Home · Privacy Policy
Last updated: 22 August 2026
This Privacy Policy explains how Haramain Properties (“we”, “us”, “our”) collects, uses and protects personal information when you use haramain-properties.com. We are a UK-based advisory and information business serving Muslim buyers worldwide who are interested in property in Saudi Arabia, and this policy is written to meet the UK GDPR and Data Protection Act 2018, the EU GDPR where it applies to visitors in the European Economic Area, and the Privacy and Electronic Communications Regulations (PECR).
Haramain Properties is the controller of the personal data described in this policy. You can reach us about anything in this policy by email at salam@haramain-properties.com or through the contact page on this site. If we appoint a representative in the EEA or elsewhere, this policy will be updated with their details.
We do not knowingly collect data from children under 16, and this site is not directed at them. We do not collect special category data, and we ask that you do not send us any. Please note that in the context of our service, an enquiry about property in Makkah or Madinah may allow religion to be inferred, because Saudi law reserves ownership in the Holy Cities to Muslims; we never record religion as a data field and we use your enquiry solely to respond to it.
We do not sell personal data, we do not use automated decision-making that produces legal effects about you, and we do not use your data for third-party advertising.
Form submissions are stored in this website’s administration system, hosted by Fasthosts Internet Ltd on servers in the United Kingdom, and copies arrive in our email. If we adopt a customer relationship management (CRM) system in future, your data will be moved into it under the same commitments in this policy.
We serve enquirers worldwide, including in the EEA, the Gulf and elsewhere. Your data is hosted in the UK, which the European Commission recognises with an adequacy decision, so EEA-to-UK transfers are lawful without further safeguards.
If you ask us to introduce you to parties in Saudi Arabia (for example a developer, law firm or bank), fulfilling that request means transferring the details you choose to share to a country that does not have a UK or EU adequacy decision. We will only do this at your direction, we will share the minimum needed for the introduction, and by asking us to make the introduction you consent to that transfer. Recipients in Saudi Arabia are themselves subject to the Saudi Personal Data Protection Law (PDPL). If you are dealing with the official Saudi Properties portal, its own privacy terms apply to what you submit there.
We keep enquiry and registration details while your interest remains active and for up to 24 months after our last meaningful contact, after which they are deleted or anonymised, unless the law requires longer retention (for example for transaction records) or you ask us to delete them sooner. Server logs are retained by our host on a short rolling basis.
Under the UK GDPR and, where applicable, the EU GDPR, you have the right to: access a copy of your data; correct it; have it erased; restrict or object to our processing; data portability; and withdraw consent at any time without affecting prior processing. To exercise any right, email us and we will respond within one month. We may need to verify your identity first.
If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ico.org.uk). If you are in the EEA, you may instead complain to your local supervisory authority.
Some content on this site is loaded from third parties, which means your IP address is disclosed to them when the relevant page loads: our interactive maps use map tiles from CARTO and OpenStreetMap, and our enquiry and registration forms are protected by Cloudflare Turnstile (see below). Our fonts are served from our own website. Details, and the cookies this site uses, are set out in our Cookie Policy.
Anti-spam — Cloudflare Turnstile. To protect our forms from spam and automated abuse, we use Cloudflare Turnstile, a bot-detection service provided by Cloudflare, Inc. When you load or submit one of our forms, Turnstile may collect and process technical information about your device and connection — such as your IP address and browser characteristics — to confirm you are a genuine visitor rather than a bot. Turnstile is designed to be privacy-preserving: it does not use this information for advertising or cross-site tracking. Our lawful basis is our legitimate interest in keeping our website and enquiries secure. For more detail, see Cloudflare’s Privacy Policy and its Turnstile Privacy Addendum.
We will update this policy as our services or the law change, and the date at the top will always show the latest version. Significant changes will be highlighted on this page.
This policy is provided in good faith and reviewed against current UK and EU requirements. It is not a substitute for tailored legal advice.