Last Updated: 26 September 2025

Fourth Space (“we”, “us”, “our”) is operated by Hayley Borland, registered at 23 Marina Tower, Dubai, UAE.
We are committed to protecting your privacy and handling your personal data responsibly in accordance with UK GDPR, the UAE PDPL 2021, and other applicable data-protection laws.

If you have any questions about this Policy or your personal data, contact us at: hayley@stradauae.com

• Data We Collect

 

We collect the following personal data when you interact with our website:
– Contact details: name, email address, phone number
– Technical data: IP address, device/browser type, cookies and pixels used for website performance and advertising (e.g., Meta Pixel)
We do not collect sensitive personal data and we do not knowingly collect data from children under 13.

• How We Collect Your Data

 

– Via web enquiry forms you complete on www.fourthspace.ae
– Via cookies and similar technologies that help us analyse traffic, improve the site, and measure ad performance
– Via our CRM system (Pipedrive) where the above information is stored securely for follow-up

• How We Use Your Data

 

We use your personal data to:
1. Respond to your enquiries and provide the information or services you request
2. Send relevant marketing emails (only if you’ve opted in or as otherwise permitted by law)
3. Improve website functionality and advertising performance using cookies/pixels

We do not use your personal data for profiling or automated decision-making that could affect you legally or significantly.

• Legal Bases for Processing

 

Depending on the context, we process your data under one or more of the following legal grounds:
– Consent: for marketing emails and non-essential cookies
– Legitimate interest: to respond to your enquiries and maintain our business operations
– Legal obligations: where retention is required for record-keeping or regulatory compliance

• Sharing Your Data

 

We share your personal data with trusted service providers, such as our CRM provider, Pipedrive, which acts as a data processor on our behalf, processing data according to our instructions.
Pipedrive’s infrastructure includes encryption, access controls, and compliance with industry standards. Data may be stored or processed on servers outside the UK or UAE, and where this occurs, Pipedrive uses Standard Contractual Clauses (SCCs) and other safeguards.
We do not rent or sell your personal information to third parties.

• Cookies & Tracking Technologies

 

Our site uses the following:
– Essential cookies: necessary for core functionality of the site
– Analytics & advertising cookies / pixels (e.g., Meta Pixel) to measure ad performance and site behaviour
– CookieYes is used to manage user consent for non-essential cookies: the banner appears on first visit and lets users accept, reject, or adjust their preferences at any time.

You can withdraw consent for non-essential cookies at any time via the CookieYes settings or through your browser.

• Your Rights

 

Depending on your location (UK/EU/UAE), you have the right to:
– Access a copy of the personal data we hold about you
– Request correction of inaccurate or incomplete data
– Request deletion of your data (‘right to be forgotten’)
– Object to or restrict certain processing, including direct marketing
– Withdraw consent at any time (this will not affect lawful processing before withdrawal)
– Lodge a complaint with your local data-protection authority (e.g., UK ICO or UAE Data Office)

Requests can be made by emailing hayley@stradauae.com. We will respond within one month or as required by law.

• Data Retention

 

We retain personal data only for as long as you wish to hear from us. If you withdraw consent or ask us to delete your data, we will erase it promptly unless a longer retention period is required by law or for legitimate business purposes.

• Data Security

 

We maintain appropriate technical and organisational measures to safeguard your data, including:
– SSL (HTTPS) encryption for all site pages
– Secure storage within Pipedrive, using encryption at rest and in transit, two-factor authentication, and strict access controls
– Limited access by authorised personnel only
– Regular review of security measures and vendor compliance

• Children’s Privacy

 

Our services and website are directed to adult investors. We do not knowingly collect or process information from children under 13 (or 16 where applicable). If we become aware that we have collected such data, we will delete it promptly.

• Updates to This Policy

 

We may update this Privacy Policy from time to time. All changes will be posted on this page with an updated ‘Last Updated’ date. If the changes are significant, we may notify you by email if you are on our mailing list.

• Contact Us

 

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact: hayley@stradauae.com