Privacy Policy
Last updated: 8 August 2026
1. Controller
The controller responsible for the processing of personal data on this website (the “Site”) within the meaning of the EU General Data Protection Regulation (GDPR) is:
Arada CBD Investment — Independent information page
Arada Development
Muwaileh Commercial - Sharjah
Email: cbd@aradadubai.com
Project context: Arada CBD, Aljada, Sharjah — United Arab Emirates.
2. General information (GDPR / ePrivacy)
We process personal data only in accordance with the GDPR, the ePrivacy Directive and applicable national law. Personal data is any information relating to an identified or identifiable natural person. We process such data only when we have a valid legal basis (Art. 6(1) GDPR), in particular consent (lit. a), performance of a contract or pre-contractual steps (lit. b), legal obligation (lit. c) or our legitimate interests (lit. f).
3. Hosting
The Site is hosted on edge infrastructure provided by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) and the Lovable hosting platform. When you visit the Site, the hosting provider automatically processes technical access data (e.g. IP address, user-agent, timestamp) to deliver the page and to ensure stability and security of the service (Art. 6(1)(f) GDPR).
4. Cookies & consent
We use strictly necessary cookies and similar technologies that are required to operate the Site (Art. 6(1)(f) GDPR / § 25(2) TTDSG-equivalent provisions). All non-essential cookies and tracking technologies (analytics, marketing) are only loaded after you give your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG-equivalent provisions).
You can review and change your choice at any time via the link in the footer. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
5. Contact form / lead capture
When you submit the lead form on this Site, we process the data you provide (e.g. name, email, phone, message) in order to respond to your enquiry and to send you investment information about Arada CBD (Art. 6(1)(b) and (f) GDPR). Submissions are transmitted to our CRM provider (Bitrix24, Bitrix Inc.) for handling and follow-up.
6. Analytics tools
Subject to your consent, we use the following analytics tools to understand how visitors interact with the Site and to improve our content (Art. 6(1)(a) GDPR):
- Google Analytics 4 — provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland). IP addresses are truncated and processed pseudonymously.
- PostHog — product analytics, where enabled.
7. Marketing & conversion tracking
Subject to your consent, we use the following tools to measure the performance of advertising campaigns and to display relevant ads (Art. 6(1)(a) GDPR):
- Google Ads / Google Conversion Tracking — Google Ireland Ltd.
- Meta Pixel — Meta Platforms Ireland Ltd. (4 Grand Canal Square, Dublin 2, Ireland).
We use Google Consent Mode v2 to ensure these tools only set identifiers and cookies after you have given consent.
8. Recipients / processors
The following categories of recipients may process personal data on our behalf:
- Cloudflare, Inc. — hosting / CDN
- Lovable — hosting platform
- Supabase / database & authentication backend
- Bitrix24 — CRM / lead management
- Google Ireland Ltd. — analytics & advertising
- Meta Platforms Ireland Ltd. — advertising
- PostHog Inc. — product analytics (where enabled)
Where data is transferred to third countries (e.g. USA), we rely on appropriate safeguards under Art. 46 GDPR such as Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
9. Retention
We retain personal data only as long as necessary for the purposes set out above or as required by law. Lead enquiries are typically retained for the duration of the customer relationship and for statutory retention periods thereafter. Analytics and marketing data is retained according to the standard retention periods of the respective providers.
10. Your rights
Under the GDPR you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent at any time (Art. 7(3) GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
11. Privacy contact
For any privacy-related request, please contact us at cbd@aradadubai.com.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our processing activities or in legal requirements. The current version is always available at this URL.