Privacy Policy

Haifa Bin Saedan Real Estate Valuation (HBS)
Last Updated: December 11, 2025
Version: 1.0

Introduction

Haifa Bin Saedan Real Estate Valuation ("the Company," "we," "us," or "HBS") is committed to protecting the privacy of our clients and website visitors. This Privacy Policy explains how we collect, use, protect, and share personal information obtained through our website https://www.hbs-realestate.com and the real estate valuation services we provide.

By using our website or requesting our services, you consent to the collection and use of your personal information in accordance with this Policy. If you do not agree with any part of this Policy, please do not use our website or services.

1. Information We Collect

We collect various types of information to provide accurate and professional real estate valuation services and to improve the user experience on our website.

1.1 Personal Information You Provide Voluntarily

When requesting real estate valuation services or contacting us, we may ask you to provide the following information:

Basic Contact Information:

Full name (first and last name)
Email address
Phone number (mobile and landline)
Postal address (city, region, postal code)

Property Information for Valuation:

Property type (residential, commercial, industrial, land, hotel, warehouse)
Property location (full address, geographic coordinates if available)
Property size (total area, built-up area, number of floors)
Property details (number of rooms, bathrooms, amenities, year of construction, property condition)
Purpose of valuation (sale, purchase, financing, insurance, accounting, legal)
Property documents (title deed, architectural plans, photographs)

Payment and Billing Information:

Company or organization name (for corporate clients)
Tax ID number (for invoicing)
Payment information (processed through secure payment gateways; we do not store credit card data)

Additional Information:

Any other information you choose to provide voluntarily when filling out forms or contacting us

1.2 Information We Collect Automatically

When you visit our website, we automatically collect certain information using technologies such as cookies and analytics tools:

Device and Browser Information:

Internet Protocol (IP) address
Browser type and version (Chrome, Safari, Firefox, etc.)
Operating system (Windows, macOS, iOS, Android)
Device type (desktop, mobile, tablet)
Screen resolution and browser language

Usage and Browsing Information:

Pages you visited on our website
Time and date spent on each page
Links you clicked
Referral source (search engine, advertisement, direct link)
Keywords used to reach our website

Cookies: We use cookies to improve user experience, remember your preferences, and analyze website traffic. You can control cookies through your browser settings, but disabling them may affect website functionality.

1.3 Information from External Sources

In some cases, we may obtain additional information from external sources to improve the accuracy of valuation reports:

Real Estate Data Sources:

Real estate market data from public sources (Ministry of Justice, General Authority for Real Estate)
Comparable sales information from accredited real estate databases
Maps and aerial images from mapping services (Google Maps)
Urban planning data from government agencies

Identity Verification Sources:

In certain cases, we may use identity verification services to confirm the accuracy of information provided (especially for large transactions or legal requirements)

2. How We Use Information

We use the information we collect for the following purposes:

2.1 Providing Real Estate Valuation Services

Preparing Valuation Reports: We use property and personal information to prepare accurate and detailed real estate valuation reports that comply with international (RICS) and local (TAQEEM) standards. This process includes analyzing market data, conducting site inspections, applying valuation models (DCF, Comparable Sales, Cost Approach), and issuing the final report.

Communicating with Clients: We use your contact information to communicate with you regarding your valuation request, scheduling site inspections, requesting additional information, sending the final report, and responding to your inquiries.

Processing Payments: We use billing information to issue invoices and process payments securely through accredited payment gateways.

2.2 Improving Services and Website

Performance Analysis: We use usage and browsing information to understand how users interact with our website, identify technical issues, and improve website design and functionality.

Developing New Services: We analyze client needs and feedback to develop new valuation services or improve existing ones.

Security and Protection: We use technical information to detect suspicious activities, prevent fraud, and protect our website from cyber attacks.

2.3 Marketing and Communications

Newsletters: If you choose to subscribe to our newsletter, we will send you updates about our services, real estate market news, and valuation tips. You can unsubscribe at any time through the link in the email.

Promotional Offers: We may send you special offers or information about new services that may interest you. We will only do so if you explicitly consent to receiving such communications.

Surveys: We may ask you to participate in surveys to improve our services. Your participation is entirely voluntary.

2.4 Legal and Regulatory Compliance

Compliance with Laws: We use and retain your information to comply with Saudi laws and regulations, including anti-money laundering laws, taxes, and personal data protection.

Legal Proceedings: We may disclose your information if required by law, court order, or request from a competent government authority.

Protecting Rights: We may use information to defend our legal rights, protect our property, or ensure the safety of our clients and employees.

3. Sharing Information with Third Parties

We respect your privacy and do not sell or rent your personal information to third parties. However, we may share your information in the following cases:

3.1 Service Providers and Partners

Payment Processors: We use secure and accredited payment gateways (such as Stripe, PayPal, or local gateways) to process payments. These companies have strict privacy policies and do not use your information for other purposes.

Hosting and Infrastructure Services: We use reliable cloud hosting services (such as Vercel, AWS) to operate our website and store data securely.

Analytics and Marketing Tools: We use analytics tools (such as Google Analytics) to understand traffic on our website. These tools collect anonymous data and do not identify you personally.

Email Services: We use email platforms (such as Mailchimp, SendGrid) to send newsletters and marketing communications.

3.2 Government and Regulatory Authorities

Regulatory Bodies: We may share information with the Saudi Authority for Accredited Valuers (TAQEEM) or other regulatory bodies to comply with licensing and accreditation requirements.

Legal Authorities: We may disclose information in response to court orders, subpoenas, or legal requests from law enforcement agencies.

Tax Authorities: We may share billing information with the Zakat, Tax and Customs Authority to comply with tax requirements.

3.3 Clients and Report Beneficiaries

Financing Institutions: If the valuation is required for financing purposes, we may share the report directly with the bank or financial institution concerned (with your explicit consent).

Legal Entities: In cases of valuation for legal purposes (such as litigation, partition, inheritance), we may share the report with concerned lawyers or courts.

Insurance Companies: If the valuation is for insurance purposes, we may share the report with the insurance company (with your consent).

3.4 Mergers or Acquisitions

In the event of a merger, acquisition, or sale of the Company's assets, customer information may be transferred to the new entity. We will notify you of any change in ownership of your information and your options in this regard.

4. Information Protection

We take the security of your personal information seriously and apply technical and organizational security measures to protect it from unauthorized access, loss, modification, or disclosure.

4.1 Technical Security Measures

Encryption:

All data transmitted between your browser and our website is protected by SSL/TLS encryption (HTTPS)
Sensitive data stored on our servers is encrypted using strong encryption standards (AES-256)

Firewalls:

We use advanced firewalls to protect our servers from cyber attacks

Authentication and Access Control:

Access to customer information is restricted to authorized employees only
We use multi-factor authentication (MFA) to protect employee accounts
We apply the principle of "least privilege" - each employee has access only to information necessary for their work

Backups:

We perform regular data backups to ensure no data loss in case of technical failures

Security Monitoring:

We continuously monitor our systems to detect suspicious activities and respond quickly to security incidents

4.2 Organizational Security Measures

Employee Training: All employees who handle customer information undergo regular training on data protection and privacy.

Security Policies: We have strict internal policies and procedures for data protection, including data retention policies, secure data disposal, and incident response.

Confidentiality Agreements: All employees and contractors are bound by strict confidentiality agreements that prevent them from disclosing customer information.

Security Audits: We conduct periodic security audits and penetration testing to identify and fix security vulnerabilities.

4.3 Limitations of Protection

Despite our efforts, data security cannot be guaranteed 100%. The Internet is not a completely secure environment, and security breaches may occur despite the best preventive measures. In the event of a security breach affecting your information, we will notify you immediately in accordance with legal requirements.

Your Responsibility:

Use strong and unique passwords for your account (if applicable)
Do not share login information with anyone
Ensure you log out of your account when using shared devices
Notify us immediately if you notice any suspicious activity on your account

5. Information Retention

We retain your personal information for as long as necessary to achieve the purposes stated in this Policy, or to comply with legal and regulatory requirements.

5.1 Retention Periods

Active Customer Information: We retain your information as long as you are an active customer or have an account with us.

Valuation Reports: We retain copies of valuation reports for at least 10 years, in accordance with TAQEEM and RICS requirements and for professional liability purposes.

Financial Records: We retain invoices and financial records for at least 7 years, in accordance with the requirements of the Zakat, Tax and Customs Authority.

Marketing Data: If you subscribe to our newsletter, we retain contact information until you unsubscribe.

Browsing Data: We retain browsing and usage data for 24 months for analysis and improvement purposes.

5.2 Deleting Information

After the retention period ends, we securely delete your personal information or anonymize it so that it cannot be linked to you personally.

You can request deletion of your information at any time (see Section 6 - Your Rights), subject to our legal obligations to retain certain records.

