Husam Al Bayya, acting as a private individual landlord.
Azizi Riviera 35, Meydan — Nad Al Sheba, Dubai, United Arab Emirates.
Questions about your data: info@hab-living.com
The tenancies are currently held in a private capacity. If a company is later established to operate them, that company takes over as the party responsible for your data; you will be told its name, and nothing else in this notice — the data we collect, the purposes, the processors, the retention periods — changes as a result.
Passport, passport entry stamp (if you have one), Emirates ID front and back, residence visa.
Full name, date of birth, nationality, sex as stated in your passport, passport number and its expiry date, Emirates ID number and its expiry date.
When you upload a photo of your passport or of the back of your Emirates ID, the machine-readable strip is read on your own phone or computer, inside your browser. Only this reading step happens on your device: no third party receives the picture in order to read it, and no separate document-scanning service is involved. The details it produces are shown to you before you submit, and they replace what you typed — your documents must match your tenancy contract. If the reading fails, nothing is lost: you simply fill the fields in yourself, exactly as before.
The documents themselves are uploaded and stored. Once you submit the form, the photos you uploaded are saved to your tenant record and later moved to our archive. Section 5 names the providers involved and section 6 says how long each item is kept.
E-mail, phone in your home country, phone in the UAE, WhatsApp number.
The name and phone number of the person you nominate. Please tell that person that you have given us their details.
The room you are renting, your agreed minimum period, your move-in date.
During onboarding we ask about your occupation, your interests and your habits at home — whether you cook, whether you keep late hours, how you feel about guests. You answer these questions because they shape who you end up living with; none of them is required in order to rent a room.
When you sign a document electronically, the page records the date and time, your IP address and your browser and device identification (user agent), together with the answer to the verification question you were asked. The same is recorded for a failed attempt, so that we can see whether someone else tried to open your document.
This is what makes an electronic signature provable: without it, a signature could be disputed and could not be attributed to anyone. It is kept with your tenancy contract (section 6) and is never used to track you across websites, to profile you, or for advertising.
| Purpose | Why we cannot skip it |
|---|---|
| Preparing and issuing your tenancy contract | The contract must name you correctly and quote a valid identity document |
| Registering you with the building / tower security | Access to the building is granted per named resident |
| Registrations required by Dubai authorities | Landlords are legally required to register tenancies and residents |
| Proving who signed your contract, and when | An electronic signature is only binding if it can be attributed — that is what the time, IP address and device identification are for |
| Reaching you during your stay | Maintenance appointments, rent reminders, building notices |
| Contacting someone if you are in an emergency | Only used in a genuine emergency |
| Putting compatible people in the same apartment | You are sharing a home with strangers; what you tell us about your routine is how we avoid pairing people who will not get along |
| Counting page visits | We measure how often our pages are opened, so we can tell a broken link from a page nobody needs. This counts visits, not people: no cookie is set, and nothing is stored that would let us recognise you on a later visit |
| Describing the household when we advertise a free room | Someone considering the room needs to know who they would be living with — see section 5 |
Two things, side by side:
Withdrawing your consent does not undo processing that already happened, and it does not remove records we are legally required to keep.
Your data is handled with the help of the service providers below. They act on our instructions and are not allowed to use your data for their own purposes.
| Provider | What it holds | Stored in |
|---|---|---|
| Formagrid Inc. (Airtable) | Your tenant record: name, contact details, document numbers, tenancy details, and your uploaded documents | United States |
| Apple Inc. (iCloud) | Archived documents once they are moved out of Airtable | United States, and other countries in which Apple operates data centres. Apple encrypts the content and does not publish a single storage location per account. |
| Fillout Inc. (Zite) | The form itself, and your uploads while they are in transit | United States |
| PandaDoc Inc. | Your tenancy contract and your electronic signature | United States |
| Resend (Plus Five Five, Inc.) | The e-mails we send you | Mail is sent from Ireland. The account data, delivery logs and e-mail metadata are held in the United States. |
| Cloudflare, Inc. | Runs the websites and forms you use, and stores the documents they produce — your signed tenancy documents and move-out papers, which carry your name, your passport number and your Emirates ID number. It also holds the sign-in that protects our own administration pages. | Cloudflare’s network is worldwide; the files are held in its object storage, for which no single country is guaranteed. Cloudflare is a United States company. |
| Google LLC (Maps) and CARTO (Investment Data Systems, S.L.) | Nothing you give us. They draw the map on our public website: when your browser loads that page, it fetches the map tiles from them, and in doing so your IP address and browser details reach them. This happens on the website only — never on the forms where you enter your details. | United States (Google) and Spain (CARTO). |
| Anthropic PBC (Claude) | Assists us in administering tenancies; may process your record in the course of that work | United States |
Transfers outside the UAE. As the table shows, your data is stored outside the United Arab Emirates — principally in the United States, and for outgoing mail in Ireland. Neither country has been the subject of an adequacy decision by the UAE Data Office. The transfer therefore rests on your consent, which you give by ticking the box before you submit, and on the contractual commitments each provider has given us to protect your data and process it only on our instructions.
