Privacy Policy

Last updated: August 2026. Data controller: Eydah Real Estate & Property Management, Riyadh, Kingdom of Saudi Arabia. Contact: sultan@eydah.com

1. Data we collect

Identity and contact data (name, mobile number, email, applicant capacity); property data (type, city, district, plan number, area, price, ownership status, occupancy); technical data (IP address, browser and device type, pages visited, referrer); and marketing data (UTM tags, click identifiers such as fbclid and gclid, collected only after you consent to measurement cookies). We do not collect national ID numbers, title deed images, or banking data through this website.

2. Purposes and legal bases

Responding to your request and delivering brokerage or property management services (contract performance); documenting contracts and meeting regulatory requirements (legal obligation); improving the site and measuring advertising performance (your explicit consent, withdrawable at any time); and protecting the site from abuse and fraud (legitimate interest).

3. Cookies

Strictly necessary cookies run at all times. Measurement and marketing cookies, including the Meta Pixel, load only after you press "Accept all" in the consent banner, and you may withdraw consent by clearing cookies or contacting us.

4. Sharing

We never sell or rent your data. It is shared only where necessary with competent government authorities under a legal obligation, with technical processors acting on our behalf under confidentiality agreements, and with advertising platforms in aggregated or hashed form after your consent.

5. International transfers

Data is stored and processed within Saudi Arabia by default. Any transfer abroad follows the controls of the Saudi Personal Data Protection Law and its data transfer regulation.

6. Retention

Non-converted enquiries are deleted 12 months after last contact; client data is retained for the contractual relationship and the statutory period thereafter; technical logs are deleted within 90 days.

7. Your rights

You have the right to be informed, to access, to obtain a copy in a readable format, to rectify, to request destruction, and to withdraw consent. Send requests to sultan@eydah.com or use our data deletion page. We respond within 30 days. You may also lodge a complaint with the competent Saudi supervisory authority.

8. Security

We enforce HTTPS, strict security headers (CSP, HSTS, frame denial), least-privilege access, multi-factor authentication on administrative accounts, and regular backups. Breaches are notified to the authorities and affected individuals within the statutory timeframes.

9. Children

Our services are directed at persons aged 18 and over. We do not knowingly collect minors' data.