Plan to Keys

Last updated 13 October 2026

Privacy and cookies

Plan to Keys is an independent guide to buying property in Dubai. We are not a broker. When you ask for a shortlist, we pass your request to one licensed partner broker in Dubai, who contacts you. This page explains what that involves, in plain language.

Who is responsible for your data

The controller is Plan to Keys. You can reach us at hello@plantokeys.com for anything on this page, including requests to see or delete your data.

What we collect

  • Your answers in the shortlist form: what the property is for, budget, timeline, country, and any launch or area you were looking at.
  • Your name, email address and WhatsApp number.
  • Your consent record: the time you ticked the box and the version of the wording you agreed to.
  • How you reached us: the page you sent the form from, the referring site, and campaign tags in the link you followed (for example utm parameters or a Meta click id).
  • Technical data sent by your browser with the form: IP address and browser type, used to prevent abuse and, if you accepted marketing cookies, to report the enquiry to Meta.

Why we use it, and on what legal basis

  • To pass your request to one licensed partner broker so they can contact you with options. Legal basis: your consent (GDPR Article 6(1)(a)).
  • To measure which adverts bring useful enquiries, if you accepted marketing cookies. Legal basis: your consent.
  • To keep the site secure and prevent spam. Legal basis: our legitimate interest in running a safe service (Article 6(1)(f)).

You can withdraw consent at any time by emailing us. This does not affect anything done before you withdrew it.

Who receives it

  • One RERA-licensed partner real estate broker in Dubai, United Arab Emirates, for your enquiry only. We name the partner in our first message to you.
  • Our hosting and automation providers, who process data on our instructions.
  • Meta Platforms Ireland Ltd, only if you accepted marketing cookies, to measure our adverts (email and phone are sent hashed, not in plain text).
  • Google Ireland Ltd (Google Analytics), only if you accepted all cookies, to count visits and see which pages and calculators are used. IP addresses are shortened and ad personalisation is switched off.

We never sell your data and we do not add you to newsletters.

Transfer outside Europe

The partner broker is in the United Arab Emirates, which the European Commission has not recognised as providing an adequate level of data protection. We transfer your details there because you explicitly ask us to, by ticking the consent box (GDPR Article 49(1)(a)). The risk is that UAE law gives you fewer enforceable rights than EU law. The partner is bound by a written agreement with us to use your data only for your enquiry and to delete it on request.

How long we keep it

Up to 24 months from your last contact with us or the partner, then it is deleted. If you ask us to delete it sooner, we do, and we ask the partner to do the same.

Your rights

Under the GDPR (and the UK GDPR) you can ask to access, correct or delete your data, restrict or object to its use, receive it in a portable format, and withdraw consent. Email hello@plantokeys.com. You can also complain to the data protection authority where you live, for example the ICO in the UK or your national authority in the EU.

Cookies

  • Essential: remembering your cookie choice (c25n_consent) and, in your browser only, the campaign that brought you here (c25n_attr_first, c25n_attr_last), so a request can be linked to the advert. These are needed for the site to work as intended.
  • Analytics and marketing, only with “Accept all”: Google Analytics (cookies _ga and _ga_*) to understand how the site is used, and the Meta Pixel (cookies such as _fbp and _fbc) to measure which adverts lead to enquiries.

You can change your choice at any time: .

Changes

If we change how we handle your data, we update this page and the date at the top.