These processors are bound by contract to process data only on our instructions and to protect it to a standard at least equivalent to ours.
• Regulators & authorities — when we are required to do so by UAE law, by a competent court order, or by a regulatory authority (e.g. the Central Bank of the UAE, the UAE Data Office, or law enforcement).
• Professional advisers — our auditors, lawyers, and insurers, where strictly necessary and under confidentiality obligations.

We do not sell your personal data to anyone. We do not share your personal data with third parties for their own marketing purposes without your explicit consent.

6. How long we keep it

• Active enquiry / live application: for the duration of the application plus the period the bank requires to complete and disburse the mortgage.
• Completed mortgages: 10 years from the date the mortgage is fully discharged, in line with UAE Central Bank record-keeping guidance and applicable AML regulations.
• Lapsed enquiries (no follow-through): 24 months from your last interaction, after which records are deleted or anonymised.
• Marketing preferences: until you withdraw consent.
• Website analytics & cookies: as detailed in clause 9.

Where retention is required by law or to defend against potential legal claims, we may keep records for the longer of the legally required period or the limitation period under UAE law.

7. How we protect it

We implement appropriate technical and organisational measures to protect your personal data, including:

• HTTPS encryption in transit across the Platform.
• Access controls — only staff who need your data to deliver the service can access it.
• Encrypted storage of sensitive documents on our hosting infrastructure.
• Regular review of our security posture, vendor due diligence, and software updates.
• Incident-response procedures to identify, contain, and notify on data breaches.

While we work to protect your information, no transmission over the internet is completely secure. We cannot guarantee absolute security but we apply reasonable safeguards consistent with industry practice and UAE PDPL Article 20.

8. Your rights under the UAE PDPL

The UAE PDPL gives you the following rights in relation to your personal data:

• Right of access — to ask for a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct inaccurate or incomplete data.
• Right to erasure — to ask us to delete your data, subject to our legal retention obligations.
• Right to restrict processing — to ask us to limit how we use your data in certain circumstances.
• Right to portability — to receive your data in a structured, commonly used machine-readable format.
• Right to object — to object to processing carried out on the basis of legitimate interests, including direct marketing.
• Right to withdraw consent — where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of past processing.
• Right to lodge a complaint — with the UAE Data Office (u.ae) if you are unhappy with how we have handled your data.

To exercise any of these rights, email enquiries@mortgease.ae with the subject line "Data request". We will respond within 30 calendar days. We may need to verify your identity before disclosing or acting on personal data.

9. Cookies & tracking technologies

We use a small number of cookies and similar technologies on the Platform:

• Essential cookies — required for the Platform to function (e.g. session, security). These cannot be disabled.
• Analytics cookies — to understand how visitors use the Platform (e.g. which pages, which articles, calculator usage). Data is aggregated and does not identify individuals.
• Marketing & conversion cookies — when you submit a lead, we may fire a Google Ads conversion event so we know which campaigns are effective. No advertising network has access to your contact data.

You can control cookies through your browser settings. Disabling non-essential cookies will not prevent you from using the core Platform but may impact the personalisation we can provide.

10. International data transfers

Some of our service providers may process data outside the UAE (for example, our analytics or email delivery providers). When we transfer personal data outside the UAE, we do so only to jurisdictions that the UAE Data Office recognises as providing an adequate level of protection, or under contractual safeguards that ensure your data continues to be protected to UAE PDPL standards.

11. Data breach notification

In the unlikely event of a personal data breach that is likely to result in a high risk to your rights, we will notify you and the UAE Data Office without undue delay, in accordance with the timelines specified in the UAE PDPL executive regulations.

12. Children's privacy

Our services are intended for adults aged 21 and over. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, please contact us so we can delete it.

13. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or regulatory guidance. The "Last updated" date at the top of this page reflects the latest revision. Material changes will be communicated through a notice on the Platform.

14. Contact us

For any privacy-related question, request, or complaint:

• Email: enquiries@mortgease.ae (subject: "Data request")
• WhatsApp / phone: +971 50 112 8755
• Address: Level 41, Emirates Towers, Dubai, UAE, PO Box 31303

This Policy should be read alongside our Terms & Conditions.