Privacy Policy

Who we are

ValuMap is operated by Claro for Valuation and Studies (“Claro”, “we”, “us”), a valuation and studies practice based at 3101 The Prime Tower, Business Bay, Dubai, United Arab Emirates.

If you have a question about this policy, or about the data we hold about you, write to us at info@clarodubai.ae or use the contact page on ValuMap.

Your account

When you create a ValuMap account we collect your first name, last name, email address, contact phone number, and the password you choose. Your password is stored only as a one-way hash: we never see it and we cannot recover it for you.

We keep a record of each device you are signed in on, so that signing in on one device does not sign you out on another and so that a single session can be ended on its own when you sign out or if the account is blocked.

We use your email address to confirm that the address is yours, to let you reset a forgotten password, and to confirm a change of email address. These are service messages: they are part of running your account and they are not marketing.

We use your contact phone number to identify your account and to reach you about a valuation request. It has to be unique across ValuMap accounts, so we check it against the phone numbers already registered.

When you submit the registration form we record that you accepted the versions of this Privacy Policy and of the Terms of Use that were published at that moment, together with the date and time. That record is our evidence of your acceptance.

Your valuation requests

When you send a valuation request we collect the details you give us about the property and the context of the request — for example the property type, where it is, and why you need the valuation.

We copy your name, email address, and contact phone number from your account onto the request, so that the team handling it can reach you.

Any file you attach is private. It is never published on ValuMap and it is never shown to other users. Attachments are scanned for malware before they are stored, and a file that fails the scan is rejected.

We send you operational email about a request, such as confirmation that we received it and notice when its status changes.

Members of our team who hold the Admin or ValueMapAdmin role can open your request and its attachments manually in order to handle it. That access is manual and limited to those roles. We do not sell request data and we do not share it for advertising.

Contact form, newsletter, and marketing

You can use the public contact form without an account. We collect the name, email address, phone number, and message you enter, and we use them to reply to you.

If you subscribe to the newsletter we collect your email address and use it to send the newsletter. Subscription is separate from registration, it is never ticked for you, and you can unsubscribe at any time.

Marketing consent is always optional and always separate from service messages. Withdrawing it stops the marketing, but it does not stop the messages we have to send in order to run your account and your requests, such as email verification, password recovery, or a request status update.

Why we use your data, purpose by purpose

We do not rely on one blanket consent for everything. Each purpose below stands on its own basis, and consent is used only where it is named.

• Creating and running your account, keeping you signed in on each device, and letting you recover access — because this is necessary to provide the service you asked us for.
• Handling a valuation request and contacting you about it — because this is necessary to take the steps you requested.
• Confirming your email address, limiting repeated failed sign-in attempts, and otherwise protecting accounts against unauthorised access — because we have a legitimate interest in keeping the service secure, and a duty to protect your data.
• Replying to a message you send through the contact form — because this is necessary to answer your own enquiry.
• Sending the newsletter or other marketing — only where you gave separate, optional consent, which you can withdraw at any time.
• Keeping the record of which policy versions you accepted, and keeping records we may need in order to establish, exercise, or defend a legal claim — because we have a legitimate interest in being able to show what was agreed.
• Meeting obligations under applicable law of the United Arab Emirates, including responding to a lawful request from a competent authority.

Who else can see your data

We do not sell your data. We share it only with the categories of recipient below, and only as far as each one needs in order to do its job for us.

• Hosting, storage, and content-delivery providers, which run the servers and hold the database, the files you attach, and the backups.
• Our email delivery provider, which sends verification, recovery, and operational messages on our behalf.
• Security and malware-scanning tooling, which checks the files you attach.
• Our professional advisers, including our authorized legal advisers, where we need advice or need to establish or defend a claim.
• A competent authority, where a lawful and binding request requires it.

Some of these providers may process or store data outside the United Arab Emirates. We are still reviewing the final list of providers and the transfer arrangements that apply to each of them, so treat the transfer details in this section as provisional; we will update this section when that review is complete.

How long we keep your data

We keep your account information, your valuation requests, and any files you attach indefinitely, including after an account is blocked or a request is completed or cancelled, while we operate this service. The service does not currently offer a way for you, or for our administrators, to delete this data, and we do not delete it automatically. Operational logs and backups are kept according to the retention settings of our hosting providers. If applicable law, or a decision by a competent authority or our authorized legal advisers, requires us to erase, restrict, or preserve specific data, we will carry that out manually. You can contact us about your data at info@clarodubai.ae.

Your rights over your data

You can ask us to:

• give you access to the personal data we hold about you;
• correct data that is wrong or out of date — you can also correct your own name and contact phone number from My Account;
• give you a copy, in a portable and machine-readable form, of the data you provided to us;
• restrict how we process specific data;
• object to a particular use, including any use that rests on our legitimate interest;
• withdraw a consent you gave us, such as your consent to the newsletter.

You can also ask us to erase your data. Because ValuMap has no self-service delete function and our administrators have no delete function, an erasure request is not carried out automatically. We escalate it manually to our authorized legal advisers, who decide whether erasure is required under applicable law, and we then carry that decision out by hand. We will tell you the outcome.

Send any of these requests to info@clarodubai.ae. We may ask you to confirm your identity first, so that we never disclose your data to somebody else. If our answer does not satisfy you, you can complain to the competent data protection authority in the United Arab Emirates.

How we protect your data

We store passwords only as one-way hashes, send data over encrypted connections, tie each sign-in session to the device that created it so it can be revoked on its own, limit repeated failed sign-in attempts, expire email verification and password-reset links after 30 minutes and allow each link to be used only once, and scan the files you attach for malware.

Inside Claro, access to account and request data is limited to team members whose role requires it.

No online service can promise perfect security. If a breach affects your personal data and the law requires us to tell you, we will. You can report a suspected security problem to info@clarodubai.ae.

Changes to this policy

Every version of this policy carries the version identifier shown at the top of this page, and we record the version you accepted when you registered. If we change the policy in a way that materially affects you we will publish the new version here and, where the law requires it, ask you to accept it again.

Arabic and English

This policy is published in Arabic and in English, and both versions describe the same practices. If you find a discrepancy between the two, tell us at info@clarodubai.ae and we will correct it.

How to reach us

Claro for Valuation and Studies, 3101 The Prime Tower, Business Bay, Dubai, United Arab Emirates. Email info@clarodubai.ae.