Privacy Policy
PropertFlow is built around the principle that personal data should be handled lawfully, transparently and close to home. This policy explains what we collect when you visit our website or contact us, why, and the rights you have under the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL).
1. Who we are
This website (the “Site”) is operated by [PropertFlow legal entity name], [Commercial Registration No.], with its registered address at [registered address, Kingdom of Saudi Arabia] (“PropertFlow”, “we”, “us”). For the personal data described in this policy, PropertFlow is the data controller.
2. The personal data we collect
Information you give us
When you complete our contact form, we collect your name, work email, company, phone number (optional) and any details you include in your message.
Information collected automatically
When you visit, our hosting and security systems may process technical data such as your IP address, browser and device type, and approximate location, to serve the page and keep the Site secure.
We do not use advertising or behavioural-tracking cookies on this Site. Verify: update this line if you later add analytics or cookies.
Fonts and third-party services
We self-host all fonts and assets on this Site — no third-party font or CDN service receives your data when a page loads.
3. Why we use your data, and our lawful basis
- To respond to your enquiry, arrange a demo and follow up about PropertFlow — based on your consent and on our legitimate interest in responding to people who contact us.
- To operate and secure the Site — based on our legitimate interest in protecting our service.
We will only send you marketing messages where we are permitted to, and you can ask us to stop at any time.
4. Who we share it with
We share personal data only with service providers who help us run the Site, under appropriate confidentiality and data-protection terms:
- Amazon Web Services (AWS) — website hosting and the form-handling function, in the [AWS region] region.
- Resend — delivery of contact-form notification emails to us.
We do not sell your personal data. We may disclose data where required by law or by a competent authority in the Kingdom.
5. Where your data is processed
Contact-form submissions are processed using AWS in the [AWS region] region. Where any personal data is transferred or processed outside the Kingdom of Saudi Arabia, we apply safeguards consistent with the PDPL and its Implementing Regulations. For details of our hosting approach, see our Data Residency statement.
6. How long we keep it
We keep enquiry data for [retention period — e.g. 24 months] so we can handle your request and follow up, after which we delete or anonymise it, unless we are required to keep it longer by law.
7. Your rights under the PDPL
Subject to the conditions in the PDPL, you have the right to:
- Be informed of the legal basis and purpose for collecting your personal data;
- Access the personal data we hold about you;
- Obtain a copy of your personal data in a readable format;
- Request correction, completion or updating of your personal data; and
- Request destruction of your personal data when it is no longer needed.
Where our processing is based on your consent, you may withdraw that consent at any time, without affecting processing already carried out.
To exercise any of these rights, please contact us through our form, or write to us at [written-notice address / contact email]. We will respond within the period required by the PDPL and may need to verify your identity first.
8. How we protect your data
We use reasonable technical and organisational measures — including encryption in transit (HTTPS) and access controls — to protect personal data. No method of transmission or storage is completely secure, but we work to protect your information and review our measures regularly.
9. Children
This Site is intended for business users and is not directed to children. We do not knowingly collect personal data from children under [18].
10. Complaints
If you have a concern about how we handle your personal data, please contact us first so we can help. You also have the right to lodge a complaint with the Saudi Data & AI Authority (SDAIA), the supervisory authority for the PDPL in the Kingdom.
11. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top shows the most recent version.
12. Contact us
Controller: [PropertFlow legal entity name], [registered address].
Privacy contact: [privacy contact / data protection officer, if appointed] — or reach us via our contact form.
سياسة الخصوصية — يوصى بترجمة احترافية إلى اللغة العربية قبل النشر.