Privacy Policy
This Privacy Policy ("Policy") constitutes a legally binding agreement between you ("User" or "You") and SIR Real Estate Company, ("Company," "We," or "Us").
We are committed to protecting your privacy and safeguarding your personal data by complying with the Personal Data Protection Law and its Implementing Regulations, as well as adhering to this Policy, which describes the types of personal data we may collect from you, or that you may provide through the Website, and the mechanisms for collecting, using, processing, storing, protecting, disclosing, and destroying such data. This Policy also outlines the options available to you regarding our use of your personal data and your ability to access and update it.
Company Information and Contact Details:
We may request the following from you:
- Company Name: SIR Real Estate Company
- Official Address: King Fahd Road, Al Olaya District, Riyadh 12212.
- Phone Number: +966 11 834 9623.
- Email Address for Personal Data Inquiries: [email protected]
1. Personal Data We Collect:
We collect your personal data made available through the website as follows:
1.1. Name, contact number, email address, and login credentials (such as username and password).
1.2. Address, including postal code, as well as your preferences and interests.
1.3. Information related to cookies in accordance with Clause (4) of this Policy, and any other information you provide to us in connection with customer surveys or promotional offers.
2. How We Use the Information We Collect:
All information we request from you is necessary to better understand your needs and improve the services we provide, and is used for the following purposes:
2.1. To send periodic promotional emails to your email address regarding new products, special offers, or promotional content related to third parties that we believe may be of interest to you, as well as any other information we consider relevant to your interests.
2.2. To contact you occasionally for market research purposes via email, telephone, fax, or postal mail.
2.3. To customize the Website to better match your interests.
3. Security and Protection of Personal Data:
3.1. We are committed to maintaining the security of your Personal Data and not disclosing it except in accordance with Clause (9) of this Policy. We process your Personal Data on a lawful basis and in compliance with applicable laws for the purpose of providing the Services and operating our business. We obtain your explicit consent only where required by law, in relation to direct marketing activities and the use of cookies. By providing us with your Personal Data, you expressly acknowledge and agree to the collection and processing of such data, subject to the implementation of appropriate safeguards.
3.2. We secure the information you provide by storing it on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure.
3.3. We have implemented appropriate administrative, technical, and physical safeguards to protect your information from unauthorized access, leakage, use, alteration, or disclosure.
4. Cookies:
We use cookies to identify which pages you visit, which helps us monitor traffic on our Website and improve its functionality to better meet the needs of our customers. The information generated from cookies is used solely for statistical analysis purposes, after which the data is removed from the system. You have the option to accept or decline cookies when visiting the Website by adjusting your browser settings to reject all cookies or to notify you when a cookie is being sent.
5. Links to Other Websites:
While browsing our Website, you may encounter links to other websites that may be of interest to you. Please note that we do not control any external websites. If you click on any such link and leave our Website, we bear no responsibility for the protection of your privacy or any personal information you may provide when visiting those external websites, as they are not governed by this Policy. We encourage you to review the privacy policy of the respective website and exercise caution when providing any personal information.
6. Location of Personal Data Storage:
6.1. Personal data is securely stored either on the Company’s premises or in hosting environments located within the geographical boundaries of the Kingdom of Saudi Arabia, in order to ensure national data sovereignty and uphold the national principles for personal data protection.
6.2. We will retain personal data for as long as necessary in accordance with this Policy and as required under any applicable laws or regulations.
6.3. Your personal data may be processed, transferred, or stored by our affiliates or by third-party service providers in one or more countries outside the jurisdiction to which you belong. We will take all necessary steps and implement appropriate safeguards to maintain the security of your personal data at all times, in accordance with our Privacy Policy and in compliance with the applicable laws, regulations, and directives issued by the Saudi Data and Artificial Intelligence Authority (“SDAIA”).
6.4. Where personal data is transferred to or processed outside the geographical borders of the Kingdom of Saudi Arabia, this shall only take place in cases where such transfer is permitted under the Personal Data Protection Law and its Implementing Regulations, with all appropriate safeguards being adopted to protect the personal data. In cases where the law requires the approval of the competent authorities, we undertake to obtain the necessary approvals before completing the transfer of the personal data.
