This Privacy Policy explains how Matthew Kimber (“Matthew Kimber”, “we”, “us” or “our”) collects, uses, shares and protects personal data when you use this website, request a report, submit an enquiry, contact us by WhatsApp or email, or interact with our advertising. We are committed to handling your information transparently and in accordance with applicable data protection law, including the EU General Data Protection Regulation (GDPR), the UK GDPR and the United Arab Emirates Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the UAE PDPL).

01

Who we are

Matthew Kimber is an independent Dubai real estate investment advisor providing educational research, market intelligence and advisory services to investors. For the purposes of data protection law, Matthew Kimber is the controller of the personal data described in this policy.

02

Information we collect

We collect personal data that you provide to us and data generated automatically when you use the website:

  • Enquiry and contact forms — your name, email address, phone or WhatsApp number, country of residence, and any details you choose to share about your investment goals, budget, timeline and interests.
  • Report downloads — the same contact details, together with the report requested, so that we can deliver it and follow up where you have asked us to.
  • WhatsApp enquiries — your WhatsApp profile name, number and the content of messages you send us.
  • Meta (Facebook and Instagram) Lead Ads — where you submit an instant form within Meta platforms, the contact details and answers you provide are shared with us by Meta.
  • Email communications — messages you send us and engagement data such as whether an email was delivered, opened or clicked.
  • Technical and usage data — IP address, device and browser type, referring pages, the pages you view, and identifiers set through cookies and similar technologies (see Section 06). This may include advertising click identifiers such as a Meta click identifier (fbclid) used to measure the performance of our campaigns.

We do not intentionally collect special categories of personal data, and we do not collect payment card details through this website.

03

How we use your information

We use personal data to:

  • deliver the reports, guides and information you request;
  • respond to your enquiries and provide advisory services;
  • send you relevant market updates and marketing communications where you have opted in, and manage your preferences;
  • operate, secure, maintain and improve the website;
  • measure and improve the performance of our marketing, including advertising on Meta platforms;
  • maintain our records and manage our relationship with you in our customer relationship management (CRM) system; and
  • comply with legal and regulatory obligations.
05

Cookies, analytics and advertising technologies

We use cookies and similar technologies to operate the website, understand how it is used, and measure our advertising. These fall into the following categories:

  • Essential — required for the website to function and to keep it secure.
  • Analytics — to understand how visitors use the website so that we can improve it. Where enabled, this may include Google Analytics.
  • Advertising and measurement — the Meta Pixel and Meta Conversions API, which allow us to measure the results of our advertising, understand which campaigns lead to enquiries, and reduce wasted spend. The Meta Conversions API may share limited event data (such as a hashed email address or telephone number, and an advertising click identifier) with Meta on a server-to-server basis to attribute enquiries to advertising. Data shared with Meta for measurement is minimised and, where feasible, hashed.

You can control cookies through your browser settings, and you can manage advertising preferences within your Meta and Google account settings. Blocking some cookies may affect how the website works.

06

Marketing communications and opt-out

Where you have opted in, we may send you market updates, investment research and related communications by email or WhatsApp. You may opt out at any time by using the unsubscribe link in any email, by replying with the word STOP, or by contacting us at invest@matthew-kimber.com. We will action opt-out requests promptly. Opting out of marketing does not affect communications that are necessary to respond to your enquiries.

07

Service providers and third parties

We share personal data with trusted service providers who process it on our behalf and under contract, only for the purposes described in this policy. These include:

  • Meta Platforms — advertising delivery and measurement (Lead Ads, the Meta Pixel and the Conversions API).
  • GoHighLevel — our customer relationship management (CRM) system, used to manage enquiries and communications.
  • Resend — email delivery for report delivery and communications.
  • Supabase — secure database hosting for enquiry and lead records.
  • Vercel — website hosting and delivery.
  • Google — website analytics, where enabled.

We do not sell your personal data. We may disclose data where required by law, to protect our rights, or in connection with a business transfer.

08

International data transfers

We operate from the United Arab Emirates, and our service providers may process data in the United States, the European Union, the United Kingdom and elsewhere. Where personal data is transferred across borders, we take steps to ensure an appropriate level of protection, including relying on adequacy decisions or standard contractual clauses where required by GDPR or UK GDPR, and on the transfer conditions set out in the UAE PDPL.

09

Data retention

We retain personal data only for as long as necessary for the purposes described in this policy. Enquiry and CRM records are generally retained for up to twenty-four (24) months after your last interaction with us, after which they are deleted or anonymised, unless we are required to retain them for longer to comply with a legal obligation or to establish, exercise or defend legal claims. You may request deletion sooner at any time (see Section 11 and our Data Deletion page).

10

Your rights

Subject to applicable law, you have the right to access, amend and delete your personal data. Depending on your location, your rights may include:

  • Access — to obtain a copy of the personal data we hold about you.
  • Rectification — to correct inaccurate or incomplete data.
  • Erasure — to request deletion of your data.
  • Restriction and objection — to restrict or object to certain processing, including direct marketing.
  • Portability — to receive your data in a portable format.
  • Withdraw consent — at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us at invest@matthew-kimber.com. We will respond within the time limits required by applicable law. If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office).

11

Data security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including access controls, encryption in transit, and reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12

Children

This website and our services are intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

13

United Arab Emirates considerations

As a business operating from the United Arab Emirates, we handle personal data in accordance with the UAE PDPL, including its principles on lawful and fair processing, data minimisation, security, and the rights of data subjects to access, correct and request deletion of their data. Where the UAE PDPL and other applicable laws both apply, we seek to meet the higher standard.

14

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. The date at the top of this page shows when it was last updated. Material changes will be reflected here, and we encourage you to review this page periodically.

15

Contact us

For any question about this policy or your personal data, or to exercise your rights, contact us at invest@matthew-kimber.com or on WhatsApp at +971 58 531 1405. See also our Data Deletion instructions and our Terms.