Privacy Notice for Tenants

H.A.B. Living — Dubai · Version 2026-08-13 · UAE Federal Decree-Law No. 45 of 2021 (PDPL)

1Who is responsible for your data

Husam Al Bayya, acting as a private individual landlord.
Azizi Riviera 35, Meydan — Nad Al Sheba, Dubai, United Arab Emirates.

Questions about your data: info@hab-living.com

The tenancies are currently held in a private capacity. If a company is later established to operate them, that company takes over as the party responsible for your data; you will be told its name, and nothing else in this notice — the data we collect, the purposes, the processors, the retention periods — changes as a result.

2What we collect

Identity documents

Passport, passport entry stamp (if you have one), Emirates ID front and back, residence visa.

Personal details

Full name, date of birth, nationality, sex as stated in your passport, passport number and its expiry date, Emirates ID number and its expiry date.

How we obtain these details

When you upload a photo of your passport or of the back of your Emirates ID, the machine-readable strip is read on your own phone or computer, inside your browser. Only this reading step happens on your device: no third party receives the picture in order to read it, and no separate document-scanning service is involved. The details it produces are shown to you before you submit, and they replace what you typed — your documents must match your tenancy contract. If the reading fails, nothing is lost: you simply fill the fields in yourself, exactly as before.

The documents themselves are uploaded and stored. Once you submit the form, the photos you uploaded are saved to your tenant record and later moved to our archive. Section 5 names the providers involved and section 6 says how long each item is kept.

Contact details

E-mail, phone in your home country, phone in the UAE, WhatsApp number.

Emergency contact

The name and phone number of the person you nominate. Please tell that person that you have given us their details.

Tenancy details

The room you are renting, your agreed minimum period, your move-in date.

What you tell us about yourself

During onboarding we ask about your occupation, your interests and your habits at home — whether you cook, whether you keep late hours, how you feel about guests. You answer these questions because they shape who you end up living with; none of them is required in order to rent a room.

3Why we need it

PurposeWhy we cannot skip it
Preparing and issuing your tenancy contractThe contract must name you correctly and quote a valid identity document
Registering you with the building / tower securityAccess to the building is granted per named resident
Registrations required by Dubai authoritiesLandlords are legally required to register tenancies and residents
Reaching you during your stayMaintenance appointments, rent reminders, building notices
Contacting someone if you are in an emergencyOnly used in a genuine emergency
Putting compatible people in the same apartmentYou are sharing a home with strangers; what you tell us about your routine is how we avoid pairing people who will not get along
Describing the household when we advertise a free roomSomeone considering the room needs to know who they would be living with — see section 5

4What allows us to do this

Two things, side by side:

Withdrawing your consent does not undo processing that already happened, and it does not remove records we are legally required to keep.

5Where your data is stored and who else touches it

Your data is handled with the help of the service providers below. They act on our instructions and are not allowed to use your data for their own purposes.

ProviderWhat it holdsStored in
Formagrid Inc. (Airtable)Your tenant record: name, contact details, document numbers, tenancy details, and your uploaded documentsUnited States
Apple Inc. (iCloud)Archived documents once they are moved out of AirtableUnited States, and other countries in which Apple operates data centres. Apple encrypts the content and does not publish a single storage location per account.
Fillout Inc. (Zite)The form itself, and your uploads while they are in transitUnited States
PandaDoc Inc.Your tenancy contract and your electronic signatureUnited States
Resend (Plus Five Five, Inc.)The e-mails we send youMail is sent from Ireland. The account data, delivery logs and e-mail metadata are held in the United States.
Anthropic PBC (Claude)Assists us in administering tenancies; may process your record in the course of that workUnited States

Transfers outside the UAE. As the table shows, your data is stored outside the United Arab Emirates — principally in the United States, and for outgoing mail in Ireland. Neither country has been the subject of an adequacy decision by the UAE Data Office. The transfer therefore rests on your consent, which you give by ticking the box before you submit, and on the contractual commitments each provider has given us to protect your data and process it only on our instructions.

These locations are the ones in force on the version date of this notice. If a provider moves your data to a different country, we update this notice and publish a new version.

We do not sell your data and we do not use it for advertising.

Beyond these providers we share your data only where we must: with the building management and tower security, with the relevant Dubai authorities, with the owner of the apartment where this is necessary — for example to register you, to arrange access, or if the owner is legally required to know who occupies the property — and, if a dispute arises, with our legal advisers.

What appears in a room advertisement

When a room in your apartment becomes free, we advertise it on rental portals. The advertisement describes the people already living there, so that whoever applies knows what they are moving into: for example "three flatmates, late twenties to mid-thirties, working in engineering and marketing, quiet on weekdays, one cooks most evenings."

We never publish your name, your photograph, your contact details, your nationality or anything from your identity documents. But we should be straight with you about what this description is and is not. It is not truly anonymous: someone who already knows the apartment, or who later moves in, may well work out which description was yours. That is why we treat it as your data and not as an anonymous statistic — and why you can say no.

You can ask us at any time to leave you out of these descriptions, or to change how you are described. Write to the address in section 8; there is no disadvantage to you, and it has no effect on your tenancy.

6How long we keep it

We keep different things for different lengths of time. Everything below is counted from the day your tenancy ends.

WhatKept forWhy
Your identity documents — passport, Emirates ID, visa, entry stamp — and the document numbers taken from them 2 years We only need them while you live here and for a short period afterwards
Your contact details and your emergency contact 2 years Late queries, deposit questions, forwarding of post
Your tenancy contract, its signature record, the move-in and move-out protocols, and the payment and accounting records for your tenancy 7 years Tax and accounting law in the UAE requires records of this kind to be kept for seven years
Records about the property itself, in which you may appear as a former occupant 15 years UAE tax law sets a longer period for records relating to real estate
What you told us about your interests and habits, and any description of the household built from it Removed when you move out Its only purpose is matching you with flatmates and describing the current household — once you leave, it has none

Once a period ends we delete the material or make it permanently anonymous. If a dispute, claim or official investigation is running, the records it concerns are kept until that matter is closed, even if the period above has passed.

7How it is protected

Access is limited to the people who administer tenancies.

Where your documents travel. Your uploaded documents are stored in your tenant record at Airtable. Periodically they are moved from there into our archive at iCloud, and the copy in the tenant record is removed — so a document normally exists in one of the two places, not both. They are not passed to any system beyond the providers listed in section 5.

Reading the machine-readable strip of your documents happens on your own device and adds no further recipient.

8Your rights

You can, at any time:

Write to info@hab-living.com. We answer within 30 days.

If you withdraw consent or ask for deletion while your tenancy is running, be aware that we may no longer be able to keep the tenancy going — your identity documents are a legal requirement, not an optional extra.

9Children

This form is for adults. We do not knowingly collect data from anyone under 18.

10Changes

If we change this notice — a new provider, a new purpose — we publish a new version and ask you again where the law requires it. The version you agreed to is recorded with your record, together with the date and time.