Legal
Privacy Policy
luxoasisadvisory.com
Version 1.0 · Effective 1 September 2026
Permanent version URL: https://luxoasisadvisory.com/legal/privacy/v1.0/ This version is archived at that address and is never overwritten in place.
I.Who we are
Lux Oasis Advisory & Services LLC, a company registered in the Sharjah Free Zone (SHAMS), United Arab Emirates, licence number 2645909, TRN 104722180700003 ("we", "us", "our").
Contact for any privacy matter: info@luxoasisadvisory.com · WhatsApp +971 58 508 9283
II.What this policy covers, and what it does not
This policy is deliberately narrow. It covers two groups of people and nothing else:
- Visitors to this site, luxoasisadvisory.com.
- People who contact us, by email or by WhatsApp, after finding us through this site.
That is the whole of it, because that is the whole of what this site does. Nothing is sold here. There is no account, no login, no form that submits to a server of ours, no subscription and no payment mechanism. The only ways to contact us from this site are an email link and a WhatsApp link, both of which open your own email client or your own WhatsApp application.
This policy does not cover:
- personal data handled in the course of delivering any service. Each business line has its own privacy documents, on its own site, and those govern the data handled there. This policy does not extend to them and must not be read as though it did;
- guest personal data handled through Oasis Guest Lab, which is governed by that product's own privacy policy and data documents;
- anything done by Lux Oasis Holiday Homes, which is a separate company. See the Group Disclosure page;
- anything done by a third-party site you reach by following a link from here.
III.Our role: we are the controller, for both groups, and nothing else
For visitors to this site and for enquiry correspondence, we are the data controller. We decide what is collected, why, and for how long, and we answer to you for it directly.
No processor role arises on this site. We are not handling anyone's personal data on anyone else's instructions here, and we do not act as anyone's processor in connection with this site. We say this plainly because the position is different on Oasis Guest Lab, where personal data belonging to an operator's guests is handled on that operator's behalf and a different, product-specific analysis applies. Nothing in this policy should be read across to that product, and nothing in that product's documents should be read across to this one.
Because we are the controller here, requests about the data described in this policy come to us and are answered by us, in our own name, at info@luxoasisadvisory.com.
IV.What is collected when you visit this site
We set no cookies on this site and store nothing on your device. The Cookie Policy states this in full and evidences it.
Two things nevertheless happen when a page of this site loads, and you should know about both.
4.1 Your request reaches the server that hosts this site. Like any web server, it receives the technical information your browser sends in order for a page to be delivered at all: your IP address, the date and time of the request, the page requested, the referring page if your browser sends one, and your browser and operating system identifiers. Whether this information is written to a log, for how long, and by whom, depends on the hosting arrangement for this site.
[PLACEHOLDER: HOSTING PROVIDER AND SERVER LOG POSITION TO BE CONFIRMED.] The hosting provider for luxoasisadvisory.com, the location of its servers, whether access logs are retained, and for how long, are not settled facts in the material this policy was drafted from. This placeholder must be resolved before publication and the paragraph completed with the actual position. We are not stating a position we cannot evidence.
4.2 Your browser makes requests to two third parties. Rendering a page of this site causes your browser to make requests directly to:
- Google (
fonts.googleapis.comandfonts.gstatic.com), for the web font this site uses. Your browser discloses your IP address and browser information to Google in order to fetch the font files. - The PriceLabs RM Partners Directory (
pricelabs-rmpartners.directoryup.com), for the partner badge image displayed in the Foundations section, which is served from that directory rather than from this site. Your browser discloses your IP address and browser information to that host in order to fetch the image.
Neither request is something we can see or log. Both go straight from your browser to the third party, and what that third party then does with the information is governed by its own policies and not by ours. We list them because they are real requests to third parties that occur on page load, and a visitor is entitled to know that they happen. The Cookie Policy explains the position further and records our recommendation for removing both.
We run no analytics on this site. There is no Google Analytics, no tag manager, and no other measurement product of any kind. We do not build a profile of you, we do not track you across sites, and there is no advertising technology here.
V.What we collect when you contact us
If you write to info@luxoasisadvisory.com or message +971 58 508 9283, we receive and keep:
- your name, as you give it;
- your email address or your WhatsApp number, and any other contact details you choose to give;
- the content of your message and of our correspondence with you, including anything about your property, portfolio or business that you choose to put in it;
- the date and time of the exchange.
You choose what to send us. Please do not send us information we do not need, and in particular please do not send us identity documents, financial account details or anyone else's personal data in a first enquiry.
Note that a WhatsApp message travels over Meta's infrastructure before it reaches us, on the terms Meta applies to its own service. That part of the journey is between you and Meta. Once the message reaches us, this policy applies to it. If you would rather not use WhatsApp, email us.
VI.Why we use it
| Purpose | What we use |
|---|---|
| Answering your enquiry, and the exchange that follows from it | Your contact details and the content of your correspondence |
| Working out which business line, if any, is the right one for what you are asking about, and pointing you to it | The content of your correspondence |
| Keeping a record of what was said, so that we can pick up a conversation where it left off | The correspondence itself |
| Running and securing this site, and investigating misuse of it | The technical information described at 4.1, subject to the placeholder there |
| Meeting a legal or regulatory obligation, or establishing, exercising or defending a legal claim | Whatever is necessary for that purpose |
We do this because you have asked us to deal with your enquiry and because we have a legitimate interest in operating and securing our own site and in keeping a record of business correspondence. Where a request from you is itself a request for us to send you something, that is what we send you.
