Al-Ramz Privacy Policy

This Privacy Policy provides you with information on how Alramz Real Estate  (“Al-Ramz”, “we”, “us”, “our”) collects, uses, processes or discloses personal data (or sensitive data) that we may obtain from you. Al-Ramz values your trust and is committed to the responsible management, use and protection of your personal data.
 
About us
Al-Ramz was established in September 2016 in the Kingdom of Saudi Arabia, and is forward looking company fuelled by its passion for establishing a new concept for the architectural environment and residential communities.
 
If you have any questions or concerns regarding our use of your personal data, or if you wish to exercise any of your rights described in this Privacy Policy, please contact Infoprivacy@alramzre.com.
 
Not covered by this Policy
This Privacy Policy does not apply to job applicants, students, interns,  our employees and non-employee workers, whose personal data is subject to different privacy notices and are provided in the context of employment or upon submitting an application. Employees and non- employee workers should speak to the HR department or refer to the Al-Ramz Employee Privacy Notice and job applicants (including paid interns) should refer to the Al-Ramz Candidate Privacy Notice.
 
Definitions
“Applicable Laws” means the applicable privacy and data protection legislation in your home jurisdiction.
“Al-Ramz locations or sites” includes our sales offices, and our properties that we rent out.
“External stakeholders” means former, current, and prospective customers (these include tenants and landlords and can be individuals or companies), suppliers of goods or services, including agents, government or public officials, or other stakeholders Al-Ramz interacts with, as part of its business activities.
“Personal data” means any data, regardless of its source or form, that may lead to identifying an individual specifically, or that may directly or indirectly make it possible to identify an individual, such as; name, personal identification number, addresses, contact numbers, license number, bank and credit card numbers, photos and videos of an individual, and any other data of personal nature, including any sensitive data as defined under Applicable Laws.
“PDPL” means the Personal Data Protection Law.
“Sensitive data” means any racial or ethnic origin, or religious, intellectual or political belief, data relating to security criminal convictions and offenses, biometric or genetic data for the purpose of identifying the person, health data, and data that indicates that one or both individual’s parents are unknown.
 
What personal data do we collect?
We may collect, store and use personal data or categories of personal data described below, that is mandatory for our business purposes. This information will generally be received either from you personally or from the company with whom you are working. There is some information, such as sensitive data that may be collected indirectly, such as through CCTV.
 
From our external stakeholders, and or when you visit or interact with us
We may collect, use, process and disclose the following personal data from you, or others. The information collected is dependant on the relationship we have with you, such as, customer, agent, landlord, tenant, or supplier, and the like.
Your name, company name and address, job title, gender, home address (includes landlord and tenant’s address) date of birth, credit history, marital status, previous addresses, and contact information (this information is mandatory);
Transactional or financial information, including, but not limited to, Articles of Incorporation, power of attorney, information regarding the property for sale or letting, title deed information, credit report from Saudi Credit Bureau (SIMAH), a Solvency Certificateor Proof of Funds Certificate, and or other financial/banking information to facilitate payment (this information is mandatory);
Audio and or photographic/video: audio, electronic, visual, or similar such as, CCTV footage, or photographs, if you physically visit any of our Al-Ramz locations or participate in any live events that may be recorded (this information is mandatory as the use of CCTV is required for prevention and detection of crime, and health and safety reasons, and recordings of live events may also be used, with your consent  for marketing and promotional purposes);
Employment and salary information, such as a Salary Certificate (this information is mandatory);
Sensitive data such as health information, or race or ethnicity, either directly or indirectly (this information will be mandatory, as there is indirect collection, such as religious clothing worn and captured on CCTV can confirm someone’s religion, or where health is required for the individuals’ vital interests, and or legal or regulatory reasons);
Government identifier such as National ID number or Iqama to verify identity. For non KSA citizens, we may require a passport to verify identity (this information is mandatory);
Information you voluntarily provide us (this information is optional and freely provided by you, and not necessarily requested or required by us);
In certain circumstances, we may collect personal data from children, see below under Children’s personal data.
From visitors of our Al-Ramz websites, or online platforms, such as Snapchat, TikTok, Instagram, Facebook, and our Atar maintenance App
We may collect, use, process and disclose the following personal data from you:
Your name, and contact information;
Usage data: internet or other electronic network activity information including, but not limited to, your interaction with our websites or microsites, or email communication;
Geolocation data: precise geographic location information from your use of our website;
Cookies, see below for more information and visit cookies preferences on the website.
 
