Privacy notice

Last updated 16 October 2026 · Version 2026-10-16

This notice explains what personal data diarweb and Diarweb Pro keep, why, where and for how long, and the rights you have.

1. Who we are

diarweb is a public site for property listings in Qatar. Diarweb Pro is the tool real estate agencies and their brokers use to publish those listings.

Both are run by Bits and Blocks LLC, a limited liability company registered in the Qatar Financial Centre (QFC registration No. 3865, incorporated on 19 August 2025), with its registered office at Unit No. 21 BL 28, Level 21, Servcorp Qatar LLC, Doha Tower, West Bay, Doha, Qatar. Bits and Blocks LLC is the controller of the personal data this notice describes, except where section 2 says that an agency is responsible.

We process personal data under the QFC Data Protection Regulations 2021. Where Qatar's Law No. 13 of 2016 on the Protection of Personal Data Privacy also applies to our processing, we comply with it as well.

Contact for privacy questions and requests: diarweb@bitsandblocks.tech.

This notice applies to three groups of people:

Visitors and home seekers: anyone who uses diarweb, with or without an account.
Brokers: people an agency adds to Diarweb Pro.
Agency owners: people who create an agency on Diarweb Pro and manage its team.

It also explains who is responsible for personal data that agencies put in their listings.

2. What we collect, and why

Visitors, without an account

The pages you view: What we do with itWe count a view of a listing, agency or broker page once per visitor every 30 minutes, with the page, the time and the kind of source (an agency's own link, a search engine, a paid link, or direct). The count holds nothing that identifies you; How longKept for the agency's statistics; it is not linked to you
WhatsApp and Call taps: What we do with itWhen you tap WhatsApp or Call, our server returns the agency's or broker's number and records the tap with the listing, the channel, the kind of source and the time. Nothing about you is recorded; How longKept for the agency's statistics; it is not linked to you
Your IP address: What we do with itUsed in memory to stop abuse, through limits on taps, page counts and sign-in emails. We keep only a keyed hash of it for the length of each limit, and delete those records after a day. We never store your IP address or your browser's user agent; How longUp to 1 day
The address of the page you came from: What we do with itRead once to tell what kind of source it is, then dropped; How longNot stored

There is no contact form, and we never ask for or store your phone number. When you tap WhatsApp, your own WhatsApp app opens a chat with the agency, with a message naming the listing. What you send there goes from you to the agency through WhatsApp, which handles it under its own privacy policy; we do not see it. When you tap Call, your phone dials the number.

Our hosting provider keeps request logs, which include your IP address, for a limited period under its own retention rules.

Home seekers with an account

Accounts are available where search is open. You sign in with a link we email to you.

Email address: What we do with itTo send your sign-in links and the alerts you set up. We do not share it with agencies; How longUntil you delete your account
First name: What we do with itTo greet you in your account; How longUntil you delete your account
Language: What we do with itTo write to you in English or Arabic; How longUntil you delete your account
Your acceptance of the terms of use: which version, and when: What we do with itProof of acceptance. Each acceptance is kept as its own record and never changed; How longUntil you delete your account
That we emailed you about a new version of the terms: What we do with itSo that nobody gets the same notice twice; How longUntil you delete your account
Saved listings: What we do with itTo show you your saved listings; How longUntil you remove them or delete your account
Alerts: a name, the search, how often, the email: What we do with itTo email you new listings that match; How longUntil you stop or delete the alert, or delete your account
Sign-in links and sessions: What we do with itStored only as a one-way hash. A link works once, for 15 minutes. A session lasts 30 days, or ends when you sign out; How longLinks are deleted a day after they expire; sessions once they end
Links that stop an alert: What we do with itSo that one click in an email stops an alert without signing in. Stored as a hash; How long90 days

A home-seeker account holds no phone number, IP address or user agent.

Brokers and agency owners on Diarweb Pro

Email address: What we do with itSign-in links, links to change your email, and the invitation when an owner adds you; How longWhile you have a Diarweb Pro account, and after as explained below
Email address and language, when you sign in but do not create an agency: What we do with itTo send you one reminder, about a day later, in the language you used, with a link back to agency creation. Never a second one; How long7 days if no reminder is sent; one year after the reminder; deleted at once when you join or create an agency
Name and mobile number: What we do with itYour name is shown on the agency's public listings and on your broker page. Your mobile number is given to a visitor only when they tap WhatsApp or Call on your listings; it never appears in a page; How longWhile you have a Diarweb Pro account, and after as explained below
Broker license number: What we do with itShown on your public listings, and checked by our team when you are added; How longWhile you have a Diarweb Pro account, and after as explained below
Agency details: name, license and commercial registration numbers, phone, about text, logo: What we do with itThe agency's public page, the license check before the agency can publish, and contact taps; How longWhile the agency uses Diarweb Pro, and after as explained below
Listings, photos, prices and outcomes (let, sold, withdrawn, final price): What we do with itPublished on the public site, except the final price, the agency's own reference and the outcome, which stay inside the agency; How longWhile the agency uses Diarweb Pro, and after as explained below. A removed photo leaves storage within a day
Who did what: publishing, edits, price changes, outcomes, moderation: What we do with itThe listing's history, the agency's overview, and the review of claims about returns; How longAs for the listing
Your acceptance of the Diarweb Pro terms: which version, when, and where: What we do with itProof of acceptance. Each acceptance is kept as its own record and never changed. An owner's acceptance in agency creation is also kept on the agency; How longAs long as we keep your Diarweb Pro account record
That we emailed you about a new version of the Diarweb Pro terms: What we do with itSo that nobody gets the same notice twice; How longAs long as we keep your Diarweb Pro account record
Sessions: What we do with itStored only as a hash; 30 days, or until you sign out; How longDeleted once they end
A staff cookie: What we do with itWhile you are signed in to Diarweb Pro, a cookie with no name or ID marks your browser, so that your own visits to the public site do not count in agencies' figures; How long30 days, cleared when you sign out

When a broker leaves an agency, the owner removes them from the team. They can no longer sign in for the agency, but their name stays in the history of the listings they worked on, because that history is the agency's record. When an agency stops using Diarweb Pro, it can ask us to delete its listings, photos and history. We then delete them, or remove what identifies people in them, except what the law requires us to keep. A broker or owner can ask for the same at any time (section 6).

