UAE PDPL

Open Doors is operated by TJG Inc LLC, established at Level 41, Emirates Towers, Sheikh Zayed Road, Dubai, United Arab Emirates. Where the UAE Personal Data Protection Law (Federal Decree-Law 45 of 2021) applies to our processing — because a data subject is in the UAE, or processing takes place in the UAE — we comply with its requirements.

Roles

Open Doors is the controller for the personal data it collects about visitors to opendoors.ai, prospects, and customers (for account administration and marketing). Where customers use the Services to process the personal data of their own contacts, Open Doors is the processorand the customer is the controller.

Lawful bases we rely on

• Consent of the data subject for specified purposes.
• Performance of a contract to which the data subject is a party.
• Compliance with a legal obligation applicable to Open Doors.
• Legitimate interests, balanced against the rights and freedoms of the data subject.

Rights of UAE data subjects

• Access personal data held by us.
• Request correction of inaccurate or incomplete data.
• Request deletion where no legitimate ground to retain applies.
• Restrict or object to processing.
• Withdraw consent to processing that relies on it.
• Lodge a complaint with the UAE Data Office.

Requests: privacy@opendoors.ai.

Cross-border transfers

When personal data is transferred outside the UAE, we rely on the mechanisms permitted under Article 22 of the PDPL — transfers to jurisdictions providing adequate protection, appropriate contractual safeguards with the recipient, or explicit consent of the data subject in limited cases.

Security and breach notification

We implement technical and organisational measures appropriate to the risk, including encryption, access controls, and continuous monitoring. In the event of a personal data breach that poses a risk to data subjects, we notify the UAE Data Office and affected individuals within the timeframes required by the PDPL.

Free Zones

TJG Inc LLC is not established in the DIFC or ADGM; Free Zone data protection laws (DIFC DPL 2020, ADGM Data Protection Regulations 2021) do not apply to us directly, though we respect their requirements in our engagements with entities established there.