Privacy & Data Protection Policy

Introduction

Windmills Group
Website: www.windmillsgroup.com
Effective Date: 24 February 2026

1. Acceptance of Terms

Windmills Group (“Windmills”, “we”, “our”, or “us”) is committed to protecting the privacy and security of personal data.
This policy explains how we collect, use, process and safeguard personal data obtained through our website, professional services, communications and business relationships.

We comply with:
• UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection
• DIFC Data Protection Law where applicable
• ADGM Data Protection Regulations
• International privacy best practices.

2. Scope

This policy applies to clients, prospective clients, partners, vendors and website users.

3. Data Controller

Windmills Group acts as the Data Controller responsible for determining how personal data is processed.

4. Personal Data We Collect

Identification data: name, company, job title, email, phone.
Professional data: property details, valuation instructions, transaction information.
Communication data: emails, enquiries and correspondence.
Technical data: IP address, browser, cookies and analytics.

5. Sources of Data

Information may be obtained through direct contact, website forms, meetings, public sources and partners.

6. Legal Basis

We process personal data based on consent, contractual necessity, legal obligations and legitimate interests.

7. How We Use Data

• Providing valuation and advisory services
• Responding to enquiries
• Client relationship management
• Market reports and insights
• Compliance with legal obligations
• Improving our website and services

8. Sharing of Data

Data may be shared with employees, affiliates, professional advisers, service providers, banks and regulators.

9. International Transfers

Where personal data is transferred outside the UAE, appropriate safeguards are implemented.

10. Security

We maintain technical and organisational measures including secure systems, restricted access and internal policies.

11. Retention

Personal data is retained only as long as necessary for business and legal purposes.

12. Individual Rights

Individuals may request access, correction, deletion, restriction or withdrawal of consent.

13. Marketing

Users may opt out of marketing communications at any time.

14. Cookies

Our website uses cookies and analytics tools to improve user experience.

15. Third‑Party Links

External websites are governed by their own privacy policies.

16. Updates

This policy may be updated periodically.

17. Contact

Windmills Group
Website: www.windmillsgroup.com
Email: serviceteam@windmillsgroup.com