Consent is generated in the same flow as the report.
Marketing compliance in the UAE has changed. Cabinet Resolution 56 of 2024 defines the calling window, retry limits and DNCR obligations for outbound marketing calls. The Personal Data Protection Law (Federal Decree-Law 45 of 2021) governs how prospect data is collected, stored and used. Mizan Labs makes both machine-enforceable, not memo-enforceable.
What is enforced in the workflow.
Cabinet Resolution 56 of 2024
Outbound contact only within the permitted calling window. Retry cap per prospect per period. DNCR list suppression checked before any outbound touch. Every attempt is logged with a rule reference.
Personal Data Protection Law (PDPL)
Explicit consent captured at the point of qualification, with the exact wording versioned per language. Purpose, retention and processor list surfaced to the prospect before they submit.
Consent evidence per report
Every report shipped ties back to a consent record with prospect identifier, timestamp, IP, user agent, consent wording version and language. Exportable in the required format.
Data residency and processors
Prospect data hosted in a jurisdiction agreed with your firm. Sub-processor list published, versioned, and updated with change notices — not buried in terms.
The Mizan Labs product is designed to help brokerages meet these obligations. It is not, on its own, a compliance certification. Any statement made in marketing that Mizan Labs "guarantees compliance" with Cabinet Resolution 56 of 2024 or the PDPL will be reviewed and confirmed by UAE counsel before publication. Brokerages remain the data controller for their prospect records and are responsible for their own regulatory position.
Historical data, from the source.
Where commercially available, Mizan Labs connects to the Dubai Land Department via the ERES API Gateway for historical transaction analysis and forward projections. We use transparent statistical methods, not opaque models, and every projected number carries a method disclosure.
ERES API Gateway
The DLD's official commercial data channel. Historical sales, rent and mortgage data at the transaction level, refreshed on the DLD's schedule.
Transparent statistics
Median and interquartile bands, hedonic adjustments, and a stated forecast horizon. The method is documented in every report footer.
Never a promise
Projections are labelled as illustrative and are not investment advice. The disclaimer is versioned and shipped inside the report, not tucked away on a landing page.
The three questions the DPO always asks.
Retained for the shorter of thirty-six months or the period justified by legitimate interest.
Question set answers, matched report contents, delivery logs. Prospect may request deletion at any time via the link included in every report and WhatsApp reply.
Retained for seven years from the last interaction.
Consent record, wording hash, DNCR check timestamp and retry log preserved beyond the prospect data lifetime for regulator response and audit.
Hosted in UAE regions by default.
Prospect PII stored in a UAE-resident database. Cross-border processing limited to necessary sub-processors under standard contractual clauses and disclosed on request.
Thirty minutes with the founder.
We walk through the export a regulator would receive, from consent wording through DNCR check to retention expiry, using a live prospect record from Fidu Properties.