Moving, Living and Doing Business in Dubai

Privacy Policy

How we collect, use and protect your personal information (POPIA)

Version 1.1, effective 16 October 2026, updated 20 October 2026

1. Who we are

Peacock Crest Advisory (Pty) Ltd (registration number 2026/816664/07) (“Peacock Crest”, “we”, “us”) helps individuals and businesses who are moving to, living in or doing business in Dubai and the wider UAE. We provide general advisory services and introduce clients to independent, licensed specialists.

We are the responsible party for your personal information under the Protection of Personal Information Act 4 of 2013 (POPIA).

Information Officer: Robert Peacock, Director (Information Regulator registration number 2026-069576). Email info@peacockcrest.com, phone or WhatsApp +27 79 316 5191, website www.peacockcrest.com. Registered address: 10 Felicia Avenue, Geelhoutpark, Rustenburg, North West, 0299, South Africa. Consultations by appointment only.

2. What this policy covers

This policy applies to personal information we collect through our website, email, WhatsApp, phone calls, meetings, forms and our dealings with clients, prospective clients, referral partners and suppliers.

3. Personal information we collect

• Identity details: name, ID or passport number, nationality, date of birth where needed.
• Contact details: email address, phone and WhatsApp number, postal or residential address.
• Background to your enquiry: country of residence, the services you are interested in, your timeline, and a general indication of budget or property value. We do not need detailed financial records and do not ask for them unless you choose to share them.
• Company details, if you act for a company or trust: entity name, registration details and your role.
• Communications: emails, messages, notes of calls and meetings.
• Website data: IP address, browser type, pages visited and cookies (see section 11).
• Partner and supplier details: business contact names, roles and business contact details.

We do not intentionally collect special personal information (such as health, religion or criminal records) and ask you not to send it to us unless it is needed for a specific service and you choose to do so.

4. How we collect it

• Directly from you, when you complete our online enquiry form or another form, email, message us on WhatsApp or social media, or speak to us. 
• From people who refer you to us, such as existing clients or partners, with your knowledge.
• Automatically through our website (cookies and analytics).
• From public sources, for business contact information only.

5. Why we use it, and on what basis

6. Who we share it with

We do not sell your personal information. We share it only as follows:

• Licensed specialists you ask us to introduce you to, with your consent. Each specialist becomes responsible for your information once it receives it, under its own privacy policy and the law that applies to it.
• Service providers who help us run the business (operators). These are Zoho (email, our Bigin client management system and online enquiry form, accounting and document storage), Google (website analytics through Google Analytics, and our Google Business Profile), Meta (WhatsApp Business, Facebook and Instagram), LinkedIn, our website and domain host (HostAfrica) and our bank. They may only use your information on our instructions or under their own terms and privacy policies.
• Our professional advisors, such as accountants and attorneys, under a duty of confidentiality.
• Authorities, courts or regulators where the law requires it.

7. Sending information outside South Africa

Many of the specialists we work with are based in the United Arab Emirates, and some of our service providers store data outside South Africa (for example, Zoho stores our account data, including our client management system, in the United States, and Google may process website analytics data in the United States and elsewhere). We transfer personal information outside South Africa only where POPIA allows it: with your consent, where the transfer is needed to perform our agreement with you or steps you asked for, or where the recipient is bound by laws, rules or agreements that give adequate protection.

8. How we protect it

We use reasonable technical and organisational measures, including two-factor authentication on business accounts, encrypted and password-protected devices, a separate business WhatsApp account, access limited to the director, secure cloud storage, and locked storage for paper records. If a security compromise affects your information, we will notify you and the Information Regulator as POPIA requires.

9. How long we keep it

We keep personal information only as long as needed for the purpose it was collected for, or as long as the law requires. Typically: enquiries that do not proceed for up to 12 months, client and introduction records for 5 years after our last dealings, and accounting and company records for at least 7 years. Information is then securely deleted or destroyed.

10. Your rights

Under POPIA you have the right to:

• ask whether we hold your personal information and request a copy of it;
• ask us to correct, update or delete inaccurate, outdated or unlawfully held information;
• object to processing based on our legitimate interests, and to direct marketing at any time;
• withdraw your consent at any time (this does not affect processing already done); and
• lodge a complaint with the Information Regulator.

To exercise these rights, email info@peacockcrest.com. We may ask you to verify your identity, and will respond within a reasonable time, normally 30 days. Requests for records may also be made under our PAIA Manual.

Information Regulator: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191. Phone 010 023 5200. Email enquiries@inforegulator.org.za. Complaints via eservices.inforegulator.org.za. Website www.inforegulator.org.za.

