Privacy Policy

We collect and process the personal data needed for the way you interact with the Website and the services and forms available through it.

Information you give us directly

The data you provide through the Website's forms may include:

• Your name.
• Your email address.
• Your mobile number.
• The content of the messages or enquiries you send us.
• Your company's name and contact details, when you contact us on behalf of a company or register as a vendor.
• Your property preferences, such as the purpose of purchase, the type of unit and the payment method, when you register your interest in one of our projects.
• The visit date you request, when you book a visit.
• When you apply for a job: your CV, nationality, city and country, academic qualifications, work experience, current position and employer, expected salary, and links to the accounts or professional profiles you provide.
• When you register as a vendor: your company's details, the nature of its business, its areas of operation, commercial registration number, VAT number, IBAN, and other information needed to assess or register the vendor.

The data requested differs by form and purpose. Some data may be necessary to complete your request or to contact you; if it is not provided, we may be unable to process the request or provide the related service.

Information collected automatically

When you visit the Website, some technical information may be collected automatically, including:

• Your Internet Protocol (IP) address.
• Your browser, device and operating system.
• The pages you visit and how you interact with them.
• The length and time of your visit.
• The source or way you reached the Website.
• Cookies and similar tracking technologies.
• Technical information about the Website's performance and security.

We also use certain technical services and tools provided by third parties, including Google Analytics to analyse use of the Website, Google Tag Manager to manage the tags and technologies used on the Website, and Google reCAPTCHA to help protect forms from automated messages and abuse. These services may process certain technical information about your device, connection or interaction with the Website, according to the nature of each service.

We use your personal data only for purposes related to the reason it was collected. These purposes may include:

• Responding to your enquiries and contact requests.
• Processing requests to register interest in our projects and contacting prospective clients about them.
• Arranging and managing visit bookings.
• Providing the information or services you request from us.
• Processing and assessing job applications and contacting applicants.
• Assessing vendor registration requests and managing communication with vendors.
• Operating and maintaining the Website and improving its performance and ease of use.
• Analysing how visitors use the Website and measuring its performance.
• Protecting the Website, its forms and related systems from abuse, fraud or unauthorised activity.
• Meeting legal and regulatory requirements and keeping records where needed.
• Exercising or defending our legal rights.
• Sending communications or marketing material where the law permits it, and after obtaining consent where consent is required.

We process your data on the legal basis appropriate to the processing, which may include your consent, taking steps at your request, performing a contractual or legal obligation, or pursuing a legitimate interest of Urubah without prejudice to your legally protected rights and interests.

We will not use your personal data for a new purpose incompatible with the one for which it was collected, unless the law permits it or we have obtained your consent where required.

We disclose your personal data only to the extent needed for the purposes described in this policy, and in accordance with the laws in force.

Where needed, we may disclose some of your data to:

• Technical, hosting and maintenance service providers who help us operate the Website and its related systems.
• Providers of website analytics and performance measurement, including technical services provided by Google.
• Marketing or communication service providers contracted by Urubah, where their involvement is necessary to provide the service or fulfil the specified purpose.
• Professional advisers, such as legal advisers, accountants or auditors, when the need arises.
• Government, regulatory, judicial and other competent authorities, where disclosure is required or permitted under the laws in force.

Data may also be disclosed in the course of a business restructuring, merger, acquisition or transfer of part of Urubah's business; in such cases the data will be processed in accordance with legal requirements and appropriate safeguards.

When we engage service providers to process data on our behalf, we make sure that the processing is limited to the specified purpose and that appropriate measures are in place to protect personal data.

Some of the technical services we use, including some provided by global service providers, may require certain personal data to be processed or stored outside the Kingdom of Saudi Arabia.

When personal data is transferred, disclosed or processed outside the Kingdom, we make sure this is done in accordance with the Personal Data Protection Law, its regulations and the applicable rules on transferring personal data outside the Kingdom, with appropriate safeguards and measures to protect it.

We keep your personal data only for as long as needed for the purposes for which it was collected, in line with the relevant legal and operational requirements.

