Privacy Policy
Last Updated: February 13, 2026
1. Introduction
Lebanon Luxury Estate (“LLE,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at lebanon-luxury-estate.vercel.app (the “Site”), communicate with us via WhatsApp, or otherwise interact with our services.
We operate under the laws of the Republic of Lebanon and comply with the European Union General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act (“CCPA”), and the Virginia Consumer Data Protection Act (“VCDPA”) where applicable to the individuals we serve.
2. Company Identity & Contact
Data Controller: Lebanon Luxury Estate
Location: Beirut, Lebanon
Email: info@lebanon-luxury-estate.com
WhatsApp: +961 70 277 722
3. Information We Collect
3.1 Information You Provide
- Newsletter Subscription: Email address, subscription preferences (general or project-specific), locale preference, and consent records.
- WhatsApp Communications: Messages, contact information, and any content you share when you initiate conversations via our WhatsApp chat widget.
- Inquiry Forms: Name, email, phone number, and message content when you contact us.
3.2 Information Collected Automatically
- Device & Browser Data: IP address, browser type, operating system, device type, screen resolution, and referring URL.
- Usage Data: Pages visited, time spent on pages, click patterns, scroll depth, and navigation paths.
- Cookies & Similar Technologies: We use cookies and localStorage as described in our Cookie Policy.
3.3 Information from Third Parties
We may receive limited technical data from our hosting provider (Vercel) for performance monitoring and error tracking purposes.
4. Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent (Art. 6(1)(a) GDPR): Newsletter subscriptions, cookie consent for non-essential cookies, WhatsApp communications initiated by you.
- Legitimate Interest (Art. 6(1)(f) GDPR): Website analytics and performance optimization, fraud prevention, and security monitoring.
- Legal Obligation (Art. 6(1)(c) GDPR): Compliance with applicable laws and regulatory requirements.
5. How We Use Your Information
- To respond to your inquiries and facilitate communication about our properties.
- To send newsletter updates about projects, market insights, and company news (with your consent).
- To maintain, improve, and optimize our website experience.
- To detect, prevent, and address technical issues and security threats.
- To comply with legal obligations and enforce our terms of service.
- To provide personalized content based on your language preference.
6. Data Sharing & Third-Party Services
We do not sell, rent, or trade your personal information to third parties. We share data only with the following service providers who process data on our behalf:
Vercel Inc.
Website hosting, serverless functions, and Blob storage for media assets. Data may be processed in the United States.
MongoDB Atlas
Database services for newsletter subscriptions and content management. Data stored on secured cloud infrastructure.
WhatsApp (Meta Platforms, Inc.)
Communication platform. Messages are subject to WhatsApp's own privacy policy. We do not control WhatsApp's data practices.
Google Fonts
Typography service. Your browser may transmit your IP address to Google servers when loading fonts.
7. International Data Transfers
Your data may be transferred to and processed in countries outside of Lebanon, including the United States (Vercel, MongoDB, Meta). Where such transfers occur, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Service providers certified under recognized data protection frameworks.
- Contractual obligations requiring equivalent levels of data protection.
8. Data Retention
- Newsletter subscriptions: Retained until you unsubscribe or request deletion.
- Cookie consent preferences: Retained in your browser's localStorage until you clear it or consent version changes.
- Server logs: Automatically purged after 30 days.
- WhatsApp communications: Retained for 24 months from last interaction, then archived or deleted.
- Inquiry data: Retained for 36 months, then deleted unless an ongoing business relationship exists.
9. Your Rights
9.1 Under GDPR (EU/EEA Residents)
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate personal data.
- Right to Erasure: Request deletion of your personal data (“right to be forgotten”).
- Right to Restriction: Request limitation of processing of your personal data.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing.
9.2 Under CCPA (California Residents)
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected.
- Right to Delete: Request deletion of personal information we have collected.
- Right to Opt-Out: Opt out of the “sale” of personal information. Note: We do not sell your personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
9.3 Under VCDPA (Virginia Residents)
- Right to access, correct, delete, and obtain a copy of your personal data.
- Right to opt out of processing for targeted advertising, sale of personal data, or profiling.
- Right to appeal a denied request within a reasonable timeframe.
How to Exercise Your Rights
Submit your request via email to info@lebanon-luxury-estate.com or via WhatsApp at +961 70 277 722. We will respond within 30 days (or 45 days for complex requests, with notice).
10. Children's Privacy
Our Site is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will promptly delete it. If you believe a child has provided us with personal data, please contact us immediately.
11. Security Measures
We implement appropriate technical and organizational measures to protect your personal data, including:
- HTTPS/TLS encryption for all data in transit.
- Encrypted database connections with access controls.
- Regular security assessments and monitoring.
- Principle of least privilege for administrative access.
No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy periodically. Your continued use of the Site after changes constitutes acceptance of the updated policy.
13. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
If you are located in the EU/EEA and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local supervisory authority.