This policy explains what information Rent A Compound collects through this website, why it is used, how it is protected, and how you can contact us about your personal data.
1. Scope and Data Controller
This Privacy Policy explains how Rent A Compound handles personal data when you browse the website, submit a housing enquiry, send a general message, or exercise a privacy right.
Rent A Compound is responsible for the personal data collected directly through this website and the communication channels listed on it.
This policy is intended to support transparency under the laws and regulations applicable in the Kingdom of Saudi Arabia, including the Saudi Personal Data Protection Law where it applies.
2. Personal Data We Collect
We aim to collect only information reasonably needed for the stated purpose. Depending on how you use the website, this may include:
- Identity and contact data: name, nationality, email address, mobile number, and WhatsApp number.
- Housing requirement data: preferred districts, property type, bedroom count, furnishing preference, budget range, move-in date, lease duration, number of residents, and additional requirements.
- Company enquiry data: company or organisation name, authorised contact information, number of units, employee accommodation requirements, and related operational details when voluntarily provided.
- Message data: the content of general enquiries, privacy requests, website issue reports, and subsequent correspondence.
- Form-protection data: temporary session identifiers, CSRF tokens, form start times, and submission timestamps used to protect forms and return validation messages.
Please do not submit national identification documents, passports, bank card details, account passwords, health information, or other sensitive personal data unless we specifically request it through an appropriate secure process and explain why it is needed.
3. Why We Use Personal Data
We may process personal data for the following purposes:
- To receive, review, and respond to housing enquiries.
- To ask relevant follow-up questions and understand accommodation, relocation, and documentation requirements.
- To communicate potentially suitable next steps or options when information can be confirmed.
- To respond to general questions, company requests, privacy requests, and website support messages.
- To maintain website security, prevent spam, apply session-based submission limits, and diagnose form-delivery failures.
- To comply with applicable legal, regulatory, accounting, dispute-resolution, or law-enforcement obligations.
- To protect our rights, users, systems, and legitimate business interests.
The applicable legal basis may include your consent, steps requested before entering a contract, performance of a contract, compliance with a legal obligation, or a legitimate interest permitted by applicable law. Nationality is requested as part of the enquiry to understand relocation context and possible documentation requirements. It is not used for automated decision-making. The correct legal basis depends on the specific processing activity.
4. How We Collect Personal Data
We collect information directly from you when you complete a website form, contact us by email, or continue correspondence. The website also creates temporary session and form-protection data needed for CSRF protection, validation messages, and session-based submission limits.
The website application does not add your IP address to form emails, saved enquiry records, or its form rate-limiting data. The hosting provider may maintain standard web-server access logs independently under its own technical and security settings.
If another person or company submits information about you, the submitting party should have appropriate authority and provide you with the relevant privacy information.
6. International Data Transfers
Some hosting, email, communications, security, or support providers may process data outside the Kingdom of Saudi Arabia. Where this occurs, we will consider the processing location and apply safeguards required by applicable Saudi data transfer rules.
This website does not currently include third-party analytics or advertising tags.
7. Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, ongoing communication, legitimate recordkeeping, dispute handling, security, and applicable legal obligations.
The website uses a default retention target of 90 days for protected fallback form records. We securely delete or anonymise information when it is no longer reasonably needed, subject to applicable legal or dispute-related requirements.
8. Security
The website includes technical measures such as HTTPS enforcement support, security headers, content security restrictions, secure session cookies, CSRF protection, server-side input validation, honeypot checks, session-based rate limiting, method restrictions, protected storage directories, and restricted error disclosure.
No website or transmission method is completely secure. We also use secure hosting practices, restricted access, current software, backups, monitoring, and incident-response procedures appropriate to the website.
9. Cookies and Similar Technologies
The website uses an essential session cookie when required to protect forms, manage CSRF tokens, enforce limited anti-abuse controls, and return validation messages. This cookie is not intended for advertising or cross-site tracking and normally expires when the browser session ends.
If analytics, advertising, embedded maps, chat tools, or other optional technologies are added later, this policy and any required consent mechanism must be updated before those technologies are activated.
10. Your Privacy Rights
Subject to applicable law and relevant exceptions, you may have rights concerning your personal data, including rights to be informed, request access, request correction, request destruction where appropriate, withdraw consent where processing depends on consent, and raise a complaint.
To protect personal data, we may need to verify your identity and authority before completing a request. We may also retain limited information where required by law or necessary to establish, exercise, or defend legal claims.
11. Children’s Data
The website is intended for adults making housing or business enquiries. It is not designed to collect personal data directly from children. A parent, guardian, or authorised adult should provide only the minimum child-related information necessary for a family housing requirement.
12. Third-Party Websites
The website may link to third-party websites. Their privacy practices are controlled by their own operators. Review their policies before providing personal data.
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in the website, business practices, service providers, or legal requirements. The updated date will appear at the top of this page.
14. Contact and Complaints
For privacy questions or requests, contact rentacompound@gmail.com or use the Contact Us page and select “Privacy request.”
You may also have the right to contact the competent Saudi data protection authority through its official channels.