withlida

Last updated: October 30, 2026

Who we are

withlida.com (the "Site") is the independent Dubai real-estate publication of Lida Moghaddam ("we," "us," or "our"). This Policy explains what personal data the Site collects, why, who processes it on our behalf, how long it is kept, and the rights you have over it. It covers the Site, its newsletter and its contact forms.

We are the controller of that data. Questions, requests and complaints about it go to hi@withlida.com.

What we collect

When you subscribe to the newsletter

Your email address, the place on the Site where you subscribed, whether your subscription is active, a random token that makes your unsubscribe link work, and the dates you subscribed and last changed it. That is everything the Site stores about a subscriber.

When you write through the contact page

The contact page has two forms. "The publication" asks your name, your email, a topic and your message. "Work with Lida" asks what you want to do (buy, invest, sell, rent or let out) and, where you choose to answer, the property type, off-plan or ready, a developer or project, bedrooms, a budget or rent band, how you would pay, your timeline, whether you are in the UAE, your name, your email, a phone number (needed only if you ask to be reached by phone or WhatsApp) and a message.

The Site keeps your answers in its database and sends them as one email to Lida's mailbox, with your address as the reply-to, so that she can answer you. Please do not send passport details, bank details or other documents through these forms.

When you email us

The emails you send and our replies, kept in Lida's mailbox.

When you read the Site

  • Google Analytics 4 measures visits: the pages you open, how you arrived, your device and browser, your approximate location (city or country) and the time of each visit. It sets its own cookies to tell visits apart (see Cookies, below). Google states that Google Analytics 4 does not log or store IP addresses.
  • Cloudflare hosts the Site and carries every request to it to deliver and protect it, so it processes your IP address and browser details.
  • The Site's logs — its own errors and the requests it answers — are kept by Cloudflare for a few days, for security and to fix problems.

We run no advertising, retargeting or social-media pixels, and we build no profile of you.

What loads only where a page uses it

  • A YouTube video shows a picture until you press play; only then does the player load, from youtube-nocookie.com.
  • An embedded X post loads X's own script (platform.twitter.com).
  • The "preferred source" button on articles loads a script from Google News when you point at it or press it.
  • "Open in ChatGPT", "Claude" and "Grok" are plain links: pressing one sends the article's address to that service.

Each of these services handles your data under its own policy.

How we use it, and on what basis

  • The newsletter — to send you the emails you asked for, on your consent. You withdraw it by unsubscribing.
  • The contact forms and email — to read and answer what you sent, because you asked us to.
  • Analytics and delivery — to understand which pages are read and to keep the Site fast, secure and working, in our legitimate interest in running the publication.
  • Legal duties — to keep what the law requires us to keep, or to answer a lawful request.

We do not sell, rent or trade your data, and we make no automated decision about you.

Artificial intelligence

We use AI writing assistants and language models to help research, draft, edit, and optimize articles and guides, and AI image tools for their covers and illustrations. All AI-assisted content undergoes human review, fact-checking, and editorial approval before publication.

None of your personal data goes into those tools: the Site sends no subscriber address, form answer or email of yours to an AI service, and none of it is used to train a model.

Who processes it for us

  • Cloudflare hosts, delivers and protects the Site, runs its DNS, and stores its pictures.
  • PlanetScale (Frankfurt, Germany) keeps the Site's database — the newsletter list and the contact forms' answers — and its backups.
  • Google runs Google Analytics, and Lida's mailbox on Google Workspace.
  • Resend delivers the Site's emails: the welcome email to a new subscriber, and the contact forms' messages to Lida.

Each processes the data only to provide its service to us. We may also disclose data where the law requires it, or to protect the Site, our rights or someone's safety.

How long we keep it

  • The newsletter — while you are subscribed. When you unsubscribe, the address stays on the list marked unsubscribed, so it is never emailed again; ask, and we delete it.
  • The contact forms and email — in the Site's database and Lida's mailbox for as long as the conversation needs; ask, and we delete them.
  • Analytics — Google Analytics keeps event-level data for at most 14 months.
  • Backups — PlanetScale backs the database up automatically, and deleted data leaves the backups as those copies expire.

Security

Every page and form travels over HTTPS. The Site runs on Cloudflare, its database accepts only encrypted, password-protected connections, and access to it is limited to the people who run the Site. No system is perfectly secure: if a breach put your data at risk, we would tell you, and the authorities the law names, within the time it sets.

Cookies

The Site sets no cookie of its own. Google Analytics sets _ga and _ga_ followed by the site's measurement id when a page loads, to count visits; they last up to two years. An embedded YouTube video or X post may set its provider's cookies once it loads.

To refuse these cookies, block them in your browser, use a content blocker, or install Google's opt-out add-on (tools.google.com/dlpage/gaoptout). The Site works the same without them.

Your rights

Wherever you live, you can ask what we hold about you, ask for a copy, have it corrected or deleted, ask us to stop a use of it, and unsubscribe from the newsletter at any time with one click.

  • In the UAE, Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data gives you these rights.
  • In the European Economic Area, the United Kingdom and Switzerland, the GDPR and the UK GDPR add the right to data portability, the right to object to processing based on our legitimate interest, and the right to complain to your data protection authority (in the UK, the ICO).
  • Elsewhere, your own law may give you similar rights: ask, and we will honour them.

Write to hi@withlida.com. We answer within 30 days, may ask you to confirm that the request is yours, and charge nothing.

Where your data goes

The Site's database is in Frankfurt, Germany. Cloudflare works worldwide, and Google and Resend may process data in the United States. Where data leaves the UAE, the European Economic Area or the United Kingdom, we rely on the safeguards in those providers' data processing terms, such as the European Commission's Standard Contractual Clauses.

Children

The Site is written for adults and is not directed at children under 16. We do not knowingly collect a child's data; if you believe a child has sent us theirs, write to us and we will delete it.

Changes to this Policy

When this Policy changes, the date at the top changes with it. Read it with the Terms of Service and the Disclaimer.

Contact

Lida Moghaddam
Email: hi@withlida.com
Website: withlida.com