Privacy Policy

Definition of Personal Data

Personal data is any information—regardless of its source or form—that may lead to identifying an individual specifically, or make it possible to identify them directly or indirectly when combined with other data. This includes, but is not limited to, names, personal identification numbers, addresses, contact numbers, bank account numbers, credit card information, and fixed or moving images of the user, as well as other personal information.

Your Personal Data That Is Collected

The Real Estate Development Fund collects the minimum amount of personal data necessary to achieve the purposes for which it was collected, in accordance with the Personal Data Protection Law and its regulations in the Kingdom of Saudi Arabia. Personal data includes the following types:

• Basic personal data: such as name, gender, marital status, personal photos, and similar information.
• Contact data: such as phone numbers, email address, national address, and similar information.
• Account data: such as login information for accounts on the Fund’s platforms, including usernames and passwords.
• Technical data: including your Internet Protocol (IP) address used to connect your device to the internet.
• Financial data: such as information collected for payment processing, including account numbers, salary, and similar information.

Where Do We Collect Your Personal Data From and How Do We Collect It?

The Real Estate Development Fund is committed to collecting and processing your personal data in accordance with the Personal Data Protection Law and its regulations. Collecting and processing your personal data is necessary to provide the highest level of service. Your personal data is collected directly or indirectly depending on the service provided to you, through the following methods:

Direct methods:

• Services: when registering through the official channels of the Real Estate Development Fund to verify user identity and ensure proper service delivery.
• Communication: when contacting the Real Estate Development Fund through communication channels.
• Surveys.

Indirect methods:

• Data provided to us by other entities, such as government or private organizations that support or provide services to beneficiaries of the Real Estate Development Fund.
• Data recorded when you visit the Fund’s website or electronic platforms, such as cookies.

Why Do We Use Your Personal Data?

The Real Estate Development Fund works to enhance the performance of its services provided to beneficiaries by collecting and processing data for the following purposes:

• Enabling and providing the Fund’s services and fulfilling their requirements.
• Issuing policies and preparing studies that support business needs.
• Responding to inquiries from beneficiaries of the Fund’s services.
• Developing and improving the beneficiary experience and ensuring continuous service delivery with the required quality.
• Authenticating user identity when registering for the Fund’s services.
• Meeting certain legal and regulatory requirements.

How We Share Your Personal Data

We may share your necessary personal data with government or non government entities authorized to perform government services for specific purposes based on legal grounds or justified operational needs aimed at achieving public interest without causing harm to national interests or individual privacy.

When sharing your personal data, we ensure it is shared through a secure and trusted environment in accordance with applicable laws, regulations, and policies. The Real Estate Development Fund takes additional steps to protect your personal data by signing data sharing agreements with other entities under specific terms and conditions aligned with the Data Sharing Policy issued by the Saudi Data and AI Authority (SDAIA).

Legal Basis for Collecting and Processing Personal Data

We collect and process your personal data based on the following legal grounds:

• Legal obligation: compliance with the Personal Data Protection Law issued by Royal Decree No. (M/19) dated 09/02/1443H and amended by Royal Decree No. (M/148) dated 05/09/1444H.
• Public interest: to enhance the process of providing effective financing and investment solutions that enable members of society to obtain suitable housing.

Transferring Personal Data Outside the Kingdom’s Geographic Borders

In accordance with applicable regulations, your personal data will be stored and processed securely within the geographic borders of the Kingdom of Saudi Arabia to ensure the preservation of digital national sovereignty. Exceptions apply only to cases specified in Article (29) of the Personal Data Protection Law when there is a need to transfer or process data outside the Kingdom.

Personal Data Protection

Protecting your personal data and ensuring it is handled properly is a top priority for the Real Estate Development Fund. Personal data is made accessible only to authorized individuals through the implementation of technical and organizational measures, including but not limited to:

• Access control to systems and networks.
• Employee awareness and training on data protection.
• Applying appropriate security measures such as encryption.
• Deleting and disposing of personal data once the purpose of collection is fulfilled, in accordance with applicable laws and regulations and Article (18) of the Personal Data Protection Law.
• Providing a secure physical environment for paper records of personal data.

Beneficiary Rights

• Right to be informed: including being informed of the legal basis for collecting personal data and the purpose of collection.
• Right to request access to personal data available at the Real Estate Development Fund in a readable and clear format, in accordance with the Personal Data Protection Law and its regulations.
• Right to request correction, completion, or updating of personal data available at the Fund.
• Right to object and withdraw consent to the processing of personal data at any time unless there are legitimate purposes requiring otherwise.
• Right to access personal data available at the Fund in accordance with the Personal Data Protection Law and its regulations, without prejudice to Article 9 of the Law.