Privacy Policy

This Privacy Policy explains how Zood Real Estate (“Zood” or “we”) collects, uses, processes, stores, shares and protects personal data when you visit its website, use its services, contact it, make an enquiry, or register your interest in one of its projects or services.

Zood processes personal data in accordance with the laws and regulations in force in the Kingdom of Saudi Arabia, including the Personal Data Protection Law, its implementing regulations and the related controls.

Zood is the controller of the personal data processed under this Policy and within the purposes set out in it.

1 · Personal data we may collect

Depending on the nature of your interaction with Zood, we may collect certain personal data, including:

• Your name and contact details, such as your mobile number and email address.
• Information you provide through contact forms, enquiries or interest registrations.
• Information about your property interests and the projects, units or services you want to know more about.
• Your communication and marketing preferences.
• Technical information about your use of the site, such as your IP address, browser, device and operating system, and the pages visited.
• Data collected through cookies and similar technologies, subject to the site’s settings and to your consent where it is required.
• Any other information you choose to give us when you contact us.

Zood takes care to collect only the personal data needed for the stated purposes of collection.

Some of the data requested on the site is necessary in order to handle your request or to contact you, and without it we may be unable to process the request or provide the service.

2 · How personal data is collected

We may collect your personal data through:

• Data you give us directly when you fill in a form, register your interest or contact us.
• Contact with Zood’s authorised representatives.
• Cookies and similar technologies used while you browse the site.
• Your representatives or authorised agents, where applicable.
• Service providers or business partners, where the law permits.
• Publicly available sources, where collection from them is legally permitted.

3 · Purposes of processing

Zood may use personal data for the following purposes:

• Responding to enquiries and requests.
• Communicating with customers and prospective customers.
• Managing interest registrations for projects, units and services.
• Providing you with information about the projects, properties or services you have expressed an interest in.
• Managing the customer relationship and following up on requests.
• Delivering services and performing contractual obligations where a contract exists.
• Improving the website, the services and the user experience.
• Analysing site performance, understanding how it is used, and developing its content and functions.
• Sending messages, offers and marketing content in line with legal requirements.
• Running marketing campaigns and measuring their effectiveness, where permitted.
• Protecting the security of the site and its technical systems and limiting unlawful use.
• Complying with legal and regulatory requirements.
• Protecting, exercising and defending Zood’s legal rights.
• Responding to lawful requests from the competent authorities.

Zood does not use personal data for purposes incompatible with the purpose for which it was collected, except where the law allows.

4 · Legal basis for processing

Zood processes personal data on the legal basis appropriate to each case under the applicable laws, including:

• The data subject’s consent, where consent is required.
• Taking steps at the data subject’s request, or performing a contract with them.
• Compliance with a legal or regulatory obligation.
• Legitimate interests, where the law permits and without prejudice to the data subject’s rights and interests.
• Any other case in which the law permits the processing of personal data.

Where processing relies on your consent, you may withdraw that consent in accordance with the applicable controls, without affecting the lawfulness of processing carried out before the withdrawal.

5 · Marketing messages and communications

Zood may use your contact details to send you information about its projects, services, offers and events, in line with legal requirements.

Where consent is legally required, your data will not be used for direct marketing until that consent has been obtained.

You can unsubscribe from marketing messages at any time using the unsubscribe method provided, or by contacting Zood.

Unsubscribing from marketing does not affect necessary messages relating to a request, an enquiry, a transaction or an existing contract.

6 · Cookies

Zood’s website may use cookies and similar technologies to support the running of the site, improve its performance, understand how visitors use it, and measure the effectiveness of content, services and marketing campaigns.

Cookies may include:

• Cookies necessary for the site and its core functions to work.
• Analytics cookies that help us understand use of the site and improve its performance.
• Preference cookies that remember certain choices and settings.
• Marketing and advertising cookies that may be used to measure campaign effectiveness and improve the relevance of advertising, where applicable and in line with legal requirements.

You can control cookies through your browser settings, or through any consent-management tools available on the site.

7 · Sharing and disclosure of personal data

Zood does not sell personal data.