Children’s personal data
Whilst our services are not directed to children, in some instances we may collect, use, process, and disclose personal data from children of all ages. We recognise our responsibility to provide suitable privacy protection to personal data we collect from children under 18 years, which will only be collected, where they attend our offices or sites with a parent or guardian or where required. We put in place several measures to protect that child’s personal data such as:
notifying parents or guardians about the processing and obtaining consent where necessary;
ensuring any data collected is kept to a minimum;
where permitted by law, allowing parents or legal guardians the right to request the personal data collected about their child and ask for such to be amended or deleted.
Please note, these rights are not absolute.
 
We can confirm that personal data collection and processing for children, is limited to CCTV only when visiting our sites or offices.
Legal bases for processing your personal data 
We may process your personal data for the following purposes:
Performance of contract – to manage our business relationship and execute our business arrangements with you (and or your company);
With your consent:
for us to correspond with you where you have contacted us through our “get in touch” page, through our chat function, through our social platform, or sent us an email, or wish to partake in any events either in person or online;
Only if legally required or where no other lawful basis will apply. In those cases where processing is based on consent, and subject to the PDPL which provides otherwise, you have the right to withdraw your consent at any time by emailing Infoprivacy@alramzre.com. This will not affect the validity of the processing prior to the withdrawal of consent;
To send you any marketing communications where you have previously provided us consent. This would be to promoting contact with existing and prospective customers, partners, stakeholders or suppliers. We may also notify you about updates to our websites, businesses, or services;
To take images of you, if you agree to have your photo taken at an Al-Ramz event.
Processing pursuant to another law
For health and safety and security – such as for visitors to our sites, we process your personal data to adhere to health and safety laws, or for security reasons to keep you, and us safe;
To investigate and report on your feedback, complaints and grievances and known or suspected misconduct, suspicious activity, fraudulent, or criminal activity, and includes any other activity that may have occurred on our site or location, that we assess may cause you, us, or others harm, in accordance with Applicable Laws;
There may be qualifying legal or regulatory reasons to process your personal data.
For vital interests to protect your life.
For the purposes of our legitimate interests – pursued by Al-Ramz except where such interests are overridden by the interests or fundamental rights and freedoms of the individual/s. Our legitimate interests may include:
To measure and improve our business, services and performance, or to perform analyses on data we have collected, such as market analysis, trends and other research;
To conduct searches about your identity, your current and past residency addresses, and your right to live or buy in the KSA and credit history to meet applicable laws and to provide a recommendation to landlord clients, on your suitability as a tenant;
To deal with feedback or complaints relating to Al-Ramz business activities (including Al-Ramz offered, managed, or owned properties)
To contact you in the first instance to ask whether you would like to hear from us, and if so, we shall request consent. 
 
How do we collect your personal data?
Some of the personal data that we process is obtained directly from you, either when you visit our website, use our Contact Us form, or when you correspond with us through email or phone.  We also obtain some personal data from third parties where applicable, or indirectly from your use of cookies.
How do we share your personal data, and to whom?
We may share/disclose your personal data with the following:
Recipient (and country)
Purpose
Personal data
Microsoft Office 365 (EU)
Communication and collaboration;
Emails.
Any or all of the personal data described above, more likely to be contact information.
Internal, between our Al-Ramz offices (KSA)
Such as; sales, marketing, procurement, facilities, etc.
Business reasons on a need to know, and as and when required basis (role based).
Access control.
Any or all of the personal data described above, more likely to be contact information, audio/CCTV, indirect sensitive data as described above.
Microsoft Dynamics 365 (EU)
Enterprise Resource Planning (ERP);
Financial management; Vendor relationship management (VRM).
 
Contact information as described above.
Microsoft Dynamics CRM (EU)
Customer relationship management (CRM);
Marketing automation; Sales tracking.
Contact information as described above.
Al-Ramz website, hosted by Google Cloud Platform (US)
When you contact us through our Contact Us page;
When you visit our website.
Contact information, usage, geolocation and cookies data as described above.
Atar Application, hosted by Google Cloud Platform (KSA)
 