7. Retention of Personal Data after the Purpose of Collection Has Been Fulfilled:
We retain your Personal Data even after the purpose for which it was collected has been fulfilled only in the following cases:
7.1. Where there is a legal basis requiring its retention for a specified period. In such case, it shall be destroyed upon expiry of such period or upon fulfillment of the purpose of its collection, whichever is later.
7.2. Where the Personal Data is closely connected to a case before a judicial authority and its retention is required for such purpose. In such case, it shall be destroyed upon completion of the judicial proceedings relating to such case.
8. Mechanism for the Disposal of Personal Data:
Upon the fulfillment of the purpose for which your personal data was collected, such data shall be securely disposed of or destroyed in a manner that prevents its loss, misuse, or unauthorized access, in accordance with the Personal Data Protection Law and its Implementing Regulations.
9. Disclosure of Personal Data:
Where necessary. Nevertheless, it will not be disclosed to the public or to any third party without your prior consent. Accordingly, disclosure of your personal data shall be limited to the following cases:
9.1. Where you have consented to such disclosure in accordance with the Personal Data Protection Law and its Implementing Regulations.
9.2. Where your personal data has been collected from a publicly available source.
9.3. Where the requesting entity is a public authority and the disclosure is required for security purposes, the implementation of another law, or to comply with judicial requirements, in accordance with the applicable laws and regulations.
9.4. Where the disclosure is necessary to protect public health or safety, or the life or health of an individual or specific individuals.
9.5. Where the disclosure is limited to processing in a manner that does not lead to the identification of the data subject or any other specific individual.
10. Rights Related to Personal Data:
As the personal data subject and owner thereof, you are entitled to the following rights in accordance with the Personal Data Protection Law and its Implementing Regulations:
- Right to be informed: This includes your right to be informed of the legal basis for the collection and processing of your personal data.
- Right of access to personal data: This includes your right to access your personal data and review it in a readable and clear format.
- Right to rectification and updating of personal data: Your right to correct, complete, or update your available personal data.
- Right to request destruction: Your right to request the destruction of your personal data held by the Company once it is no longer needed.
- Right to withdraw consent to the processing of personal data: Your right to withdraw your consent to the processing of your personal data by sending an email to: [email protected].
11. How Your Personal Data Is Managed:
You may choose to withhold your personal data or restrict the use of any previously collected data through the following methods:
11.1. Whenever you are requested to fill out a form on our website, you may check the box indicating that you do not wish your information to be used for direct marketing purposes.
11.2. If you have previously consented to the use of your personal data for direct marketing and wish to opt out of any future marketing communications, you may do so by sending an email as outlined in Clause (10).
12. Security Incidents and Data Breach Response:
In the event of an incident affecting Personal Data, we shall notify SDAIA within seventy-two (72) hours from the time of becoming aware of such incident, and we shall notify you if such breach is likely to result in harm to your Personal Data or your rights
13. General Provisions:
13.1. We will promptly update the relevant information to ensure it is accurate.
13.2. We may update this Policy from time to time by amending this page. We recommend that you review this page periodically.
13.3. We will not publish, sell, distribute, or lease your Personal Data to any third party unless we have obtained your explicit consent to do so, or as otherwise provided under Clause (9) above.
13.4. You may request details of any Personal Data we have collected pursuant to the Personal Data Protection Law issued under Royal Decree No. (M/19) dated 09/02/1443H, subject to payment of a nominal fee.
13.5. If you wish to obtain a copy of your Personal Data, or if you believe that the information we have collected from you is inaccurate or incomplete, please send an email to the address stated in Clause (10).
13.6. If you have any concerns or believe that we have not complied with the Personal Data Protection Law, you may submit a complaint by sending an email as specified in Clause (10).
13.6.1 If you are not satisfied with the outcome of your complaint, or if you do not receive a response within thirty (30) calendar days from the date the complaint was received, you may escalate the matter to the Saudi Data and Artificial Intelligence Authority (SDAIA) by submitting a complaint through the National Data Governance Platform via the following link: