Cookie Notice

Necessary cookies keep this site working. First-party visit analytics records visits in our own database. Optional Google Analytics and OpenAI advertising measurement have separate consent choices. Declining either does not affect your enquiry or access to the site.

When enabled, a separate choice lets you allow the OpenAI measurement pixel on public pages. Before you allow it, we do not load that SDK or read its advertising identifiers. Your choice is stored in ll_openai_ads_consent_v1 in local storage until you change it or clear browser storage.

After consent, the pixel uses __oppref for an ad click reference (30 days after it is written) and __obref for a browser reference (365 days after creation). Browser restrictions can shorten these periods. The pixel may detect supported contact details on the page and hash them in your browser for matching. Hashing does not make these data anonymous.

We send page views and successful Bay Estate, Marsa Al Saadiyat and Wadeem Gardens enquiries. Our server also sends the successful enquiry with the same event ID so it is counted once, including hashed email and phone details and consented ad/browser references. We do not assign a property price to an enquiry, send enquiry messages, or count WhatsApp link clicks as leads. Server delivery can retry for up to seven days for an enquiry consented to when submitted.

Use the control below to stop future measurement from this browser. Withdrawal instructs the pixel to stop sending and clear its two cookies; it does not undo events already collected with consent. For requests concerning earlier data, see our data rights page.

The Marsa Al Saadiyat, Wadeem Gardens and Bay Estate forms do not set Meta advertising cookies or load a Meta pixel. If you choose the separate advertising-measurement checkbox, the form may read an existing _fbc or _fbp identifier and the campaign information in your current link. These identifiers and enquiry outcomes can then be shared through Treasury CRM as described in our Privacy Policy. Leaving the checkbox empty prevents this transfer for that submission and does not affect your enquiry. The choice is not stored in a browser cookie or local storage.

These exist so the site can do the thing you asked it to do. They cannot be switched off from within the site, because without them signing in does not work.

The session and CSRF cookies are HTTP-only, so page scripts cannot read them, and are marked secure and same-site over HTTPS.

These only ever appear because you clicked something. Each one stores a single short value, no identifier, and nothing that identifies you personally.

Two things are kept in your own browser and never sent to our servers at all. Clearing site data in your browser removes them.

One cookie gives this site its own visit statistics. It holds a random identifier and nothing else: no name, no email address, no account number, nothing read off you or your device.

Against that identifier we record which pages were viewed and when, what kind of page each one was, the site you arrived from, and any campaign tags in the link you followed. It is stored in our own database, on our own infrastructure. No advertising pixel and no advertising tracker is needed. With the required property-access activity agreement enabled on a verified client account, future eligible activity is also shared with your Luxury Located adviser in Treasury CRM. The visitor cookie itself is not transferred.

Our hosting provider, Vercel, also counts page views for us. Its script is served from this domain, sets no cookie, stores nothing on your device and keeps no identifier that could follow you to another site or another visit. Page views are counted; people are not.

Submitting a form does not attach previous anonymous visits to your identity. Named activity sharing requires a verified client account, an active sign-in and your explicit agreement, which is required for full property details and documents. Signing in, signing out or changing this choice rotates the visitor identifier. You can withdraw activity sharing at any time in My account. Full property details and documents then become locked; public previews, your account and existing enquiries remain available.

Anonymous visits have a 180-day retention target; automated enforcement is pending retention review. A visit linked to you is kept with your enquiry and deleted with it, so a deletion request at Your Data Rights takes the timeline too. To stop it without asking us, block or delete cookies for this domain in your browser.

The site contains the wiring for Google Analytics 4, but it only loads if a measurement ID is configured for the environment. When it is switched off, no Google tag is loaded and no analytics cookie is set. That is the current state of the published code.

No measurement ID is configured on the production environment, so as this is written no Google tag is requested and no analytics cookie exists on this site. You can confirm it yourself: view source on any page and search for gtag.

If analytics is ever switched on, Google Analytics sets its own cookies, typically _ga and _ga_<id>, lasting up to two years, and Google acts as our analytics processor. Those are non-essential cookies, so they are behind a consent gate that is enforced in the code, not merely promised: the analytics tag is wrapped in a component that renders nothing until you choose Allow, and the choice is remembered in your browser's local storage under ll_analytics_consent_v1. Declining, or never answering, means the tag is never requested at all. The banner cannot appear while analytics is switched off, because there would be nothing to consent to.

Your answer on this browser

The privacy policy says this consent is withdrawable in one click, so here is the click. The block below reads the same storage key the banner writes, so it reports what your browser actually holds rather than what we assume it holds, and changing it takes effect on the spot in every open tab.

A few parts of the site load content from someone else's server. Loading anything from another server necessarily discloses your IP address and browser to it, whether or not a cookie is involved.

• Cloudflare Turnstile, on the contact form, the registration form and the concierge. It is a bot check: it decides whether the sender is a human. Cloudflare may set its own storage on its domain. This is a security measure, not tracking, and the forms will not submit without it when it is enabled.
• CARTO basemap tiles, on property maps. Map images are fetched from CARTO's CDN when a map is on screen. No cookie of ours is involved.
• Google Drive and Cloudflare R2, when you download a brochure or load a photograph. These are file hosts serving a file we asked them to serve.

Typefaces are self-hosted from our own domain, so no font request goes to a third party.

Every browser lets you see, block and delete cookies for a site, usually under privacy or site settings. Blocking the strictly necessary ones will stop you signing in; blocking the preference ones just means the site forgets your language, currency and area unit each visit. Nothing else on the site depends on them.

What we do with the data behind all of this is in the Privacy Policy, and you can exercise your rights over it at Your Data Rights.