We do not use one agency's outcomes in figures shown to other agencies or to the public. If we ever offer figures across agencies, we will ask each agency's consent first, show only totals in which no listing, broker or agency can be identified, and let the agency withdraw its consent at any time by writing to us.

Emails that do not arrive: when our email provider tells us that an address refused our email for good, or that its reader marked our email as spam, we keep that address, which of the two happened, when, and how often, so that we stop emailing it. A sign-in link you ask for still goes to an address that marked us as spam. We keep this record until you ask us to remove it.

Photos: the original a phone sends is kept privately until our system checks it, then deleted. The copy shown on the site is resized and has all its metadata removed, including the place where the photo was taken.

Photo suggestions: Diarweb Pro can send an agency's photos, resized and with no metadata, and the listing's fields to an AI model provider, to suggest listing fields and flag poor photos. It is not used for any agency today. We will not turn it on for an agency without the owner's agreement, and we will update this notice first.

Personal data in listings

Listings are written by agencies. An agency is responsible for what it publishes, including any personal data about a property owner, a tenant or anyone else, and must have the right to publish it. We check descriptions for claims about returns and may hold or refuse them.

3. Our legal grounds

Your account, sign-in, saved listings and alerts: Ground under the QFC Data Protection Regulations 2021Performing our agreement with you (the terms of use)
Diarweb Pro accounts and publishing listings: Ground under the QFC Data Protection Regulations 2021Performing our agreement with the agency (the Diarweb Pro terms), and our legitimate interest in giving its brokers access
Showing a broker's name and license number on listings: Ground under the QFC Data Protection Regulations 2021Our legitimate interest, and the agency's, in showing who markets a property and that they hold a license
Counting views and taps for agencies: Ground under the QFC Data Protection Regulations 2021Our legitimate interest in giving agencies figures about their listings, with nothing kept that identifies a visitor
Stopping abuse, through limits and keyed hashes of IP addresses: Ground under the QFC Data Protection Regulations 2021Our legitimate interest in keeping the service safe
Error reports, cleaned of personal data: Ground under the QFC Data Protection Regulations 2021Our legitimate interest in keeping the service working
Alert emails: Ground under the QFC Data Protection Regulations 2021Your request: you choose each alert and can stop it in one click
Keeping proof of acceptance of the terms: Ground under the QFC Data Protection Regulations 2021Our legitimate interest in showing what was agreed, and our legal obligations

4. Who receives your data

We do not sell your personal data, and we do not share it with advertisers.

Agencies see their own listings' views and taps, never who made them. A home seeker's email address is never given to an agency.
The public sees listings, agency pages, broker names and license numbers, as described above.
Service providers process data for us under contract, only on our instructions:

Vercel: PurposeHosting, image optimization, request logs; RegionEuropean Union (Frankfurt) for our servers; a global network delivers the pages
Railway: PurposeDatabase, backups, background tasks; RegionEuropean Union (Netherlands)
Scaleway: PurposePhoto storage; RegionEuropean Union (Paris)
Resend: PurposeSending emails; RegionEuropean Union (Ireland)
Sentry: PurposeError reports, cleaned of personal data before they are sent; RegionEuropean Union (Germany)
Anthropic: PurposePhoto suggestions, not used today; RegionWe will name its region here before we use it

Our providers store data in the European Union. We transfer personal data out of the Qatar Financial Centre only as the QFC Data Protection Regulations 2021 allow: to places whose laws protect it adequately, or with safeguards in our contract with the provider.

We may disclose data when the law, a court or a regulator requires it.

5. Cookies

We use only the cookies and browser storage the site needs to work: your sign-in, your Diarweb Pro session, and a few remembered settings. There are no advertising or analytics cookies, and no scripts from other companies. The cookies page lists each one, what it does and how long it is kept.

6. Your rights

You can ask us to:

tell you what personal data we hold about you, and give you a copy;
correct it;
delete it;
stop using it for a purpose, or object to it;
withdraw a consent you gave, at any time.

Home seekers can delete their account themselves in Account, Details. This deletes the account, its sessions, saved listings and alerts at once. Brokers and owners write to us. When we delete a broker's data, we remove their name from the history of the listings they worked on, unless the law requires us to keep it.

Write to diarweb@bitsandblocks.tech. We answer within 30 days. If you are not satisfied with our answer, you can complain to the QFC Data Protection Office.

7. Security

Sign-in links, sessions and access keys are stored only as hashes. The phone numbers of agencies and brokers are not in any page; our server gives them out one tap at a time, within limits. Data travels encrypted (HTTPS). Access to the database is divided by role, and the public site cannot read private tables.

If a breach of personal data is likely to put you at risk, we will tell you and the QFC Data Protection Office as the regulations require.

8. Children

The site is not meant for people under 18, and you must be 18 or over to create an account.

9. Changes to this notice

We may change this notice. We post each new version here with its date, and email account holders at least 30 days before a material change takes effect. A change that the law requires, or one that only adds a new service, may take effect sooner; we still tell account holders about it by email.

10. Language

This notice is written in English and translated into Arabic. If the two versions differ, the English version prevails.