We do not:
- sell, rent or trade your personal data. Not to anyone, for any price;
- use it for third-party advertising, or share it with advertising networks;
- use it to train or improve AI models. If that ever changes it will be stated here first, in a new version, before any such use begins;
- add you to a marketing list because you made an enquiry. If we ever run one, joining it will be a separate, positive, opt-in step, and you will be able to leave it at any time.
Our services are not directed at children, and this site is not intended for them. We do not knowingly collect personal data from anyone under 18. If you think we hold data about a child, write to us and we will delete it.
VII.Who we share it with
We share enquiry data only where one of these applies:
- Within this company. The person who answers you, and any colleague in the relevant business line who needs to see your enquiry to answer it properly. All four business lines are lines of this same company, so passing an enquiry between them is internal handling, not a disclosure to a third party.
- Our email and messaging providers, because correspondence has to be carried and stored somewhere. [PLACEHOLDER: EMAIL PROVIDER TO BE NAMED.] The provider of the info@luxoasisadvisory.com mailbox is not evidenced in the material this policy was drafted from. It must be named here before publication, because a visitor cannot assess where their correspondence sits if we do not say who holds it. WhatsApp correspondence involves Meta, as described at section 5.
- Lux Oasis Holiday Homes, but only if your enquiry is about property management and you want us to introduce you. It is a separate company, so this is a disclosure to a third party and we will make it only with your agreement, at the point we make the introduction. See the Group Disclosure page.
- Professional advisers, such as lawyers and accountants, where we need advice on a matter your correspondence relates to.
- Authorities, where we are legally required to disclose.
Anyone we disclose to under this section is expected to keep the information confidential and to use it only for the purpose it was given for.
VIII.Where your data is held, and transfers out of the UAE
We work from the United Arab Emirates and enquiry correspondence is handled from here.
We are not going to make a general claim about where the data physically sits, because that depends on the two providers named as placeholders in sections 4.1 and 7, and until those are settled any such claim would be a guess. What we will say is this: if the hosting or mailbox provider stores data outside the UAE, then personal data described in this policy is transferred internationally, and that must be stated here accurately rather than described as an exception. Once the two placeholders are resolved, this section states the actual locations and the actual transfer basis relied on.
We note the point deliberately. It is easy to write "processing takes place primarily in the UAE" next to "hosted on EU infrastructure" and leave a reader with two answers. This policy will not do that.
IX.How long we keep it
| Category | Retention |
|---|---|
| Enquiry correspondence that does not lead to an engagement | 24 months from the last message in the exchange, then deleted |
| Enquiry correspondence that leads to an engagement | Retained under the retention terms of the service that engagement is contracted under, not under this policy |
| Correspondence needed for a legal claim, a dispute, or a legal or tax obligation | Kept for as long as that need lasts, and no longer |
| Server logs, if any are kept | [Follows from the placeholder at 4.1. To be completed.] |
You may ask us to delete your enquiry correspondence sooner, and we will unless one of the rows above requires us to keep it.
X.Your rights
You may ask us to:
- give you a copy of the personal data we hold about you;
- correct it, if it is wrong or incomplete;
- delete it;
- restrict what we do with it, or object to our using it;
- give you a copy in a portable form, where that is technically meaningful for the data in question.
Write to info@luxoasisadvisory.com. We aim to respond within 30 days. We may need to check that you are who you say you are before we act, and we will ask for no more than we need in order to do that. We do not charge for this.
If we cannot do what you ask, we will tell you why.
XI.Security
We keep the amount of personal data this site involves deliberately small, which is itself the most effective protection available: what is not collected cannot be lost. Access to enquiry correspondence is limited to the people who need it. Accounts used to handle correspondence are protected in line with the provider's available controls.
We are not going to make an absolute claim here. No system offers a guarantee of security, and any policy that says otherwise is overstating. Specific technical and organisational measures should be described here once the two provider placeholders are resolved, so that the description matches what is actually in place.
XII.Cookies
This site sets no cookies. The Cookie Policy sets out that position in full, evidences it, describes the two third-party requests referred to at section 4.2, and specifies what must happen if that ever changes.
XIII.What this policy does and does not assert about the law
We handle personal data in a way intended to be consistent with the principles that run through modern data protection law: collect only what is needed, use it only for the purpose it was given for, keep it no longer than necessary, keep it secure, and answer the person it belongs to.
We are not going to claim compliance with any particular statute in this document. Two reasons, both honest:
- UAE. The relevant UAE framework for personal data protection is Federal Decree-Law No. 45 of 2021. The executive regulations that would give parts of it practical effect, and the detail of what they require, are matters for UAE counsel to confirm as at the date this policy is published. This policy does not assert compliance with them and does not describe their content. That confirmation is on the Decisions Register and must be obtained before publication.
- Elsewhere. This site can be read from anywhere. Whether any other jurisdiction's data protection law applies to us in respect of this site is a legal question that has not been settled for this entity, and asserting the answer either way would be a claim we cannot support. The rights set out in section 10 are offered to everyone who asks, regardless of where they are, which is the more useful position in any event.
If either of those positions changes, this policy changes with it, in a new version.
XIV.Changes to this policy
We may change this policy. Each change produces a new version with its own version number, its own effective date and its own permanent URL. Previous versions stay reachable.
Where a change is material, we will say so at the top of the new version and, where we hold contact details for you and the change affects you, we will tell you by email.
XV.Language
These documents are written in English. English is the governing language. If they are translated, the English version prevails.
XVI.Contact
Lux Oasis Advisory & Services LLC Sharjah Free Zone (SHAMS), United Arab Emirates Licence number 2645909 · TRN 104722180700003 Email: info@luxoasisadvisory.com · WhatsApp: +971 58 508 9283
This document has been prepared for review and requires sign-off by a qualified UAE lawyer before publication. It is not legal advice.