Privacy Policy

1. Who we are

Cactus Landscaping & Pools is the trading name of CACTUSLAP CONTRACTING L.L.C, a company licensed in Dubai, United Arab Emirates (trade license no. 1241098), with its office in Business Bay, Dubai. We design and build outdoor spaces for private villas. For the purposes of the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, the “PDPL”), we are the controller of the personal data described in this policy.

This policy covers our website, cactuslap.ae, in both its English and Arabic versions, and the enquiries we receive through it and by phone, WhatsApp and email. It does not cover the websites we link to, such as Google, Instagram, Facebook, LinkedIn and WhatsApp, which have their own privacy policies.

2. What we collect

Information you give us. When you fill in the quote form, or the short form at the foot of our pages, we receive what you type: your name, phone number and email address, the community your villa is in, whether you are looking for design, construction or both, your budget range, the services you would like included, and anything you add in the free-text field. If you call us, message us on WhatsApp or email us, we receive your contact details and the content of your message.

Information collected automatically. When you visit, our security service, Cloudflare, processes technical information such as your IP address and the type of browser and device you use, to protect the site and its forms. If you accept analytics cookies (see section 4), Google Analytics also records the pages you view, how long you stay, and the website that referred you. None of this identifies you by name, and we do not try to match it to you.

Information we do not collect. We do not ask for or store payment details on the website, and we do not knowingly collect information from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

3. Why we use it, and the legal basis

We use the information you give us for one purpose: to respond to your enquiry. That means reviewing it, calling or messaging you back, arranging a visit to your villa, preparing a quotation and, if you decide to go ahead, delivering the project under a contract. We do not use your details for marketing, we do not add you to a mailing list, and we do not sell or share your information with anyone for their own purposes.

We use the technical information to keep the website secure and to stop spam and automated abuse of the forms. If you accept analytics cookies, we also use it to understand how visitors use the site so we can improve it.

Under the PDPL, we process your data on the following grounds: the steps needed before entering into a contract with you, when you ask us for a quotation; your consent, which you give when you choose Accept on the cookie notice; and our legal obligations as a licensed company in the UAE, including keeping business records and protecting the personal data we hold, which is why the website’s security services process technical information.

4. Cookies

Cookies are small files a website stores in your browser. Ours uses very few, and none of them are used for advertising.

Necessary cookies. Cloudflare, the service that protects the website from attacks and checks that a form is being submitted by a person and not a program, may set cookies it needs to do that. These work without your consent because the site would not function safely without them.

Analytics cookies. Google Analytics cookies are used only if you choose Accept on the notice shown on your first visit. Until you do, nothing is loaded from Google Analytics and no analytics cookies are set. If you choose Necessary only, none are set at all. These cookies hold a random identifier, never your name or personal details, and help us see, in aggregate, which pages are visited and how visitors move through the site.

Your choice is remembered in your browser’s local storage, not in a cookie, and is never sent to us. You can change your cookie choice at any time, including withdrawing your consent. Choosing Necessary only deletes the analytics cookies and stops any further data from being sent to Google Analytics.

5. Services we use

A small number of companies process data on our behalf so the website can run. Each is bound by its own privacy commitments and by our instructions, and none may use your data for its own purposes.

Our website is built, hosted and maintained by our web agency, FirstLayer, which has administrative access to the site to keep it running. Cloudflare provides security and performance services and the Turnstile check on our forms. Google Analytics provides visitor statistics for visitors who accept analytics cookies. ElasticEmail delivers the confirmation email you receive after submitting a form and the notification we receive. Sentry monitors the website for technical errors; if a page fails in your browser, a technical report (which may include your IP address) is sent so the fault can be fixed.

The Google reviews and Instagram posts shown on the site are fetched by our server and stored in our own cache. Displaying them does not send your data to Google or Meta. If you click through to those platforms, or to WhatsApp, Facebook or LinkedIn, you leave our website and their policies apply.

6. Where your data is kept

Enquiries submitted through the forms are stored in the website’s database and sent by email to Cactus. Some of the services we use, including our hosting, analytics and email delivery, run on servers outside the United Arab Emirates.

Where your data is processed outside the UAE, we use providers that apply recognized security standards and are bound by contractual protections, as the PDPL requires for transfers abroad.

7. How long we keep it

We keep enquiries for as long as we need them to deal with your request, and for up to 24 months after our last contact with you, so that we can pick up the conversation if you come back to us. After that they are deleted from the website’s database and from our mailbox.

If you become a client, the details of your project are kept for as long as UAE law requires us to keep business and tax records, which is generally seven years after the end of the tax year in which the contract was completed, or longer if a tax audit or dispute requires it. Analytics data is retained by Google Analytics for up to 14 months and is only ever viewed by us in aggregate.

8. How we protect it

The website is served over an encrypted connection (HTTPS), sits behind Cloudflare’s protection, and is kept up to date. Access to the website’s administration and to the mailbox that receives enquiries is limited to the people who need it to respond to you, and protected by individual accounts and passwords.

No method of storing or sending information is completely secure, and we cannot guarantee that unauthorized access will never occur. If we become aware of a breach that affects your personal data, we will inform you and the UAE Data Office as the PDPL requires.

9. Your rights

Under the PDPL you have the right to ask us what personal data we hold about you and to receive a copy of it; to have inaccurate data corrected; to have your data deleted when it is no longer needed for the purpose it was collected for; to restrict or object to how we use it; to receive the data you gave us in a usable electronic format; and to withdraw any consent you have given, without affecting anything done before you withdrew it. To withdraw your consent to analytics cookies, use the link in section 4 of this policy.

To use any of these rights, email info@cactuslap.com from the address you gave us, or call +971555237007. We may ask you to confirm your identity before we act, so that we do not release your information to someone else. We will respond within one month. If you are not satisfied with our response, you have the right to complain to the UAE Data Office.

10. Changes and how to reach us

We may update this policy when the website or the services behind it change. The date at the top of the page shows when it was last revised, and the version published here is always the current one. If a change affects how we use data you have already given us, we will tell you before it takes effect.

Questions about this policy, or about how we handle your information, can be sent to info@cactuslap.com or +971555237007.