11. Direct marketing and cookies

We only send marketing messages by email, SMS or WhatsApp with your consent, or to existing clients about similar services. Every message includes a simple way to unsubscribe, and we act on opt-outs promptly. Our website uses cookies to make it work properly and may use Google Analytics to understand how visitors use it, such as which pages are visited and how visitors found us. Google Analytics collects information such as your IP address, device and browser type in a way that does not directly identify you to us. You can refuse or delete cookies in your browser settings, or install Google’s opt-out browser add-on; some features may then not work as intended.

12. Children and changes to this policy

Our services are intended for adults. We do not knowingly collect personal information from anyone under 18 without the consent of a parent or guardian. We may update this policy from time to time; the latest version is always on our website, with its effective date.

PAIA Manual

Prepared in terms of section 51 of the Promotion of Access to Information Act 2 of 2000

Version 1.0, effective 16 October 2026

1. Acronyms

2. Purpose of this manual

This manual helps members of the public who want to request access to records held by the Company. It sets out the records the Company holds, how to request them, the fees that may apply, and how the Company processes personal information.

3. Key contact details

4. Guide on how to use PAIA

The Regulator has published a Guide in each official language on how to use PAIA and POPIA. It explains the right of access, how to make a request, fees, and the remedies available. The Guide is available on the Regulator’s website (www.inforegulator.org.za) and from the Regulator at the contact details in section 11. A copy may also be inspected at the Company’s address during office hours, or requested from the Information Officer.

5. Records available without a request

The following are available without a formal PAIA request: information published on the Company’s website, including its Privacy Policy and this manual, and marketing materials the Company has published. No notice in terms of section 52(2) of PAIA has been published.

6. Records kept in terms of other legislation

The Company keeps records in terms of the following legislation, where it applies to the Company:

• Companies Act 71 of 2008
• Income Tax Act 58 of 1962
• Tax Administration Act 28 of 2011
• Value-Added Tax Act 89 of 1991 (if and when registered)
• Protection of Personal Information Act 4 of 2013
• Promotion of Access to Information Act 2 of 2000
• Consumer Protection Act 68 of 2008
• Electronic Communications and Transactions Act 25 of 2002
• Financial Intelligence Centre Act 38 of 2001 (to the extent applicable)

7. Subjects and categories of records held

8. Processing of personal information

Purpose of processing

The Company processes personal information to respond to enquiries, provide advisory services, introduce clients to licensed specialists with their consent, manage partner relationships and referral fees, keep accounting and statutory records, market its services with consent, and protect its systems.

Categories of data subjects and personal information

Recipients

Licensed specialists that clients ask to be introduced to (with consent); operators that help run the business, including Zoho (email, accounting, document storage), Meta (WhatsApp Business), HostAfrica (domain and website) and the Company’s bank; professional advisors; and authorities where the law requires it.

Planned transborder flows

Personal information of clients may be sent to specialists in the United Arab Emirates with the client’s consent. Some operators store data outside South Africa (for example, Zoho in the United States). Transfers take place only as permitted by section 72 of POPIA.

Security measures

Two-factor authentication on business accounts, encrypted and password-protected devices, a separate secured business WhatsApp account, access limited to the director, reputable cloud providers, locked storage for paper records, and a security incident procedure that includes notifying the Regulator and affected persons.

9. How to request access to a record

9.1Complete the request form (Form 2 of Annexure A to the PAIA Regulations, 2021), available from the Regulator’s website or the Information Officer, and send it to info@peacockcrest.com or the Company’s address.

9.2Provide proof of identity, and if you act for someone else, proof of your authority. State which right you want to exercise or protect and why the record is needed for that.

9.3Pay the prescribed request fee and any access fees set out in Annexure B of the PAIA Regulations, 2021. You will be told if a fee is payable before the request is processed, and a deposit may be required for access fees.

9.4The Company will decide on the request within 30 days, which may be extended once by up to 30 days in the circumstances PAIA allows. You will be told in writing of the decision and, if refused, the reasons and your remedies.

9.5Access may be refused on the grounds set out in Chapter 4 of Part 3 of PAIA, including to protect the privacy of third parties, commercial information, confidential information and legally privileged records.

9.6If you are unhappy with a decision, you may lodge a complaint with the Regulator or apply to court, within the time periods PAIA allows.

10. Requests about your own personal information

If you want access to or correction of your own personal information, you may also follow the process in our Privacy Policy by emailing info@peacockcrest.com.

11. The Information Regulator

12. Availability and updating of this manual

This manual is available on the Company’s website, for inspection at its address during office hours, and to the Regulator on request. A copy may be requested from the Information Officer; a prescribed fee may apply for printed copies. The Information Officer will review this manual at least once a year and whenever the Company’s details or processing change.