Privacy Policy

Wadi Hanifa Real Estate Development Co. (WaHa) ("WaHa", "we", "us", or "our") respects your privacy and is committed to protecting your Personal Data.

This Privacy Policy explains how we collect, use, process, store, disclose, and protect Personal Data when you visit or use wadialhadaresort.com(the "Website") or contact us through the Website.

This Privacy Policy is intended to comply with the applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL) and its Implementing Regulations.

1. Data Controller

The Data Controller responsible for the processing of your Personal Data is:

For privacy-related enquiries or requests concerning your Personal Data, you may contact us at:

info@wadihanifa.com.sa

2. Personal Data We Collect

Depending on how you use the Website, we may collect the following Personal Data:

• Full name
• Email address
• Telephone number
• WhatsApp number
• Company or organisation
• Profession
• Subject of enquiry
• Message or request details
• Preferred or requested viewing date and related information
• Information you voluntarily provide when communicating with us

We may also automatically receive limited technical information necessary for the operation, security, and performance of the Website, such as information relating to your browser, device, IP address, and interactions with the Website, where applicable.

We do not intentionally request sensitive Personal Data through the Website.

3. How We Collect Personal Data

We may collect Personal Data:

• Directly from you when you complete a contact or enquiry form;
• When you submit a request to arrange a property viewing;
• When you contact us by email following an enquiry submitted through the Website;
• Automatically through necessary technical functionality and security services used by the Website; and
• Through analytics services where such services are enabled.

We aim to collect only the Personal Data reasonably necessary for the purpose for which it is collected.

4. Purposes of Processing

We may process your Personal Data for the following purposes:

• Responding to general enquiries and requests;
• Responding to questions regarding the resort and its properties;
• Processing and responding to viewing requests;
• Communicating with you regarding a requested viewing;
• Providing information that you have requested;
• Managing and maintaining records of enquiries and communications;
• Protecting the Website against abuse, fraud, spam, and security threats;
• Maintaining and improving the performance and functionality of the Website;
• Understanding Website usage and performance through analytics, where enabled; and
• Complying with applicable legal and regulatory requirements.

5. Legal Basis for Processing

We process Personal Data on an applicable lawful basis under the PDPL and its Implementing Regulations.

Depending on the circumstances, this may include:

• Your consent;
• Processing necessary to fulfil a request made by you;
• Processing necessary for legitimate and lawful business purposes, where permitted by applicable law;
• Compliance with legal or regulatory obligations; or
• Other lawful grounds permitted under applicable law.

Where consent is relied upon as the legal basis for processing, you may withdraw your consent subject to applicable legal requirements and exceptions.

6. Contact and Viewing Requests

When you submit a contact or viewing request, the information you provide is used to understand and respond to your request.

This may include contacting you through the email address, telephone number, or WhatsApp number you provide.

Submitting a viewing request does not constitute a reservation, booking, lease, sale, or other contractual commitment.

The Website does not currently process online payments or accept online accommodation bookings.

7. Email Communications

Information submitted through Website forms may be transmitted to and processed through our email infrastructure and service providers for the purpose of receiving, managing, and responding to enquiries.

We use Resend as an email delivery service. Information necessary to deliver and process Website communications may therefore be processed by Resend on our behalf.

We do not use your enquiry information to send unrelated marketing communications unless we have an appropriate lawful basis to do so.

8. Vercel Analytics

We may use Vercel Web Analytics to understand Website performance and usage.

Vercel Web Analytics is designed to provide aggregated Website usage information and does not use cookies for its analytics functionality.

Analytics functionality may process technical or usage information such as page views, referrers, country, browser, device, and operating system information.

Analytics functionality may not be enabled at all times. This section applies when such functionality is enabled.

9. Google Maps

The Website may use Google Maps or related Google mapping functionality to display location information or assist users in finding the resort.

When using these services, information may be processed by Google in accordance with Google's applicable terms and privacy practices.

