Privacy Policy

The Real Estate Indicators Platform places the data of its users and visitors at the top of its priorities. Our goal is to provide high-quality services to all beneficiaries while maintaining the highest levels of privacy. This privacy policy has been prepared to help you understand the nature of the data we collect, and it is important that you are aware of how the platform uses your personal data and your rights in accordance with the relevant regulations and legislation in the Kingdom of Saudi Arabia. This policy and the information outlined below are considered part of the terms and conditions of using the platform.

Your use of the platform constitutes consent to this privacy policy, and the data and information entered by you may be processed or shared with other entities for legitimate purposes.

This document is applicable and binding on all users of the Real Estate Indicators Platform, and serves as the primary reference for all main activities associated with the platform.

For the purpose of applying this policy, the following words and phrases - wherever they appear - shall have the meanings set forth next to each of them, unless the context requires otherwise:

The system applicable in the Kingdom of Saudi Arabia, which serves as the primary reference for implementing procedures and operations on data.

Any statement - regardless of its source or form - that would lead to the identification of the individual specifically, or makes it possible to identify them directly or indirectly, including: name, personal ID number, addresses, contact numbers, license and record numbers, personal property, bank account numbers and credit cards, still or moving images of the individual, and other personal data.

Any operation performed on personal data by any means, whether manual or automated, including: collection, recording, storage, indexing, arrangement, formatting, modification, updating, merging, retrieval, use, disclosure, transfer, publication, data sharing or interconnection, blocking, erasure, and destruction operations.

The individual to whom the personal data relates, or their representative or legal guardian.

Responsible for monitoring the implementation of the system and its regulations, monitoring the procedures followed within the control entity and supervising them, and receiving requests related to personal data in accordance with the system and its regulations.

• Personal Data Protection System.
• Controls, specifications, and management of national data governance and personal data protection.

This policy is specific to the website of the General Authority for Real Estate to ensure the implementation and management of work in alignment with the Authority's strategy, and to provide the necessary knowledge and support to all users to make correct decisions and improve productivity.

The personal data collected by the platform is for processing and storing user data to ensure a smooth experience in using the platform and the services and products offered through it, with consideration for privacy and security to access this data only by the user themselves, including:

• Information you provide to us that is required when registering on the platform or when creating your profile, such as name, personal ID number, address, contact numbers, email, date of birth (Hijri/Gregorian), and other data.
• Communication data information and usage-related updates.
• Other input information, such as service request requirements, reports, complaints, and questionnaires.
• Device data, such as device language and system type, which helps improve the user experience.
• Cookie data, such as data collected through website logs and similar technologies.
• Internet Protocol (IP) address and web browser version details.
• Files: Access permission is requested for device files and uploading documents and images to benefit from services such as the data refinement initiative, data correction, reports service, and others.
• Location data (GPS): Used when permitted, such as identifying the location of the property for which the service is to be executed.

Personal data is collected for the following purposes:

• User registration and verification upon login.
• Improving user experience and providing appropriate products and services.
• Ensuring data security and reliability and processing it in compliance with privacy.

Data is collected from the following sources:

• Directly from the user upon registration or when requesting a service (such as the reports service to track submitted requests).
• From partner entities that provide data and services to users through the platform.
• With the user's consent, with the ability to withdraw it at any time, unless there is another legal basis.
• To achieve legitimate interests that enable the user to benefit from the services.

The collected data is used as follows:

• Processing and storing user data for using the platform and available services.
• Considering privacy and security aspects, and not accessing data except with the user's consent.
• Providing services as required, such as registration or applying for a service, without compromising data privacy or sharing it with any other party without the user's permission.

Personal data is stored within the Kingdom of Saudi Arabia in the servers of the National Information Center, and the platform is committed to protecting data in accordance with the policies and regulatory legislation approved by the National Cybersecurity Authority and the Saudi Data and Artificial Intelligence Authority.

The personal data owner has the right to know the methods of collecting their data, the legal basis for collecting and processing it, how it is processed, stored, and destroyed, and with whom it will be shared.

You can view all details through the privacy policy or contact us via the data shown in clause nine. Right to Access Personal Data

The personal data owner has the right to request a copy of their personal data via the email shown in clause nine. It will be provided - at no cost - within seven business days, by contacting the email of the General Authority for Real Estate system.

The personal data owner has the right to request correction of their personal data that they believe is inaccurate, incorrect, or incomplete. This is done via the email shown in clause nine, and will be reviewed and updated within seven business days. As for data under the control of a partner entity, the data owner will be advised of which entity they can request data correction from.

The personal data owner has the right to request destruction of their personal data collected by the Real Estate Indicators Platform under certain circumstances (unless there is a statutory provision specifying a certain retention period or contractual requirements). As for data under the control of a partner entity, the personal data owner can contact the entity and request its destruction.

The personal data owner has the right to withdraw their consent to processing their personal data at any time. They can submit a request to the General Authority for Real Estate, represented by the Data Management Office affiliated with the entity, via email:

Data is only shared according to clear services for the user and the nature of the shared data, with the entities providing the services requested by the personal data owner to ensure the service is provided as required by the executing entity:

• Ministry of Municipalities and Housing
• Ministry of Justice
• State Properties Authority
• Ministry of Tourism
• Ministry of Interior
• Saudi Data and AI Authority
• National Center for Government Performance Measurement
• Saudi Post Corporation
• Ministry of Energy
• National Cybersecurity Authority
• National Real Estate Registration Services Company
• National Housing Company

The personal data owner has the right to request access/correction/destruction of their data by contacting via the following email:

They will be enabled to exercise their rights within 30 days, and this period can be extended if enabling them to exercise the right requires extraordinary effort for an additional 30 days, provided the personal data owner is notified of the extension.

Name: Data Management Office at the General Authority for Real Estate.

Email: DPO@gari.gov.sa

To ensure we help you protect your personal information, we recommend the following:

• Contact the Authority immediately if there is any risk related to your personal information.
• Do not disclose any confidential information except when certain of the recipient's identity.
• Use a secure browser when conducting transactions online, and ensure protection software is updated.

For inquiries, you can contact via email: DPO@gari.gov.sa

Your personal data is stored securely in databases or through cloud computing services compliant with the requirements of the National Cybersecurity Authority.

After the purpose of data collection has ended or upon request for deletion, measures will be taken to ensure its safe destruction:

• Digital data: It will be permanently deleted from databases using permanent deletion techniques.
• Paper data: It will be shredded using approved paper shredders to ensure it cannot be recovered.

Personal data is shared after the data owner's consent or based on regulatory requirements, in accordance with terms and conditions.

This policy applies to the platform only. If you use links to other websites, you bear full responsibility for your data provided to those websites.

This policy was last updated on January 14, 2025.

The platform reserves the right to modify it with notification to the user.

This policy applies to all procedures and services that fall under the scope of the privacy policy of the General Authority for Real Estate.

For inquiries or to exercise your rights, please contact us via email: DPO@gari.gov.sa