6. Your Rights

In accordance with the Saudi Personal Data Protection Law, you have the following rights regarding your personal information:

6.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide you with a copy of your information within 30 days of the request date.

6.2 Right to Rectification

If your information is inaccurate or incomplete, you have the right to request its correction or update. We will update your information immediately after verifying the request.

6.3 Right to Erasure

You have the right to request deletion of your personal information in the following cases:

The information is no longer necessary for the purposes for which it was collected
You have withdrawn your consent and there is no other legal basis for processing
You have objected to processing and there are no legitimate interests justifying continuation
The information has been processed unlawfully

Note: We may not be able to delete some information if retention is legally required (such as financial records, valuation reports).

6.4 Right to Restrict Processing

You have the right to request restriction of processing of your information in certain cases, such as:

Contesting the accuracy of the information (until we verify its accuracy)
Processing is unlawful but you prefer restriction instead of deletion
We no longer need the information but you need it to establish a legal claim

6.5 Right to Data Portability

You have the right to obtain a copy of your information in a structured, commonly used, and machine-readable format (such as CSV or JSON), and transfer it to another service provider.

6.6 Right to Object

You have the right to object to processing of your information for marketing purposes at any time. We will immediately stop sending you marketing communications.

6.7 Right to Withdraw Consent

If processing of your information is based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing that occurred before the withdrawal of consent.

6.8 How to Exercise Your Rights

To exercise any of these rights, please contact us via:

Email: privacy@haifa.com
Phone: +966 11 234 5678
Mail: Haifa Bin Saedan Real Estate Valuation, Riyadh, Kingdom of Saudi Arabia

We will respond to your request within 30 days. We may ask you to provide proof of identity to verify your identity before processing the request.

7. Cookies

We use cookies and similar tracking technologies to improve the user experience on our website.

7.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. These files help the website remember information about your visit, such as preferred language and other settings.

7.2 Types of Cookies We Use

Necessary Cookies: Essential for the website to function properly. Without them, some basic functions will not work (such as login, shopping cart).

Functional Cookies: Help remember your preferences (such as language, time zone) to improve your experience.

Analytical Cookies: Help us understand how visitors use the website (most visited pages, visit duration, etc.) to improve performance. We use Google Analytics for this purpose.

Marketing Cookies: Used to display relevant ads to you on other websites. We use these cookies only if you consent to them.

7.3 Managing Cookies

You can control cookies through:

Browser Settings: Most browsers allow you to block or delete cookies. Check your browser settings for instructions.

Opt-Out Tools:

Google Analytics: https://tools.google.com/dlpage/gaoptout

Cookie Preferences Panel: On your first visit to our website, you will see a pop-up requesting your consent to use cookies. You can choose to accept or reject certain types of cookies.

Note: Disabling cookies may affect website functionality and your experience.

8. Children's Privacy Protection

Our website and services are not directed to children under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child without parental consent, we will delete that information immediately.

If you are a parent and believe your child has provided personal information to us, please contact us at privacy@haifa.com.

9. Links to External Websites

Our website may contain links to third-party websites (such as social media, business partners). We are not responsible for the privacy practices or content of these websites. We recommend reviewing the privacy policies of these websites before providing any personal information.

10. Updates to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, laws, or for other operational reasons. We will notify you of any material changes by:

Posting the updated Policy on our website with a new "Last Updated" date
Sending a notice via email (if changes are material)
Displaying a prominent notice on our website

We recommend reviewing this Policy periodically to stay informed about how we protect your information. Your continued use of our website or services after posting changes means your acceptance of the updated Policy.

11. Contact Us

If you have any questions, inquiries, or complaints regarding this Privacy Policy or our data protection practices, please contact us:

Haifa Bin Saedan Real Estate Valuation

Data Protection Officer:
Name: [Data Protection Officer Name]
Email: privacy@haifa.com
Phone: +966 11 234 5678

Postal Address:
[Street Name], [District Name]
Riyadh, Postal Code [Code]
Kingdom of Saudi Arabia

Business Hours:
Sunday - Thursday: 8:00 AM - 5:00 PM
Friday - Saturday: Closed

We will do our best to respond to your inquiries within 3 business days.

12. Filing a Complaint

If you believe we have not handled your personal information properly or violated your privacy rights, you have the right to file a complaint with:

Saudi Personal Data Protection Authority
(Once established - currently you can contact the National Cybersecurity Authority)

National Cybersecurity Authority
Website: https://nca.gov.sa
Email: info@nca.gov.sa
Phone: 920033322

Effective Date: December 11, 2025
Version: 1.0