Privacy Policy

1. Who we are

URBN Offices ("URBN", "we", "us") operates a corporate office discovery and introduction platform covering markets across Africa and MENA. The controller of the personal data described in this policy is [TODO: legal entity name], registered at [TODO: registered address]. For the purposes of applicable data protection law, including the EU/UK General Data Protection Regulation (GDPR) where it applies, URBN is the data controller. Privacy questions and data-rights requests can be sent to privacy@urbnoffices.com [TODO: confirm privacy contact / DPO] or via our data & privacy request form.

2. What we collect

We collect only the information you choose to provide and a limited amount of technical data needed to run the service:

• Contact and company details you submit through our forms — corporate email address, company name, target market, required area, desk and meeting-room counts, timelines, and any notes you add.
• Account and authentication data if you register — name, job title, user type, your hashed password (handled by our authentication provider), saved buildings and shortlists.
• Listings you upload as a landlord, operator or broker — building and unit details, location, commercials, amenities, parking, and any photos or floorplans you provide. These are reviewed before publication and shown to occupiers in anonymised form until you choose to reveal them.
• Request data — reveal, site-visit, offer and introduction requests you submit, including the building, any message, and timestamps, used to operate and commission-protect introductions.
• Operational notifications — when you upload a listing or submit a request, an internal notification email is sent to our team so we can review it.
• Technical data — IP address and browser type, used to keep the service secure and to apply anti-abuse rate limits. The site does not currently run analytics, advertising or tracking cookies.

We do not intentionally collect special-category personal data, and we ask that you do not submit it through free-text fields.

3. Why we use it (lawful basis)

• To respond to your request — e.g. to prepare a Market Scan shortlist or arrange a protected introduction. Lawful basis: performance of a contract or steps taken at your request.
• To operate and secure the platform — Lawful basis: our legitimate interests in running a reliable, fraud-resistant service.
• To send you service communications you have asked for. Where we rely on consent, you can withdraw it at any time.

4. How long we keep it

We retain enquiry and introduction records for as long as needed to provide the service and to evidence introductions under our commission-protection terms (up to 24 months from the date of introduction), after which data is deleted or anonymised unless a longer period is required by law.

5. Who we share it with (processors / subprocessors)

We share personal data only as needed to deliver the service: with the relevant landlord, operator, or their representative when you ask us to make an introduction; with the service providers below, acting on our instructions; and where required by law. We do not sell your personal data.

• Supabase — database, authentication and file storage (account data, listings, uploaded media).
• Resend — transactional and internal notification email delivery.
• Railway — application hosting.
• OpenStreetMap / CARTO — map basemap tiles (your IP is visible to the tile provider when a map loads).
• Google Fonts — web font delivery (your IP is visible to Google when fonts load).

[TODO: confirm the final processor list, their locations, and that data processing agreements are in place with each.]

5a. Cookies & local storage

We use a small number of strictly necessary cookies and browser local storage to keep you signed in, remember your preferences, and operate core features. We do not currently use analytics, advertising or tracking cookies. You can review categories and manage your choice at any time via the cookie banner or "Cookie settings" in the footer. Full detail is in our Cookie Policy.

6. International transfers

Because we operate across multiple jurisdictions, your data may be processed outside the country where you are based. Where required, we put appropriate safeguards in place (such as standard contractual clauses) for those transfers.

7. Your rights

Subject to applicable law, you may request access to your data, correction, deletion, restriction of or objection to processing, and portability, and you may withdraw consent at any time. To exercise any of these rights, contact privacy@urbnoffices.com. You also have the right to complain to your local data protection authority.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above and, where appropriate, notified to registered users.