Privacy Policy

Last updated: 7 July 2026

This Privacy Policy explains how Haramain Properties (“we”, “us”, “our”) collects, uses and protects personal information when you use haramain-properties.com. We are a UK-based advisory and information business serving Muslim buyers worldwide who are interested in property in Saudi Arabia, and this policy is written to meet the UK GDPR and Data Protection Act 2018, the EU GDPR where it applies to visitors in the European Economic Area, and the Privacy and Electronic Communications Regulations (PECR).

Who we are and how to contact us

Haramain Properties is the controller of the personal data described in this policy. You can reach us about anything in this policy by email at salam@haramain-properties.com or through the contact page on this site. If we appoint a representative in the EEA or elsewhere, this policy will be updated with their details.

The information we collect

• Enquiry and registration details. When you register your interest or book a consultation we collect the details you choose to give us: typically your name, email address, phone or WhatsApp number, the city you are interested in, your property type preference, your timeline and, optionally, an approximate budget range.
• Correspondence. Messages you send us by email, WhatsApp or through forms on this site.
• Technical data. Our hosting provider records standard server logs (IP address, browser type, pages requested, timestamps) for security and operation of the site. We do not run analytics or advertising trackers at present.

We do not knowingly collect data from children under 16, and this site is not directed at them. We do not collect special category data, and we ask that you do not send us any. Please note that in the context of our service, an enquiry about property in Makkah or Madinah may allow religion to be inferred, because Saudi law reserves ownership in the Holy Cities to Muslims; we never record religion as a data field and we use your enquiry solely to respond to it.

How we use your information and our lawful bases

• Responding to your enquiry (lawful basis: taking steps at your request before entering into a contract, and our legitimate interest in running an advisory business).
• Sending you updates about ownership opportunities and regulatory changes where you have registered your interest (lawful basis: consent; you can withdraw it at any time by emailing us or using any unsubscribe option, and we will stop).
• Introducing you to third parties such as developers, lawyers or banks, only where you ask us to (lawful basis: your consent and steps taken at your request).
• Complying with legal obligations, including record-keeping and, where relevant, anti-money-laundering checks (lawful basis: legal obligation).
• Protecting the site and our business, such as preventing spam and abuse (lawful basis: legitimate interests).

We do not sell personal data, we do not use automated decision-making that produces legal effects about you, and we do not use your data for third-party advertising.

Where your data is stored

Form submissions are stored in this website’s administration system, hosted by Fasthosts Internet Ltd on servers in the United Kingdom, and copies arrive in our email. If we adopt a customer relationship management (CRM) system in future, your data will be moved into it under the same commitments in this policy.

International visitors and transfers

We serve enquirers worldwide, including in the EEA, the Gulf and elsewhere. Your data is hosted in the UK, which the European Commission recognises with an adequacy decision, so EEA-to-UK transfers are lawful without further safeguards.

If you ask us to introduce you to parties in Saudi Arabia (for example a developer, law firm or bank), fulfilling that request means transferring the details you choose to share to a country that does not have a UK or EU adequacy decision. We will only do this at your direction, we will share the minimum needed for the introduction, and by asking us to make the introduction you consent to that transfer. Recipients in Saudi Arabia are themselves subject to the Saudi Personal Data Protection Law (PDPL). If you are dealing with the official Saudi Properties portal, its own privacy terms apply to what you submit there.

How long we keep your data

We keep enquiry and registration details while your interest remains active and for up to 24 months after our last meaningful contact, after which they are deleted or anonymised, unless the law requires longer retention (for example for transaction records) or you ask us to delete them sooner. Server logs are retained by our host on a short rolling basis.

Your rights

Under the UK GDPR and, where applicable, the EU GDPR, you have the right to: access a copy of your data; correct it; have it erased; restrict or object to our processing; data portability; and withdraw consent at any time without affecting prior processing. To exercise any right, email us and we will respond within one month. We may need to verify your identity first.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ico.org.uk). If you are in the EEA, you may instead complain to your local supervisory authority.

Third parties on this site

Some content on this site is loaded from third parties, which means your IP address is disclosed to them when the relevant page loads: interactive maps use tiles from CARTO and OpenStreetMap, and typography is served by Google Fonts. Details, and the cookies this site uses, are set out in our Cookie Policy.

Changes to this policy

We will update this policy as our services or the law change, and the date at the top will always show the latest version. Significant changes will be highlighted on this page.

This policy is provided in good faith and reviewed against current UK and EU requirements. It is not a substitute for tailored legal advice.