Privacy Policy & Sovereign Data Governance

Saudi Property Digest ("we," "our," "us," or "the Platform") operates as a sovereign digital gateway, market intelligence portal, and bespoke luxury real estate advisory bridge across the Kingdom of Saudi Arabia (KSA) and the wider Gulf Cooperation Council (GCC) region.

This Privacy Policy delineates our rigorous institutional protocols for the collection, governance, processing, storage, and safeguarding of personal and financial information provided by prospective investors, property owners, institutional entities, family offices, and sovereign wealth representatives.

Our data processing practices strictly comply with applicable privacy statutes across the jurisdictions in which we operate:

In accordance with Royal Decree No. M/19 and implementing regulations issued by the Saudi Data & Artificial Intelligence Authority (SDAIA), all data subjects maintain statutory rights regarding their personal identifiable information (PII).

Depending on your engagement with our portal and private client advisory desk, we collect:

We process personal and investment information solely under valid lawful bases recognized by KSA PDPL and international law:

• Advisory Fulfillment: Providing private client consultations, scheduling VIP viewing tours, and preparing bespoke investment dossiers.
• Giga-Project Allocation: Facilitating early-stage off-plan developer allocations for NEOM, New Murabba, Diriyah Gate, and Red Sea Global developments upon explicit client instruction.
• Financial Simulation: Delivering real-time currency conversion, ROI modeling, and SAMA-compliant mortgage simulation calculations.
• Regulatory Compliance: Fulfilling statutory requirements including anti-money laundering (AML), know-your-customer (KYC) verifications, and REGA registration guidelines.
• Exclusive Briefings: Dispatching requested off-market market intelligence reports and macroeconomic digests.

In the ultra-prime real estate and sovereign development sector, absolute confidentiality is paramount. All private client engagements, off-market mandates, and high-value transactions are conducted under binding Non-Disclosure Agreements (NDAs).

In compliance with the KSA Personal Data Protection Law regulations on cross-border data transmission:

• Primary databases and master client records are maintained in secure data centers situated within the Kingdom of Saudi Arabia and recognized high-standard GCC hubs.
• When serving international clients (e.g. European, Asian, or American family offices), cross-border communication occurs via end-to-end encrypted protocols adhering to Standard Contractual Clauses (SCCs).
• No personal data is transferred to any jurisdiction failing to provide an adequate level of statutory protection as assessed by SDAIA.

Our platform operates on a privacy-first architecture. We utilize minimal local storage and essential cookies strictly to enhance your browsing experience:

• Preference Storage: Saving your selected language (Arabic/English), display currency (SAR, AED, USD, EUR, GBP), and metric unit (SQM/SQFT).
• Security & Session Integrity: Ensuring modal interactions, calculation models, and inquiry forms function reliably without session tampering.
• No Intrusive Behavioral Trackers: We do not deploy invasive third-party cross-site advertising pixels or surveillance trackers.

Under the Saudi PDPL and international data frameworks, you are entitled to:

• Right to Information: Know the specific legal basis and purpose for the processing of your data.
• Right to Access: Request a complete copy of your personal identifiable data held by our advisory desk.
• Right to Correction & Rectification: Request correction or updating of incomplete, outdated, or inaccurate records.
• Right to Destruction / Erasure: Request the deletion of your personal records once the advisory mandate or transaction inquiry has concluded, subject to statutory statutory holding periods.
• Right to Withdraw Consent: Withdraw consent for marketing briefings and market digest dispatches at any time.

To exercise any of these rights, contact our Data Protection Officer at privacy@saudipropertydigest.com. Requests are fulfilled within thirty (30) business days.

We implement comprehensive technical and organizational measures to protect personal data against accidental loss, unauthorized access, destruction, or alteration:

• Transport Layer Security: All data transmitted to and from our web portal is encrypted using TLS 1.3 encryption.
• Data at Rest: Internal client files and advisory communications are protected with AES-256 encryption.
• Access Governance: Multi-factor authentication (MFA) and strict principle-of-least-privilege access controls governing our advisory staff.
• Incident Response Plan: SDAIA-compliant breach detection and notification protocols with statutory reporting within 72 hours if any incident occurs.

For questions regarding this Privacy Policy, statutory rights requests, or regulatory communications, please address our Data Protection Officer: