Your information.
A clearer picture.

This notice concerns the website presented under the Thumani brand. The legal identity of its operator and the applicable data-protection jurisdiction are awaiting confirmation. The preparation date is a draft date, rather than an approved effective date.

Registered legal company name

Registered address

Licence / registration number

For questions about this draft or your enquiry, contact Info@thumani.com. This address is the general team contact; no separate data-protection officer appointment is represented here.

You may choose to provide your name, email address, phone number, message, property preferences, budget, location and timeline. Owner and partnership briefs may include property or business information. A referral may include another person's name and contact details.

Share only what is needed for the initial conversation. Obtain the referred person's permission before sharing their details. If a later service needs identity documents, income records or other financial information, first confirm the recipient, purpose and sharing channel.

The contact form is connected to a server-side PHP handler. When deployed and configured, a submitted message can be processed by the website server and sent through the configured mail service. The handler's production recipient and mail setup still need confirmation.

The property-brief, partnership and referral tools prepare a message for your review and can open your email application. Preparing the draft does not send it to Thumani; you must send it yourself. Once sent, your email provider and the recipient's mail system handle that message. Copying or downloading a draft creates a copy under your control.

Calculator interfaces use the figures you enter to show planning estimates. Entering a figure is not the same as submitting a mortgage application. If you later copy those figures into an enquiry or send them to the team, they become part of that correspondence.

Any connected helper or AI service must be assessed separately before activation. This draft does not confirm a live AI provider, its retention settings or that conversations are sent to one. A connected feature should explain the information it sends and the provider involved before use. Do not put identity documents or unnecessary sensitive information into a general question box.

Enquiry information is intended to help understand your request, respond, organise follow-up and discuss the service you want. A later engagement may require information to provide the agreed service, keep relevant records or meet applicable obligations.

Each purpose needs an appropriate basis under the law that applies. A general enquiry is not blanket permission for marketing, lender submission or unrelated sharing. Any separate consent or authorisation should identify the purpose, recipient and relevant choices. The operator must confirm the actual purposes and legal bases before final publication.

Hosting, email and other technical providers can handle information as part of delivering their services. If you request help involving a lender, developer, adviser or another professional, the relevant information and recipient should be explained before an application or introduction is made.

Disclosure may also be required by applicable law or a competent authority. This draft does not confirm a list of contracted providers or establish permission to circulate your information to every lender or partner. The production notice must identify the actual recipient categories and the arrangements that apply.

The current templates load Google Fonts, and some pages contain external placeholder images and links to other services. Loading an external resource makes a request to that provider, which can receive technical information such as an IP address, request time and browser information. The information sent with the request depends on browser and website settings.

Hostinger has been identified as the intended hosting provider. The selected hosting location, server logs, email provider and any additional production services are not yet confirmed in this notice. External websites opened through links have their own privacy practices. The final notice should reflect the resources that remain after production polishing.

Cookies and browser storage can support functionality or tracking, depending on the scripts and hosting configuration. The presence of a calculator or downloadable checklist alone does not establish that a tracking cookie is used.

A complete production inventory of cookies, embedded services, analytics, advertising tags and storage is still required. This draft does not claim that the entire website is cookie-free or that a consent manager is active. If optional tracking is introduced, the site must provide the appropriate information and choices under the applicable rules. Browser controls can remove or limit cookies, but are not a substitute for the site's required choices.

Storage locations depend on the chosen hosting, mail systems and business processes. Providers or recipients may operate outside your country or the UAE. The applicable rules and any required safeguards must be assessed for the actual arrangements; this notice does not assert that every record stays in the UAE.

No fixed retention schedule has been confirmed. The operator must define how long enquiry, service, referral, technical-log and backup records are kept, why they are needed and how deletion is handled. Copies you save to your device or send through your own email system are also subject to your choices and provider settings.

The production service should use measures appropriate to the information and risks, including controlled access, suitable transmission and storage arrangements, and a process for responding to incidents. The actual measures and responsibilities must be confirmed before final publication.

This draft does not promise a particular certification, encryption setup or absolute security. Verify the recipient before sending sensitive files and ask which document channel is intended for your application. Any incident notification duties must be assessed under the applicable framework.

Contact Info@thumani.com to ask what information is connected with your enquiry or to point out an error. Depending on the applicable law and circumstances, rights may include access, correction, deletion, restrictions, objection, portability or withdrawal of consent.

Some requests may be subject to lawful exceptions, identity verification and information needed to locate the records. Do not attach identity documents to an initial request unless a verified process has been explained. No automatic deletion facility or fixed response deadline is represented in this draft; statutory obligations remain applicable.

Tell the team if your contact details or communication preferences change. If marketing communications are introduced, they should provide the applicable opt-out or consent controls. An enquiry does not by itself authorise every form of promotional communication.

Where processing is based on consent, you may ask to withdraw it subject to the applicable framework. This does not necessarily remove records needed for an existing service or a legal obligation. The team should explain the effect of the request on your enquiry or service.

Email the team with a description of the concern and the relevant correspondence. Ask for confirmation of receipt. If the concern involves an external provider, its own process may also be relevant.

You may use a competent data-protection or other authority where the applicable framework permits. The relevant regulator and jurisdiction must be confirmed with the operator's legal identity; contacting Thumani does not remove statutory rights or prevent an external complaint.

The website is intended for people researching property, financing or a business introduction. It is not intended as a service for children to submit personal or financial information. If information about a child has been sent unexpectedly, contact the team so the situation can be assessed.

A final notice should be updated when data practices or providers change, with an identifiable publication or effective date. Material changes may need additional notice or choices under applicable law. This review draft is dated 6 October 2026 and is not a statement that all listed operational arrangements have already been implemented.