Legal

Privacy policy

Last updated: 2026-05-12

Text pending final legal review. The structural GDPR points are covered but the wording is validated by a firm before public launch.

Data controller

Elvora Signature Real Estate L.L.C. (legal entity operating under the trading name Noriaxi), with registered office in Dubai, United Arab Emirates. Contact: privacidad@noriaxi.ae.

Data we collect

• Identity and contact: name, email, phone, city of residence.
• Investment profile when you fill in the event form: approximate ticket, horizon, motivation, intended use, preferred aesthetic, professional profile.
• LinkedIn (optional) if you decide to share it.
• Pseudonymised tracking data: IP + user-agent hash (not stored in clear text).
• UTM and referer if you arrive from a campaign.

Purpose

• Qualify your application to the Noriaxi × DAMAC event and prepare you a private dossier.
• If you give separate consent, send you Noriaxi Intelligence (monthly market report).
• Aggregated internal tracking to improve the site (always active, no personal identification).
• If you accept marketing cookies in the banner, measurement of Meta (Facebook / Instagram) campaigns via Pixel and Conversions API. Activation is opt-in.

Legal basis

Your explicit consent (GDPR art. 6.1.a). For the form, submission requires checking the privacy box. The newsletter is independent opt-in.

Retention period

We retain personal data for 24 months after the event (June 2028). Past that period, we automatically anonymise the identity columns, keeping only non-PII metrics (aggregate score, tier, UTM) for historical analytics.

Sharing with DAMAC

Only if you give explicit and separate consent. When that checkbox is activated, it will always be opt-in and the sharing will be done via a secure manual channel. Without your consent, DAMAC never receives your data directly.

International transfers

Data stored in Supabase (server in Frankfurt, EU). Does not leave the EU. Any future transfer to the UAE will be made under Standard Contractual Clauses (SCC).

Your rights

Access, rectification, erasure, restriction, portability and objection. To exercise them write to privacidad@noriaxi.ae. We reply within 30 days. If not satisfied, you can complain to the AEPD (Spanish data protection authority).

Cookies and tracking

Two categories:

• Essential — always active: session, locale, form autosave, consent decision cookie. Without them the site doesn't work.
• Marketing and analytics — opt-in. If you accept them in the banner, we load the Meta pixel to measure campaign effectiveness on Facebook and Instagram, and send server-side events (Conversions API) when you complete a form or subscribe to Intelligence. Without accepting, none of these events are sent and the pixel doesn't even initialise.

Additional detail at /legal/cookies.