Where necessary and within the limits the law allows, it may share or disclose personal data to:

• Its subsidiaries and affiliated companies.
• Providers of hosting, technology, and site operation and maintenance.
• Providers of customer relationship management systems.
• Providers of telecommunications, email and messaging services.
• Providers of analytics and digital marketing services.
• Legal and financial advisers, auditors and other professional advisers.
• Business partners and service providers involved in delivering a service you requested.
• Government, regulatory, judicial or security authorities where there is a legal ground or obligation to disclose.
• Other parties, after obtaining consent where it is legally required.

Zood takes appropriate steps to ensure that parties processing data on its behalf comply with confidentiality and data-protection requirements under the applicable laws.

8 · Transfers of personal data outside the Kingdom

Some of the services or technical systems used may require certain personal data to be processed or stored outside the Kingdom of Saudi Arabia.

In those cases, Zood puts in place the measures and safeguards needed to ensure that personal data is transferred and processed outside the Kingdom in accordance with the Personal Data Protection Law and the related regulations and controls.

Personal data is transferred outside the Kingdom only within the limits the law allows and after the relevant legal requirements have been met.

9 · Retention and destruction of personal data

Zood keeps personal data for as long as is needed for the purposes for which it was collected or processed, or as required by the relevant laws, regulations and legal or contractual obligations.

The retention period varies with the nature of the data, the purpose of processing, and the legal or operational need to keep it.

When the purpose has ended and there is no legal ground to continue keeping the data, it is securely destroyed so that it cannot be recovered, or anonymised where appropriate, in line with legal requirements and Zood’s approved policies and procedures.

10 · Protection and security of personal data

Zood takes the administrative, organisational and technical measures appropriate to the nature of the personal data and the risks of processing it, in order to reduce the risk of:

• Unauthorised access.
• Unlawful use or disclosure.
• Unauthorised alteration.
• Loss or leakage.
• Damage or destruction.
• Any unlawful processing of personal data.

Zood also reviews and develops its data-protection measures periodically, in proportion to the nature of the data and the risks of processing it.

11 · Rights of the data subject

Data subjects have the rights granted to them under the Personal Data Protection Law and the related laws, including, as applicable:

• The right to know the legal ground and the purpose for collecting and processing their personal data.
• The right to access their personal data.
• The right to request a copy of their personal data in a clear, readable format, subject to the applicable controls.
• The right to request correction, completion or updating of their personal data.
• The right to request destruction of their personal data where the law allows.
• The right to withdraw consent where processing relies on it, subject to the applicable controls.

The exercise of some rights may be subject to the restrictions or exceptions set by law.

To exercise any of these rights, you can contact Zood using the official contact details published on the Contact page of this website. Zood may verify the identity of the person making the request before acting on it, in order to protect personal data.

Requests to exercise these rights are handled within the statutory time limits.

12 · Privacy complaints and enquiries

Any enquiry, request or complaint about the processing of personal data or the exercise of rights can be made through Zood’s official channels, set out on the Contact page of this website.

Zood reviews and handles requests and complaints in accordance with the applicable laws and procedures.

This does not affect the data subject’s right to lodge a complaint with the competent personal data protection authority in the Kingdom of Saudi Arabia, in accordance with the prescribed procedures.

13 · Third-party links and sites

Zood’s website may contain links to third-party websites, applications, platforms or services.

Those sites and services are governed by the privacy policies and terms of the parties that operate them, and Zood does not control how those parties collect, use or protect data.

We recommend reviewing the privacy policy of any external site or service before providing personal data to it.

14 · Privacy of children and persons without full legal capacity

Zood’s website is not intended to collect personal data from children, or from persons who do not have full legal capacity, without the involvement or consent of a parent, guardian or legal representative where that consent is legally required.

If Zood becomes aware that data has been collected from these groups without an appropriate legal ground, it will take the steps needed to deal with it under the applicable laws.

15 · Accuracy of personal data

Users should take care to provide correct, accurate and up-to-date personal data when dealing with Zood.

Data subjects may ask for their personal data to be corrected or updated through the official contact channels.

16 · Updates to this Policy

Zood may update or amend this Privacy Policy from time to time to reflect changes in its services, its data-processing practices, or legal and regulatory requirements.

The updated version will be published on the website and takes effect from the date of publication unless stated otherwise.

Where an amendment is material and the applicable laws require the data subject to be notified or to consent, Zood will take the necessary steps.

17 · Contact us

For any enquiry, request or complaint about this Privacy Policy, about the processing of your personal data, or to exercise your rights, you can contact Zood Real Estate using the official contact details on the Contact page of this website.