At Xartum, we respect your privacy. This policy outlines how we collect, use, and protect your personal data while delivering our luxury real estate services with transparency and trust.
Your privacy is fundamental. At Xartum, we are committed to handling your personal information with integrity, accountability, and full transparency in alignment with applicable U.S. data protection laws.
We collect both personal and non-personal data, which may include your name, email address, phone number, IP address, browser type, and interaction history. This data is collected when you voluntarily submit information through forms, sign-ups, or interact with our services and digital assets.
Collected data is used for purposes including but not limited to: providing and improving our services, responding to inquiries, sending updates or promotional materials, ensuring platform security, and complying with legal obligations.
We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Once no longer needed, data is securely deleted or anonymized.
While U.S. law does not universally require a legal basis for processing, we adhere to principles of purpose limitation and data minimization. Where applicable, we process data under lawful bases such as user consent, contract performance, and legitimate interest.
If you are accessing our services from outside the United States, your data may be transferred to, stored, and processed in the U.S. or other jurisdictions. We implement appropriate safeguards to ensure your data is handled lawfully, including the use of standard contractual clauses where applicable.
We implement reasonable and appropriate administrative, technical, and physical safeguards including encryption, firewalls, and access controls to protect your data against unauthorized access, loss, or misuse.
We do not sell or rent your personal information. We may share data with trusted service providers who assist in operating our website or servicing you, subject to strict data protection agreements. Any such disclosures are made in compliance with applicable legal standards.
We do not knowingly collect personal information from individuals under the age of 13 without verifiable parental consent, in accordance with the Children’s Online Privacy Protection Act (COPPA).
We may update this policy periodically to reflect changes in legal obligations or business practices. The revised policy will be posted on this page with the updated effective date.
By using our services, you acknowledge that you have read and understood this Privacy Policy.
Effective Date: August 8, 2025 | Last Reviewed: August 8, 2025