These locations are the ones in force on the version date of this notice. If a provider moves your data to a different country, we update this notice and publish a new version.
We do not sell your data and we do not use it for advertising.
Beyond these providers we share your data only where we must: with the building management and tower security, with the relevant Dubai authorities, with the owner of the apartment where this is necessary — for example to register you, to arrange access, or if the owner is legally required to know who occupies the property — and, if a dispute arises, with our legal advisers.
When a room in your apartment becomes free, we advertise it on rental portals. The advertisement describes the people already living there, so that whoever applies knows what they are moving into: for example "three flatmates, late twenties to mid-thirties, working in engineering and marketing, quiet on weekdays, one cooks most evenings."
We never publish your name, your photograph, your contact details, your nationality or anything from your identity documents. But we should be straight with you about what this description is and is not. It is not truly anonymous: someone who already knows the apartment, or who later moves in, may well work out which description was yours. That is why we treat it as your data and not as an anonymous statistic — and why you can say no.
You can ask us at any time to leave you out of these descriptions, or to change how you are described. Write to the address in section 8; there is no disadvantage to you, and it has no effect on your tenancy.
We keep different things for different lengths of time. Everything below is counted from the day your tenancy ends.
| What | Kept for | Why |
|---|---|---|
| Your identity documents — passport, Emirates ID, visa, entry stamp — and the document numbers taken from them | 2 years | We only need them while you live here and for a short period afterwards |
| Your contact details and your emergency contact | 2 years | Late queries, deposit questions, forwarding of post |
| Your tenancy contract, its signature record, the move-in and move-out protocols, and the payment and accounting records for your tenancy | 7 years | Tax and accounting law in the UAE requires records of this kind to be kept for seven years |
| Records about the property itself, in which you may appear as a former occupant | 15 years | UAE tax law sets a longer period for records relating to real estate |
| What you told us about your interests and habits, and any description of the household built from it | Removed when you move out | Its only purpose is matching you with flatmates and describing the current household — once you leave, it has none |
Once a period ends we delete the material or make it permanently anonymous. If a dispute, claim or official investigation is running, the records it concerns are kept until that matter is closed, even if the period above has passed.
Access is limited to the people who administer tenancies.
Where your documents travel. Your uploaded documents are stored in your tenant record at Airtable. Periodically they are moved from there into our archive at iCloud, and the copy in the tenant record is removed — so a document normally exists in one of the two places, not both. Documents that we produce ourselves — your signed tenancy papers and your move-out papers — are additionally held at Cloudflare, in the storage that serves the download link we send you. They are removed from there after seven days; the lasting copy is the one in your record and in the archive. One exception, and we would rather name it than gloss over it: photographs and signatures uploaded to a handover protocol before 24 August 2026 sit in a separate short-term store at Cloudflare that we no longer write to. Those files expire on their own; the last of them on 18 February 2027. Everything uploaded since then follows the seven-day rule above. They are not passed to any system beyond the providers listed in section 5.
Reading the machine-readable strip of your documents happens on your own device and adds no further recipient.
You can, at any time:
Write to info@hab-living.com. We answer within 30 days.
If you withdraw consent or ask for deletion while your tenancy is running, be aware that we may no longer be able to keep the tenancy going — your identity documents are a legal requirement, not an optional extra.
This form is for adults. We do not knowingly collect data from anyone under 18.
If we change this notice — a new provider, a new purpose — we publish a new version and ask you again where the law requires it. The version you agreed to is recorded with your record, together with the date and time.