Privacy Policy
Your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal information when you interact with our website and services. By using our site, you agree to the practices described in this policy. We encourage you to read it carefully to understand how your data is handled.
Alama Realty (Alamat Alardh Real Estate Company)
1. Introduction
Alama Realty ("we," "us," "our") is committed to protecting your personal data and privacy. This Policy explains how we collect, use, disclose, and safeguard personal data in compliance with Saudi Arabia's Personal Data Protection Law (PDPL) and its Implementing Regulations.
2. Scope & Applicability
- Who: All users aged 18 or above (buyers, sellers, agents, developers, partners).
- Where: Applies to personal data collected via our website, mobile applications, API integrations (including login via Nafath, social, phone or email).
- When: From first interaction through account termination and post-termination retention periods.
3. Controller & Contact Information
Controller: Alama Realty, Riyadh, KSA
Data Protection Officer (DPO): privacy@aalama.com
Escalation & Breach Reporting: escalation@aalama.com
4. Definitions
- Personal Data: Any information relating to an identified or identifiable natural person.
- Sensitive Data: Special categories under PDPL (e.g., health, biometric). We do not process Sensitive Data.
- Processing: Any operation on personal data (collect, store, use, disclose, delete).
- Data Subject: Individual whose personal data is processed.
- Processor: Third party acting on our behalf (e.g., hosting, analytics).
5. Personal Data We Collect
| Category | Examples | Basis |
|---|---|---|
| Account & Identity | Name, email, phone, Nafath ID, third-party login token | Contract, Consent |
| Profile & Preferences | Age, gender, job title, language preference | Legitimate Interest |
| Usage & Interaction | Pages viewed, searches, saves, reports, applications | Legitimate Interest |
| Communications | Messages, attachments, support tickets | Contractual Necessity |
| Technical & Device | IP address, device/browser data, cookies, logs | Legitimate Interest |
6. Legal Bases & Purpose of Processing
| Purpose | Legal Basis |
|---|---|
| Account creation & access | Contractual necessity |
| Service delivery (listings, search) | Contractual necessity |
| Complaint resolution & support | Legal obligation / legitimate interest |
| Marketing communications (email/SMS) | Consent |
| Analytics & product improvement | Legitimate interest |
| Fraud detection & security | Legal obligation / legitimate interest |
You may withdraw consent for marketing at any time via email or an unsubscribe link.
7. Data Retention & Deletion
We retain personal data only for as long as needed for the purposes above or to meet legal obligations.
- Active account data: Until account closure + 2 years
- Support tickets & complaints: 5 years per PDPL record-keeping
- Marketing consents/logs: 3 years
After expiry, data is securely deleted or anonymized.
8. Data Sharing & Third-Party Disclosures
We may share your personal data with:
- Processors: Hosting, CRM, analytics, email services (under binding agreements).
- Service Partners: Agents, developers, and financial institutions when fulfilling a listing or transaction.
- Regulators & Law Enforcement: To comply with legal obligations.
- With Your Consent: For joint marketing or data portability.
š” Cross-Border Transfers: Transfers outside KSA occur only when SDAIA has deemed the destination "adequate," appropriate safeguards exist (e.g., SCCs), or a specific PDPL exception applies. All transfers are preceded by a documented Transfer Risk Assessment.
9. Data Security Measures
- Encryption of data in transit (HTTPS/TLS) and at rest
- Role-based access controls and multi-factor authentication
- Regular vulnerability assessments and penetration tests
- Security clauses in third-party processor contracts
10. Your Rights (Under Saudi PDPL)
You may exercise the following rights by contacting our DPO at privacy@aalama.com:
- Access: Obtain confirmation and a copy of your data.
- Rectification: Correct or complete inaccurate data.
- Erasure: Delete data when processing is no longer necessary.
- Restriction: Temporarily limit processing.
- Portability: Receive your data in a structured, machine-readable format.
- Object: Object to processing based on legitimate interest or marketing.
- Withdraw Consent: For consent-based processing (e.g., marketing).
We respond within 30 days, extendable by 30 days for complex requests.
11. Cookies & Tracking Technologies
We use cookies for:
- Essential functionality (session, login)
- Analytics (Google Analytics, Hotjar)
- Marketing (retargeting, personalization)
You can manage or withdraw cookie consent via the on-screen banner or your browser settings.
12. Children's Policy
Our services are strictly for users 18 or older. We do not knowingly collect data from minors. If discovered, we will delete it without undue delay.
13. Policy Changes
We may update this Policy at any time. All changes are effective immediately upon posting at aalama.com/privacy. We will indicate the "Effective Date" at the top. Please review periodically.
14. Contact Information
Privacy Officer: privacy@aalama.com
Escalations & Breach Reports: escalation@aalama.com
Welcome to Alama
We strive to be theĀ simplestĀ and mostĀ trustedĀ property platform in MENA. We enable simpler real estate transactions through technology, services and integration.
Contact
General Enquiries
info@aalama.com
Marketing Enquiries
marketing@aalama.com
Media Enquiries
media@aalama.com
Career Enquiries
careers@aalama.com
+966556586767
Alama Ā© 2026 All rights reserved.