Privacy Policy

This policy explains how Hakami Real Estate (عقار الحكمي) handles personal data through hakamiaqar.com, its property enquiries, and its brokerage operations.

1. Who is responsible

Hakami Real Estate (عقار الحكمي) is a trade name operated by Mohammed Ahmed Alhakami Establishment, a real-estate brokerage based in Riyadh, Kingdom of Saudi Arabia. The establishment is the controller of the personal data this policy describes. Our FAL real-estate brokerage and marketing licence number is 1200048780. You can verify the licence through the Real Estate General Authority broker register.

For privacy requests or questions, contact:

• email: info@hakamiaqar.com;
• phone: +966 9200 16994; or
• post: ask us through either contact above for the current postal delivery details in Riyadh.

We do not currently have a data protection officer. The office handles privacy requests through the contacts above.

2. Data we collect and why

Website delivery and security

Our hosting and security providers process technical data such as IP address, browser and device details, requested pages, request times, and security events. We use it to deliver the site, diagnose faults, prevent abuse, and protect the service. We rely on our legitimate interests in operating a secure property website, without using sensitive data for this purpose.

Property browsing and saved homes

Search filters and the homes you deliberately save are handled in your browser. Saved homes are kept locally on your device until you remove them or clear the site's data. They are not linked to a consumer account.

At public launch, optional analytics, advertising tags, behavioral profiles, public AI search, and voice search are disabled. If we introduce any of them, we will update this policy and provide any required notice or choice before collection starts.

Property assistant

If you open the assistant on a property page, we process your question, the earlier messages in that open conversation, and limited facts about that property and nearby services so we can answer your request. The site does not require your name or contact details for the assistant and does not add the conversation to a customer database, visitor profile, or marketing record.

Mohammed Ahmed Alhakami Establishment, the operator of Hakami Real Estate, designs and operates the H‑1 property-assistant experience.

When you send the assistant a message, that message, the earlier messages in the open conversation, and the listing facts described above are sent to a technology service provider acting under our instructions and are processed outside Saudi Arabia on the provider's global infrastructure. We do not send your name or contact details with the request. The provider's terms and our settings do not allow these messages to be used for marketing or to train general-purpose models, and abuse-monitoring copies are kept for no more than 30 days unless a longer period is legally required.

We use the assistant to provide the property-information service you request and for our legitimate interest in answering listing questions efficiently. Do not enter identity numbers, contact details, financial or health information, passwords, private documents, or another person's personal data into the assistant.

We may change the underlying technology or approved service providers from time to time. We will update this policy where legally required if a change materially affects the processing purpose, data categories, recipient categories, geographic scope, or retention period.

Enquiries, viewing requests, and property offers

When you contact us, we may collect your name, phone number or email, preferred contact method, message, language, page or property of interest, and property details you choose to provide. We use this information to answer your request, arrange a viewing or call, assess a property you offer, keep an operational record, and prevent abuse.

We process this information to take the steps you ask us to take and, where appropriate, for our legitimate interests in managing and documenting brokerage enquiries. An enquiry is not consent to marketing.

Please do not put national ID numbers, full deed copies, bank details, health information, passwords, or another person's private information into a public form. When a regulated document is genuinely required, an authorized staff member will explain the purpose and use a controlled channel.

Property and brokerage operations

For owners, authorized representatives, and active listings, we may process contact details, property descriptions and location, photos and tours, authority or ownership information, advertisement and FAL licence details, and communications needed to market or manage the property. We use these records to provide the requested brokerage service, meet applicable real-estate obligations, verify publication authority, and keep an audit trail.

Original deeds and identity-bearing licence files are not archived by the website at launch. Staff may use approved tools to extract limited listing facts from a document after removing unnecessary identity details; the original is not retained by that feature.

Staff accounts

For authorized staff, we process work identity, email, role, authentication data, security events, and changes made to listings. This is necessary to secure the private publishing tools and maintain accountability.

Direct marketing

Direct promotional messaging is disabled at launch. If it is introduced later, it will use a separate, affirmative choice for the stated channel and purpose. See the Marketing Policy.

3. Where data comes from

Most data comes from you, your browser, an authorized staff member, or an owner or representative who is entitled to provide property information. We may also verify property or licence facts against official REGA records and receive listing media from an approved tour or media provider.

If someone provides us with your personal data, we will give you the information required by Saudi law unless a documented exception applies.

4. Who receives data

Only people and providers that need the data for the stated purpose receive it. They may include:

• Hakami Real Estate staff and the relevant owner, landlord, or authorized broker;
• approved providers of hosting, storage, communications, security, mapping, property media, and automated processing, solely as necessary to provide the service and acting under our instructions; and
• courts, regulators, law-enforcement bodies, or other competent authorities where legally required.

We do not sell personal data or provide it to an unrelated business for that business's own marketing.

5. Processing outside Saudi Arabia

The site's core records are hosted in Saudi Arabia. Some supporting services, including communications, security checks, maps, property media, and automated processing, may process limited data outside the Kingdom. We limit what is sent and apply safeguards appropriate to the service and the Saudi Personal Data Transfer Regulation.

Assistant messages are processed outside Saudi Arabia as described above. Staff-only AI tools are operational tools under the same safeguards and must not be used for unnecessary identity, financial, health, or other sensitive data. AI-powered public search and public voice remain disabled, so search text and voice recordings are not sent for automated processing.

6. How long we keep data

We keep personal data for as long as it serves the purpose it was collected for, and afterwards for any period a Saudi legal, regulatory, accounting, or dispute-related obligation requires. Where a fixed period would promise more than the purpose can predict, we state the criteria instead:

• enquiries, viewing requests, and property offers: while we handle the request and any continuing business relationship it leads to, then until a periodic review finds the record no longer needed;
• property and brokerage records: for the life of the service and the retention periods Saudi real-estate, commercial, and accounting obligations set for brokerage files;
• staff sessions: expire within 24 hours; staff accounts remain until access is removed;
• security and diagnostic logs under our control: for operations and incident investigation, rotated on a routine cycle;
• saved homes in your browser: until you remove them or clear site data; and
• minimal records needed to prove a privacy request, a withdrawal, or a legal hold: for the life of that obligation or claim.

When data no longer serves a purpose or an obligation, we delete it or anonymize it from active systems and let protected backups expire through their normal cycle. You can request destruction at any time under section 7; statutory-retention and legal-hold exceptions may apply.

7. Your rights

Subject to the Saudi Personal Data Protection Law, you may ask to:

• be informed about our processing;
• access your personal data and receive a readable copy;
• correct, complete, or update inaccurate data;
• have data destroyed when the applicable conditions are met; and
• withdraw consent for processing that relies on consent, without affecting earlier lawful processing.

Send the request to info@hakamiaqar.com or call +966 9200 16994. Tell us enough to identify the relevant enquiry or record. We may verify your identity before disclosing or changing data. We will respond within 30 days; if the Implementing Regulations permit an extension, we will tell you before that period ends and explain why.

If you are not satisfied, you may complain to the Saudi Data and Artificial Intelligence Authority through the channels published on SDAIA's Personal Data Protection platform.

8. Children and security

The site is not directed to children. A parent or lawful guardian should handle any property enquiry involving a child.

We use access controls, encryption in transit, restricted staff tools, validation, logging, and least-privilege service accounts. No system is risk-free; contact us promptly if you believe data has been exposed or misused.

9. Changes

We may update this policy when the service, providers, or legal requirements change. We will publish the new version and effective date here and request a fresh choice where the change requires one.