Your data. Your rules.

The short version

We collect only what's needed to help with your mortgage. Nothing is uploaded to any broker platform or lender without your explicit consent, recorded each time. We never sell your data. You can ask for a copy, a correction, or deletion at any time.

Who we are

Baraqa Mortgage FZE, Business Center, Sharjah Publishing City Free Zone, Sharjah, UAE ("Baraqa", "we"), is the data controller for personal data collected through https://www.baraqa.io. Contact: hello@baraqa.io. We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

What we collect

Identity & contact data: name, phone, email; and where you proceed with an application, Emirates ID, passport, visa.

Financial & employment data (only if you proceed): salary certificate, payslips, bank statements; for the self-employed, trade license, VAT returns and business bank statements.

Property & transaction documents (only if you proceed): MOU/MOA/SPA, developer information.

Technical data: basic analytics and logs. The calculators and eligibility checker on this site run in your browser — figures you enter there are not transmitted to us unless you submit a form.

Legal bases under the PDPL: your consent (contact forms, uploads to partners), performance of the service you requested (preparing and following your file), and compliance with legal obligations (KYC/AML, record-keeping).

Sharing — and the consent we must collect first

Mortgage applications are processed through a third-party licensed mortgage broker platform partner ("Broker Partner") and then submitted to UAE lenders.

Before Baraqa uploads or submits any of your personal data to a Broker Partner platform, we obtain your explicit consent. We store proof of that consent (timestamp and method — such as a website checkbox or WhatsApp message) as part of our compliance record.

We may also use service providers (hosting, CRM, storage, IT and security) bound by confidentiality, who may act only on our instructions; and we may disclose information to authorities where legally required.

We do not sell, rent, or trade your personal data to anyone, and we do not share it with third parties for their own marketing.

International transfers

Some service providers or broker systems may store or process data outside the UAE. Where that happens, we apply reasonable safeguards consistent with the PDPL's cross-border transfer requirements.

Retention

We keep personal data only as long as needed for the services, dispute handling, and compliance. Callback requests we could not reach are deleted within 12 months. Where a file proceeds to application, records are retained in line with UAE AML record-keeping obligations (typically 5 years after the relationship ends), then deleted or anonymized.

Security & incident notice

Data is held on access-controlled, encrypted infrastructure. If a data security incident occurs, Baraqa will take reasonable steps to contain it and will notify affected individuals and the regulator without undue delay, where required by applicable law.

Your rights (PDPL)

You may at any time request access to the data we hold about you, correction of inaccurate data, deletion, restriction of processing, or withdrawal of a consent you previously gave — free of charge, by writing to hello@baraqa.io. We respond within 30 days. If you believe your data has been mishandled, you may raise a complaint with the UAE Data Office.

Cookies

We use only what's needed to keep the site working and, if enabled, privacy-respecting analytics to understand usage. Language and theme preferences are stored on your own device. Marketing measurement runs only if explicitly enabled, and you can block cookies in your browser settings at any time.

Updates

We may update this policy from time to time; the effective date above changes when we do. Material changes will be flagged on this page.