Last updated: 1 July 2026
This Cookie Policy explains how Estate & Keystone Documents Storage Services LLC ("Keystone", "we", "us") uses cookies and similar tracking technologies on our website at estateandkeystone.com and in the Keystone application.
This policy is issued pursuant to UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and the Telecommunications and Digital Government Regulatory Authority (TDRA) guidelines on electronic privacy.
Cookies are small text files placed on your device (computer, smartphone, or tablet) when you visit a website or use an app. They allow the website or app to recognise your device and remember certain information about your preferences or actions.
Similar technologies include web beacons, pixel tags, local storage objects (LSOs), and session storage. In this policy, we refer to all of these collectively as "cookies".
We use the following categories of cookies on the Keystone website and platform:
2.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function. They cannot be disabled as the Platform cannot operate without them.
Cookie name / type | Purpose |
|---|---|
Session cookie | Maintains your login session so you do not have to sign in on every page. |
CSRF token | Protects against cross-site request forgery attacks — a security requirement. |
Authentication token | Verifies your identity when accessing secure areas of the Platform. |
Load balancer cookie | Routes your requests to the correct server — invisible to you but essential for performance. |
Legal basis: Strictly necessary cookies are processed on the basis of legitimate interests (security and platform operation). No consent is required for strictly necessary cookies under UAE PDPL guidelines.
2.2 Functional Cookies
These cookies enable enhanced features and personalisation. They are not strictly necessary but improve your experience.
Cookie name / type | Purpose |
|---|---|
Language preference | Remembers your language selection (English or Arabic) between sessions. |
Theme preference | Remembers your display settings. |
Notification preferences | Stores your notification settings so they persist between devices. |
Recently viewed category | Remembers the last category you were viewing for faster navigation. |
Legal basis: Consent. You may disable functional cookies without affecting Platform security, though some personalisation features will not work.
2.3 Analytics Cookies
These cookies help us understand how users interact with the Platform so we can improve it. All analytics data is anonymised — we cannot identify individual users from analytics data.
Cookie name / type | Purpose |
|---|---|
Usage analytics (anonymised) | Tracks which features are used most, where users navigate, and where errors occur. Data is aggregated and anonymised. |
Performance monitoring | Monitors app loading times and identifies performance bottlenecks. No personal data is collected. |
Crash reporting | Automatically captures crash reports to help us fix bugs. Device type and OS version only — no personal data. |
Legal basis: Consent. You may disable analytics cookies. This will not affect your use of the Platform but will mean we cannot improve the service based on your usage patterns.
2.4 Marketing Cookies
Marketing cookies track your activity to deliver relevant advertising and measure the effectiveness of marketing campaigns.
Keystone's position on marketing cookies
We use marketing cookies only on our public website (estateandkeystone.com), never inside the authenticated Platform where your documents are stored.
We do not serve third-party advertisements inside the Keystone app. Ever.
Marketing cookies on our website may be placed by third-party advertising partners (e.g. LinkedIn, Google Ads) only with your explicit consent.
Cookie name / type | Purpose |
|---|---|
LinkedIn Insight Tag | On public website only. Measures effectiveness of LinkedIn advertising. Disabled by default — requires your consent. |
Google Analytics (_ga) | On public website only. Anonymised traffic analysis for website improvement. Requires consent. |
Conversion tracking | On public website only. Measures whether visitors complete waitlist signups. Requires consent. |
Legal basis: Explicit consent (Article 5, UAE PDPL). Marketing cookies are disabled by default. You must actively opt in via the cookie banner on first visit to our website.
Cookie type | Retention |
|---|---|
Session cookies | Deleted automatically when you close your browser or app. |
Persistent cookies (functional) | Retained for up to 12 months, or until you clear them. |
Analytics cookies | Retained for up to 24 months in anonymised, aggregated form. |
Marketing cookies | Retained for up to 90 days. Requires renewal of consent after 90 days. |
4.1 Cookie Consent Banner
When you first visit estateandkeystone.com, you will see a cookie consent banner. You can:
Accept all cookies
Accept only strictly necessary cookies
Customise your cookie preferences by category
You can change your cookie preferences at any time by visiting Settings > Privacy > Cookie Preferences on our website.
