Skip to contentIWR/ v1.1Talk to Raj
Back to home
Legal

Privacy Policy

Plain-English. What I collect, why, who else sees it, how long I keep it, and how you remove it. PDPL (UAE) and GDPR-aligned.

Effective · 2026-05-24Last updated · 2026-05-24

1 · Who I am

Invest With Raj is the personal advisory practice of Raj Tomar, a real-estate consultant based in Dubai. This site (investwithraj.com) is operated personally by Raj, not by a company. For privacy matters, contact office@investwithraj.com.

2 · What I collect

The site collects two categories of information:

A. Information you give me directly

  • Lead form submissions— name, email, phone number, country code, and the mandate type you selected (Buying / Selling / Investing / Research / General). Submitted via the “Request the note” form.
  • Newsletter signups — email address only, via the inline subscribe field.
  • WhatsApp / email replies — anything you send me when responding to a note or follow-up.

B. Information collected automatically

  • IP address + browser metadata — captured by Vercel (the hosting provider) in standard server logs.
  • Analytics events — pageviews, scroll-depth, button clicks, and form-submission conversions captured by Google Analytics 4, Meta Pixel, LinkedIn Insight Tag, and Microsoft Clarity (when consented).
  • Cookies — small text files stored in your browser. See Section 5.

3 · Why I collect it

Three legitimate-interest purposes:

  • To deliver the investor note you requested — email + WhatsApp delivery of the 12-page PDF, plus any follow-up clarifying your mandate.
  • To send the weekly newsletter(“Beyond the Deal”) — only if you explicitly subscribed. You can unsubscribe in one click from any issue’s footer.
  • To improve the site — aggregated analytics tell me which notes investors care about, which pages convert, and where the site needs work.

I do notsell your data, rent your data, share it with brokerages or developers, or use it for purposes you didn’t consent to.

4 · Who processes it on my behalf

The site uses a small number of trusted third-party processors. Each is bound by their own privacy policy and their relevant data-protection laws.

  • Vercel — hosting + edge delivery + server logs. (vercel.com)
  • Cloudflare — DNS + CDN edge protection. (cloudflare.com)
  • Resend — transactional email (lead-form confirmations, note PDF delivery, double opt-in). Hosted in EU-West. (resend.com)
  • Listmonk + AWS SES — newsletter delivery (Beyond the Deal). Hosted on Hetzner (Germany) + AWS SES (US-East). (listmonk.app)
  • Google Analytics 4 — site analytics with IP anonymisation enabled. (analytics.google.com)
  • Meta Pixel — Facebook / Instagram ad audience signal (only if you consent).
  • LinkedIn Insight Tag — LinkedIn ad audience signal (only if you consent).
  • Microsoft Clarity — anonymised session replay (only if you consent).
  • Google Workspace — my inbox (office@investwithraj.com).
  • Meta WhatsApp Business — WhatsApp delivery of notes + follow-ups.
  • YouTube (Google LLC)— the “On Camera” section embeds my latest YouTube videos via YouTube’s public RSS feed. When you watch a video, YouTube’s own privacy policy applies. (google.com)
  • Instagram / Meta— the same section embeds my latest Instagram Reels via the Instagram Graph API. Embedded Instagram content is governed by Meta’s privacy policy. (instagram.com)
  • Cal.com — open-source booking widget embedded on the Engagement section. Cal.com receives your name + email + chosen time slot when you book a call. (cal.com)
  • ElevenLabs— voice cloning + text-to-speech for “The Dubai Read” podcast audio editions in my own voice. ElevenLabs processes audio generation server-side; no listener data is shared with them. (elevenlabs.io)
  • Sanity (when migrated) — headless CMS for Notes + Areas + content. Free tier. EU-hosted. Sanity receives no end-user data — only my editorial content. (sanity.io)

This list is updated when a new processor is added. The “Last updated” date at the top of this page reflects every change.

5 · Cookies and tracking technologies

The site uses cookies for two reasons:

  • Essential — keeping the site working (theme preference in localStorage, security tokens). These cannot be turned off.
  • Analytics + retargeting — Google Analytics 4, Meta Pixel, LinkedIn Insight, Microsoft Clarity. These fire only after explicit consent via the cookie banner. You can revoke consent at any time by clearing your browser cookies for this site or by emailing me.

You can also block cookies entirely via your browser settings — the site will still work, but the analytics signal goes dark for your session.

6 · How long I keep your data

  • Lead-form submissions — 24 months by default. Longer if you become an active mandate client (then governed by my professional record-keeping obligations as a real-estate consultant).
  • Newsletter subscribers— until you unsubscribe, then 12 additional months for suppression-list purposes (so I don’t accidentally email you again), after which the record is deleted.
  • Server logs (Vercel) — 30 days rolling.
  • Analytics data — GA4 default retention (14 months), Clarity (90 days), Meta / LinkedIn per their own policies.

7 · Your rights

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the right to:

  • Access — request a copy of the personal data I hold about you.
  • Rectify — correct inaccurate data.
  • Delete — request full erasure (right to be forgotten), subject to my legal record-keeping obligations.
  • Restrict + object — limit or object to further processing.
  • Portability — receive your data in a structured, machine-readable format.
  • Withdraw consent — for any consent-based processing (analytics, retargeting, newsletter), at any time.
  • Lodge a complaint— with the UAE Data Office or, if you’re an EU resident, your local supervisory authority.

To exercise any of these rights, email office@investwithraj.com with the word “Privacy” in the subject line. I respond within 30 days.

8 · International transfers

Some processors are based outside the UAE — Vercel (US), Listmonk-Hetzner (Germany), AWS SES (US), Resend (EU), Cloudflare (US). Each provides appropriate safeguards under their respective data-transfer frameworks. When you submit data through this site, you consent to those transfers.

9 · Children

This site is intended for adult investors and the content is not directed at children. I do not knowingly collect personal data from anyone under 18. If you believe a child has submitted data, email me and I’ll delete it.

10 · Changes to this policy

I update this page when a processor changes, a new feature collects new data, or the legal framework shifts. The “Last updated” date at the top reflects every change. Material changes (new data category, new processor) are notified to active subscribers via the next newsletter.

11 · Contact

For any privacy question, data-rights request, or general feedback on how the site handles information:

Back to home© 2026 Raj Tomar