 
To log and track maintenance issues at properties that we manage.
Contact information, property address.
MobiShastra (KSA)
Sends notifications and marketing by SMS.
Contact information as described above.
Unifonic (KSA)
Sends notifications and marketing by WhatsApp.
Contact information as described above.
Al Rowad Al Fareedah Company (Egypt, KSA, and UAE)
Provides support services for ERP.
Contact information as described above.
LeadsBridge
For auto registration and integration between social media platforms and our CRM system.
Contact information as described above.
Mullak (KSA)
For you to be part of Real Estate Owners Association to assist with property and facility management.
Contact information, property address, title number of property, and National ID number.
Social media platforms, such as Snapchat, TikTok, Instagram, Facebook (US)
When you contact us via social media direct message.
Contact information as described above.
Law enforcement, or government entities, such as, but not limited to, the Ministry of Commerce, the General Real Estate Authority, the Real Estate Registry, and the Real Estate Exchange (KSA)
Where required by law.
Any of the personal data as described in table above, as required.
Health care professionals (KSA)
For example, if a health related incident occurred where you visit any of our offices, or sites.
Contact information, and any other information (including sensitive data) that may be applicable for your vital interests.
Postal or courier companies (KSA)
To deliver you a gift on our behalf
Contact information as described above.
Financing companies or advisors (KSA)
To assist with providing finance for those that wish to purchase properties.
Contact information as described above.
Our external advisors, such as lawyers (KSA)
To provide us with internal advice to protect our interest, and or draft contracts, or  power of attorneys to provide you with services.
Contact information, and any other information as required.
 
We may process or transfer your personal data to any country where we engage third-party agents or service providers as described above, and so you understand that your information will be transferred to countries outside of your country of residence. Where the transfer is subject to appropriate safeguards for international transfers as prescribed by Applicable Law, for example if we are sharing your personal data with a third party, as required, the contract with them will have appropriate contractual clauses (and any standard contractual clauses, if the transfer is to a non-adequate country) or other obligations in the contract requiring appropriate technical, organizational and security measures to protect your personal data.  To find out more, please email Infoprivacy@alramzre.com.
 
How do we store your personal data and for how long?
We will only retain personal data for as long as necessary to fulfil the purpose for which it is processed or as required by Applicable Laws or any litigation hold, to which we are subject, including to meet any legal requirements. Data is retained within the appropriate service providers described above, in accordance with our retention schedule.
 
Please note that if you unsubscribe from our marketing communications, we will keep a record of your email address to ensure we do not send you marketing communications in the future.  For all other purposes, we shall retain your personal data for 6 years, after termination of our relationship with you, and or in accordance with the law, whichever is greater.
 
Your personal data rights
As a data subject, you have a number of rights under the PDPL, which primarily depend on the purpose of personal data collection and processing, these include:
Right to be informed: you are entitled to be informed how we collect your personal data, legal basis for collection and processing, how such data is processed, stored, destroyed, and to whom it will be disclosed.
Right of access to your personal data: you are entitled to request access to your personal data by contacting us using the below mentioned information.
Right to request access to your personal data: you are entitled to request access to your personal data held by us in a readable and clear format if technically feasible through electronically encrypted means. 
Right to request correction of your personal data: you are entitled to request correction of your personal data that you believe is inaccurate, incorrect or incomplete, by contacting us using the below mentioned information. Such data will be reviewed and updated within 30 days. In addition, you will be notified that your data has been corrected by email.
Right to request destruction of your personal data: you are entitled to request destruction of your personal data in certain circumstances, for example, we will not destroy your personal data if there is a legal or business requirement for us to retain your personal data, in accordance with Applicable Laws.
Right to withdraw your consent for processing your personal data: you are entitled to withdraw your consent for processing your personal data at any time unless there are legal bases that require otherwise. You may exercise your right to withdraw, by contacting us using the below mentioned information.
 
Please note, however, these rights are not absolute, and we will explain to you if we rely on any exemptions when responding to you. If you would like to exercise any of these rights, please contact us using the below mentioned information.
 
Security of your personal data
We maintain technical, physical and organisational measures intended, as required under Applicable Laws, to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access.
The use of cookies and similar technologies
We may use cookies and similar technologies that aim to collect and store information when you visit our website. You can control and manage your cookie preferences at any time. At the time of writing, we confirm that our website only uses strictly necessary cookies.
 
Contact information and complaints
If you have any questions or concerns regarding our use of your personal data, or if you wish to exercise any of your rights described in this Privacy Policy, please contact Infoprivacy@alramzre.com.
 
Should you wish to raise a complaint about how Al-Ramz processes your personal data, we ask in the first instance you allow us the opportunity to rectify your concerns by emailing Infoprivacy@alramzre.com.  If you are not satisfied with how we deal with your concerns,  or we fail to respond within 30 days, you may lodge a complaint with the Competent Authority, namely SDAIA here.
 
Changes to this Privacy Policy and other information
This Privacy Policy may be changed over time. You are advised to regularly review this Privacy Policy for possible changes. This Privacy Policy was last updated in July 2025.
 
For ease of reference, the Personal data Protection Law can be accessed here.