Scope and identity
This policy applies to the Aldiyar AlMubarakah Real Estate & E-Services website and to data associated with property requests, property listing requests, communications, and services managed by the office.
Aldiyar AlMubarakah refers to the office providing real estate and e-services in Madinah. Approved contact channels are shown at the end of this page and on the Contact page.
Mandatory and optional data
The data collected depends on the form and service. Website forms identify required fields, and a request cannot be submitted if information necessary to receive and process it is not provided.
- General and specific property requests require the name, mobile number, core property criteria, and the required privacy acknowledgment.
- A property listing request requires the contact name and mobile number, contact capacity, property and offer type, city and area, confirmation of authority to submit the property, and the required privacy acknowledgment.
- Optional information may include district, budget or price, description, notes, location link, images, and video, depending on the form.
- The WhatsApp Business communication option is optional where offered and is separate from the privacy acknowledgment required to process the submitted form.
- An email address or additional information may be received when a user chooses to contact us by email or another published channel.
- The systems record limited technical data needed for operation and protection, such as request time, network address, browser or user-agent information, and session data.
Sources and collection methods
We collect data directly through website forms and when a user contacts us by phone, email, WhatsApp Business, or another published channel.
Property data may also be received from its owner, representative, or an authorized employee entering it into the system. The person providing data is responsible for its accuracy and for having authority to provide another person's information where applicable.
Certain technical data is collected automatically from the browser and server to operate sessions, protect forms, and limit abuse and repeated attempts.
Purposes and legal bases
We process data according to its purpose and only to the extent needed. Depending on the processing activity, the legal basis may include the Data Subject's consent where required, performing an agreement or taking steps requested by the Data Subject to provide a service, complying with a statutory requirement, or pursuing a legitimate interest subject to applicable controls and without overriding Data Subject rights.
Personal data is not used for a purpose incompatible with the reason for which it was collected unless another legal basis permits that processing or the required consent is obtained.
- Receiving and responding to property and service requests and managing follow-up.
- Matching client needs with available properties and recording communication outcomes.
- Reviewing property listing requests and organizing their information and media before any use or publication.
- Operating the website, protecting forms and sessions, and limiting abuse and technical issues.
- Maintaining internal records needed to provide the service, protect rights, and evidence relevant operations where necessary.
- Meeting applicable requirements or responding to a valid request from a competent authority.
- The WhatsApp Business option or direct marketing is not treated as general consent to unrelated promotional messages; separate consent is used where required.
Communications and WhatsApp Business
The office team actively uses WhatsApp Business to communicate with clients when the client selects that channel or uses it in relation to a request. Processing may include the mobile number, message content, and information needed to follow up on the service.
When phone or email is used, supplied contact details are used to respond to and follow up on the request and provide service-related information.
WhatsApp Business, email, and telecommunications services are provided by third parties and are also governed by their own terms and privacy practices.
Storage and geographic scope of processing
Form data is stored in the website database. Images and video uploaded with property listing requests are stored in private storage that is not directly public. The database is also used for session data needed to operate the website.
The database and private storage are associated with the current application-server environment. We do not assume a specific hosting data-center country until its actual location has been verified and that information has been approved.
External services such as WhatsApp Business and Google Maps may use infrastructure that processes data outside Saudi Arabia. Where use of a provider results in a transfer or disclosure of personal data to an entity outside Saudi Arabia, applicable requirements governing transfers of personal data outside the Kingdom are to be observed.
Retention, destruction, and security
A single automatic deletion period is not applied to every data category. Retention is determined by whether the request or follow-up purpose continues, whether records are needed to protect rights or evidence relevant operations, and any applicable statutory requirements. When the purpose ends and there is no legal basis to retain the data, deletion, destruction, or anonymization is carried out according to the data type.
An authorized administrator can delete a customer-request record from the administration panel. Its dependent follow-ups and matches are removed according to the relationships implemented in the system, without deleting an independent property offer linked to that request.
Property listing requests and their media are handled through a separate lifecycle that considers whether media remains part of the request or has become associated with an independent property offer, so that an asset required by an active service is not removed incorrectly.
We apply organizational and technical measures designed to limit unauthorized access, loss, or alteration, including restricted administrative access and private storage for property-listing-request media.
Your rights and how to exercise them
Under the Personal Data Protection Law, the rights available depend on the purpose and legal basis and include the right to be informed, access personal data, request a readable copy, request correction, completion, or updating, request destruction where the data is no longer necessary for its purpose, and withdraw consent where consent is the processing basis and no other legal basis requires continued processing.
A rights request may be submitted using the contact channels published on the website. We may request reasonable information to verify the requester's identity and protect other individuals' data.
We act on requests to exercise data rights without delay and within a period not exceeding 30 days. Where permitted by the Implementing Regulation, this period may be extended by no more than an additional 30 days, with advance notice to the Data Subject explaining the extension and its reasons.
Complaints and objections
If you have an objection or complaint about processing or exercising your rights, you may first contact Aldiyar AlMubarakah through the channels published on the website so the request or complaint can be reviewed.
If you are not satisfied with the handling of the complaint or believe the Personal Data Protection Law has been violated, you may use the official complaints service for the Law through the National Data Governance Platform operated by the Saudi Data & AI Authority (SDAIA), subject to the official service requirements and procedures.
External services and policy updates
The website may contain links or components for external services such as WhatsApp Business, Google Maps, and TikTok. Use of those services is also subject to the providers' own terms and privacy policies.
This policy may be updated when services, processing activities, or applicable requirements change. The latest update date appears at the top of the page, and an update applies from its publication date unless otherwise stated.
Contact
Privacy and data requests
You may use the contact details shown at the end of this page to exercise your rights or submit a question or objection relating to the processing of your personal data.