10. reCAPTCHA and Website Security

We may use Google reCAPTCHA to protect forms and other Website functionality against spam, abuse, and automated submissions.

reCAPTCHA may collect technical and interaction-related information, including information relating to your device, IP address, and interaction with the Website, for security and verification purposes.

reCAPTCHA may also use cookies or similar technologies where required for its operation.

11. Social Media and External Websites

The Website may contain links to third-party platforms, including:

• WhatsApp
• YouTube
• Snapchat
• Facebook
• Instagram
• LinkedIn

These links are provided for convenience and information. When you follow a link to a third-party website or platform, that third party's privacy policy and terms will apply.

We do not control how those third parties collect or process Personal Data after you leave our Website.

A link to a third-party platform does not necessarily mean that WaHa shares your Personal Data with that platform.

12. Cookies and Similar Technologies

The Website may use essential cookies or similar technical technologies necessary for the operation, security, and functionality of the Website.

Vercel Web Analytics does not use cookies for its analytics functionality. Google reCAPTCHA may use cookies or similar technologies as part of its security functionality.

We do not currently intend to use non-essential advertising or marketing cookies unless our practices change. If this changes, we will update this Privacy Policy and implement any consent or other requirements applicable under Saudi law.

13. Sharing and Disclosure of Personal Data

We may disclose or make Personal Data available to:

• Employees or authorised representatives who need the information to respond to your request;
• Service providers that process information on our behalf, such as email, hosting, security, analytics, or technical service providers;
• Government authorities, regulators, courts, or other parties where disclosure is required or permitted by applicable law;
• Other parties where disclosure is otherwise permitted under applicable law.

We do not sell your Personal Data.

14. International Processing and Transfers

Some service providers used by the Website may process or store information outside the Kingdom of Saudi Arabia.

Where Personal Data is transferred or processed outside the Kingdom, WaHa will take the measures required under the applicable Saudi laws and regulations governing transfers of Personal Data outside the Kingdom.

We do not represent that all Personal Data processed through third-party services is stored exclusively within Saudi Arabia.

15. Data Security

We take reasonable administrative, technical, and organisational measures designed to protect Personal Data against unauthorised access, alteration, disclosure, loss, misuse, or destruction.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

16. Data Retention

We retain Personal Data only for as long as reasonably necessary to fulfil the purposes for which it was collected, to manage related communications and records, or where retention is required or permitted by applicable law.

Information submitted through a contact form may remain in our email systems and records for as long as reasonably necessary to handle the enquiry and maintain appropriate business records.

When Personal Data is no longer required and there is no legal or legitimate reason for retaining it, we will take appropriate steps to securely delete, destroy, or anonymise it in accordance with applicable requirements.

17. Your Rights

Subject to the conditions and exceptions provided by the PDPL and its Implementing Regulations, you may have the right to:

• Be informed about the legal basis and purpose for collecting and processing your Personal Data;
• Access your Personal Data held by us;
• Request a copy of your Personal Data in a readable and clear format;
• Request correction, completion, or updating of inaccurate or incomplete Personal Data;
• Request destruction of your Personal Data where the applicable legal conditions are met; and
• Withdraw consent where processing is based on your consent, subject to applicable legal requirements.

These rights are subject to the conditions, limitations, and exceptions established by applicable law.

18. Exercising Your Rights

To submit a privacy-related request or enquiry, contact us at:

info@wadihanifa.com.sa

Please clearly state the nature of your request and provide sufficient information for us to understand and process it.

We may need to take reasonable steps to verify the identity of the person making a request before disclosing or changing Personal Data.

We will process requests within the periods and according to the procedures required by applicable law.

19. Children's Privacy

The Website is a general-audience resort website and is not directed specifically at children.

There is no general age restriction for accessing the Website. However, we do not intentionally seek to collect Personal Data from children where such collection is not permitted by applicable law.

If Personal Data relating to a child is submitted to us, we will handle that information in accordance with the requirements applicable to children's Personal Data under Saudi law.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Website, our services, applicable laws, or our data-processing practices.

The updated version will be published on this Website with its revised "Last Updated" date.

21. Contact Us

Email: info@wadihanifa.com.sa