Privacy Policy

Last updated: April 28, 2026

Citadela Circle ("we", "our", or "us") operates the Citadela Circle platform at circle.citadela.ae. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform.

By applying for membership or using Citadela Circle, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

  • Username, email address, and password
  • Referral information (if provided)

Profile Information

  • Display name, biography, and country of residence
  • Profile photograph and gallery images
  • For professionals: category, tagline, website, and service description

User-Generated Content

  • Community feed posts (stories, questions, recommendations, marketplace listings)
  • Comments and replies on posts
  • Private messages between members
  • Professional messages between members and professionals
  • Concierge service messages

Application Data

  • Information submitted during the membership application process
  • Video call scheduling and verification data

Technical Data

  • IP address, browser type, and device information (collected automatically by our servers)
  • Login timestamps and session data

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Citadela Circle platform
  • Process and review membership applications
  • Facilitate messaging between members and professionals
  • Send email notifications related to your account activity (new messages, replies, application updates)
  • Provide concierge support services
  • Moderate content and enforce our community standards
  • Improve and develop our platform
  • Communicate important updates about the service

3. How We Share Your Information

Within the Community

  • Your profile information (name, photo, bio, country) is visible to other verified members
  • Professional profiles and service details are visible to all members
  • Posts and comments are visible to all community members
  • Private messages are only visible to the participants in the conversation

Third Parties

  • We do not sell, rent, or trade your personal information to third parties
  • We may share data with our hosting provider for the purpose of operating the platform
  • We may use third-party email delivery services to send notifications
  • We may use a third-party video conferencing platform for onboarding calls
  • We may disclose information if required by law or to protect the rights and safety of our members

4. Data Storage and Security

  • Your data is stored on servers located in the United Arab Emirates
  • We implement appropriate technical and organisational measures to protect your personal data
  • All file uploads are validated server-side for type and size
  • Access to the platform is restricted to verified, approved members only
  • Forms are protected against cross-site request forgery (CSRF)

5. Data Retention

  • Account data is retained for as long as your membership is active
  • User-generated content (posts, messages) is retained unless you delete it or request its removal
  • Application data is retained for the duration of the review process and membership
  • When content is deleted, it is permanently removed from our database
  • If your membership is terminated, we will retain your data for up to 30 days before permanent deletion, unless required by law

6. Your Rights

You have the right to:

  • Access your personal data through your profile page
  • Edit or update your profile information at any time
  • Delete your own posts and content
  • Request deletion of your account and all associated data
  • Request a copy of the personal data we hold about you
  • Withdraw consent for data processing at any time (which may result in account closure)

To exercise any of these rights, contact us via the Concierge service or email us at the address provided below.

7. Rights for EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to rectification — correct inaccurate personal data
  • Right to erasure — request deletion of your personal data
  • Right to restrict processing — limit how we use your data
  • Right to data portability — receive your data in a structured, commonly used format
  • Right to object — object to processing of your personal data
  • Right to lodge a complaint with a supervisory authority in your member state

The legal basis for processing your data is your consent (provided when you apply for membership) and the performance of a contract (providing you with access to the platform).

8. Cookies

We use essential cookies required for the platform to function:

  • Session cookies — to keep you logged in during your visit
  • Authentication cookies — to verify your identity

We do not use analytics cookies, advertising cookies, or any third-party tracking technologies.

9. Children's Privacy

Citadela Circle is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected data from a minor, we will delete it immediately.

10. International Data Transfers

Our servers are located in the United Arab Emirates. If you access the platform from outside the UAE, your information will be transferred to and processed in the UAE. By using the platform, you consent to this transfer.

For EU/EEA residents, we ensure appropriate safeguards are in place for any data transfers in accordance with GDPR requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify members of any material changes via email or a notice on the platform. Your continued use of the platform after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your data rights, please contact us:

  • Via the Concierge service within the platform
  • By email: circle@citadela.ae

13. Governing Law

This Privacy Policy is governed by the laws of the United Arab Emirates, including the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), and, where applicable, the General Data Protection Regulation (EU) 2016/679.