4.2 Browser Settings
You can control cookies through your browser settings. Each browser is different — refer to your browser's help documentation:
Google Chrome: Settings > Privacy and Security > Cookies and other site data
Safari: Settings > Privacy > Manage Website Data
Firefox: Options > Privacy & Security > Cookies and Site Data
Microsoft Edge: Settings > Cookies and site permissions
Note: Disabling strictly necessary cookies will prevent the Platform from functioning correctly.
4.3 Mobile Device Settings
iOS: Settings > [App Name] > Privacy — you can reset the app's identifier or limit tracking
Android: Settings > Privacy > Ads — you can opt out of interest-based advertising
4.4 Opt-Out of Analytics
To opt out of analytics tracking, use the Google Analytics opt-out browser add-on: tools.google.com/dlpage/gaoptout (for website visits only). Within the Keystone app, go to Settings > Privacy > Analytics to disable analytics.
Our use of cookies complies with the following UAE laws and regulations:
Law / Regulation | Compliance |
|---|---|
UAE Federal Decree-Law No. 45 of 2021 (PDPL) | We obtain explicit consent before placing non-essential cookies. We provide clear information about each cookie's purpose. We honour your right to withdraw consent at any time. |
UAE Federal Decree-Law No. 34 of 2021 (Cybercrime Law) | We do not use cookies to intercept communications, access devices without authorisation, or collect data through deceptive means. |
TDRA Consumer Protection Regulations | We provide clear, accessible information about our tracking practices and give you meaningful control over your data. |
Federal Decree-Law No. 26 of 2025 (Child Digital Safety) | We do not use cookies to track users under 18 for advertising purposes. Age verification mechanisms are in place. |
UAE Federal Law No. 15 of 2020 (Consumer Protection) | We do not use consumer data collected through cookies for any purpose not disclosed in this policy. |
The following table confirms how Keystone meets each key requirement of UAE Federal Decree-Law No. 45 of 2021:
# | Requirement | How Keystone Complies |
|---|---|---|
1 | Consent | We obtain explicit, informed, freely given consent before placing non-essential cookies. Consent can be withdrawn at any time without detriment. |
2 | Purpose Limitation | Each cookie's purpose is stated in this policy. Cookies are not used for any purpose beyond what is stated. |
3 | Data Minimisation | We collect only the data strictly necessary for each cookie's stated purpose. Analytics data is anonymised. |
4 | Security | All cookie data is transmitted over TLS 1.3. Session cookies are HTTP-only and Secure flagged to prevent XSS attacks. |
5 | Data Subject Rights | You can access, correct, or delete cookie data at any time via your browser settings or our in-app privacy centre. |
6 | Breach Notification | Any breach involving cookie data will be handled under our data breach response plan. The UAE Data Office will be notified within 72 hours of any qualifying breach. |
7 | Data Retention | Cookies are retained only for the periods stated in Section 3. We do not retain cookie data beyond its stated purpose. |
8 | Third-Party Processors | Third-party cookie processors (e.g. Google, LinkedIn) are bound by data processing agreements and our disclosure in Section 2. |
We may update this Cookie Policy from time to time to reflect changes in the cookies we use or changes in UAE law. We will notify you of material changes by updating the date at the top of this policy and, where appropriate, by displaying an updated cookie consent banner.
For questions about our use of cookies or to exercise your privacy rights, contact us at:
Data Protection Officer — Estate & Keystone Documents Storage Services LLC
Dubai, United Arab Emirates
Email: hello@estateandkeystone.com
General support: hello@estateandkeystone.com
Website: estateandkeystone.com
UAE Data Office (regulator): dataoffice.gov.ae