How long we keep it depends on the type of data and its purpose, including:

Enquiries, contact and registered interest

For as long as needed to follow up the request and manage the related relationship.

Visit bookings

For as long as needed to manage the visit and its follow-up.

Job applications

For as long as needed to assess the application and complete the recruitment process, or to keep it for future opportunities where permitted.

Vendor data

For as long as needed to assess the vendor, manage the relationship and meet the relevant legal and commercial requirements.

Technical and website usage data

For the period needed for analysis, security and improving the Website, and according to the settings of the technical tools used.

We may keep some data for longer where a law or regulation requires it, to meet legal or regulatory obligations, or to protect legal rights and claims.

When the data is no longer needed and there is no legal basis for keeping it, it is deleted or destroyed securely, or anonymised so that it can no longer be linked to you.

Under the Personal Data Protection Law and the laws in force, you have a number of rights over your personal data, depending on the nature of the processing and the legal basis that applies. They include:

The right to be informed

You may know how your personal data is collected, the purpose of collecting and processing it and its legal basis, how it is used and kept, and to whom it may be disclosed.

The right of access

You may request access to the personal data we hold about you, in accordance with the legal rules.

The right to a copy

You may request a copy of the personal data we hold about you in a clear and readable format, where possible and in accordance with the laws in force.

The right to correction

You may request that your personal data be corrected, completed or updated if it is inaccurate, incomplete or out of date.

The right to request destruction

You may request the destruction of your personal data when the purpose of processing it has ended or in the cases set by law, unless a legal basis requires us to keep it.

The right to withdraw consent

Where processing relies on your consent, you may withdraw it at any time, unless another legal basis allows the processing to continue.

The right to complain

You may contact us with any question or complaint about the processing of your personal data, and you may also lodge a complaint with the competent personal data protection authority in accordance with the applicable legal procedures.

To exercise any of these rights, you can contact us at:

We may ask you for some information to verify your identity before acting on your request, to protect your data from access, change or destruction by unauthorised persons.

We will handle your request within the statutory periods and in accordance with the Personal Data Protection Law and its regulations.

The Website uses cookies and similar technologies to help operate and protect the Website, understand how it is used, and improve its performance and the user experience.

Cookies are small files or technical identifiers that may be stored on or read from your device when you visit the Website.

Necessary and security cookies

Some technologies support the Website's essential functions and protect forms and systems from unlawful use, automated messages and harmful activity. The services used for this purpose may include Google reCAPTCHA.

Analytics and performance

We use Google Analytics to obtain information that helps us understand how visitors use the Website, such as the pages visited, the time spent and interaction with content, in order to measure and improve the Website's performance.

Tag and technology management

We use Google Tag Manager to manage and run the tags and technologies used on the Website in an organised way. Measurement and analytics tools or other technologies used on the Website may be run through it.

Information collected by third-party services may be processed in accordance with the privacy policies and terms of the providers of those services.

You can control, delete or block cookies through your browser settings. Disabling some necessary cookies or technologies may stop some features of the Website from working as expected.

Where the law requires your consent for non-essential technologies or cookies, they are handled in accordance with the applicable legal requirements.

We take appropriate administrative, organisational and technical measures to protect your personal data from loss, damage, and unauthorised access, use, alteration or disclosure.

We also limit access to personal data to the people or parties who need it to perform specific tasks, within the permissions granted to them.

However, no method of transmitting or storing data can be guaranteed to be completely secure, so we review our protective measures and develop them in proportion to the nature of the data and the risks of processing it.

We may update this Privacy Policy from time to time to reflect changes in our practices, our services or the relevant legal requirements.

The updated policy will be published on this page with its last updated date, and changes take effect from the date stated in the published version, unless stated otherwise.

If a change requires your new consent under the laws in force, we will ask for it in the appropriate way.

We recommend reviewing this page from time to time for any updates.

If you have any question, request or complaint about this Privacy Policy or about how your personal data is collected or processed, you can contact us at: