1. Introduction

This Privacy Policy explains how Altieri Firm LLC, operating BuyerCheck at buyercheck.ae, collects, uses, stores, and protects personal data in connection with the Platform. We are committed to complying with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and applicable data protection obligations under UAE AML legislation.

2. Data We Collect

2.1 Account Data

When you register, we collect your name, email address, phone number, agency name, RERA ORN, and personal BRN number.

2.2 Buyer Screening Data

When you conduct a screening, we collect and process the following data about the buyer being screened:

• Full legal name, date of birth, nationality, and passport or Emirates ID number
• Property transaction details including type, amount, payment method, unit type, and emirate
• AML screening results including sanctions, PEP, law enforcement, and adverse media flags
• Source of funds information and intake assessment responses

2.3 Usage Data

We collect log data including IP addresses, browser type, pages visited, and actions taken within the Platform for security and analytics purposes.

2.4 Payment Data

Payment information is processed by Stripe and is not stored on BuyerCheck servers. We retain billing records including transaction amounts, dates, and plan information.

3. How We Use Your Data

We use personal data for the following purposes:

• Providing AML compliance screening services
• Generating Enhanced Due Diligence reports
• Supporting goAML regulatory filing obligations
• Account management and customer support
• Billing and subscription management
• Platform security and fraud prevention
• Analytics and service improvement
• Compliance with UAE AML and data protection laws

4. Legal Basis for Processing

We process personal data on the following legal bases:

• Performance of a contract — to provide the screening services you have subscribed to
• Legal obligation — to comply with UAE Federal Decree-Law No. 10 of 2025 and related AML regulations
• Legitimate interests — to maintain platform security, prevent fraud, and improve our services

5. Data Sharing

We share personal data only as necessary to deliver the Platform:

• Supabase — Database and infrastructure provider. Data is stored in the UAE region.
• Stripe — Payment processing. Subject to Stripe’s own privacy policy.
• Resend — Transactional email delivery.

We do not sell personal data to third parties. We do not share screening results with any party other than the subscribing professional who initiated the screening.

6. Data Retention

Buyer screening records, EDD reports, and audit logs are retained for a minimum of 7 years in compliance with UAE AML statutory record-keeping requirements under Federal Decree-Law No. 10 of 2025.

Account data is retained for the duration of your subscription and for 1 year following termination, after which it is securely deleted unless a longer period is required by law.

7. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include encrypted data transmission (TLS), encrypted storage, role-based access controls, and audit logging of all data access.

Data is stored on Supabase infrastructure in the UAE region to comply with UAE data localisation requirements.

8. Your Rights

Under the UAE Personal Data Protection Law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, subject to our legal retention obligations
• Object to processing of your data for direct marketing purposes
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Cookies and Analytics

The Platform uses cookies and analytics tools including Vercel Analytics and Google Analytics to understand usage patterns and improve the service. These tools collect aggregated, anonymised data about page visits and feature usage. You may disable cookies in your browser settings, though this may affect Platform functionality.

10. Children’s Privacy

The Platform is intended for licensed professionals and is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email. Continued use of the Platform following notice of changes constitutes acceptance of the revised Policy.

12. Contact

For privacy enquiries or to exercise your data rights, contact us at: [email protected]

Altieri Firm LLC
DMCC Business Centre
Unit No: 1446
Dubai, United Arab Emirates

For general support enquiries: [email protected]