
Privacy Policy
Learn about how Urubah Investment collects, uses, and protects your personal information when you use our website and services.
Urubah Investment respects your privacy and is committed to protecting your personal data and processing it in accordance with the Personal Data Protection Law (PDPL) and other applicable laws and regulations in the Kingdom of Saudi Arabia.
This Privacy Policy explains how Urubah Investment (“Urubah”, “we”, “us”, or “our”) collects, uses, stores, and discloses your personal data when you visit or use our website at https://urubah.sa (the “Website”). It also explains your rights in relation to your personal data and how you may exercise them.
By using the Website, you acknowledge that you have reviewed this Privacy Policy. Where your consent is legally required for the processing of your personal data, we will obtain it through an appropriate method.
Information We Collect
We collect and process personal data as necessary depending on how you interact with the Website, its services, and the forms available through it.
Information You Provide Directly
The information you provide through forms on the Website may include:
- Name.
- Email address.
- Mobile number.
- The content of messages or enquiries you send to us.
- Company name and related contact information when contacting us as a company representative or registering as a supplier.
- Property preferences, such as purchase purpose, unit type, and preferred payment method, when registering your interest in one of our projects.
- Preferred visit date when booking a visit.
- When applying for a position: your CV, nationality, city and country, educational qualifications, professional experience, current position and employer, expected salary, and any professional account or profile links you provide.
- When registering as a supplier: company information, nature of business, areas of operation, Commercial Registration number, tax number, IBAN, and other information required to evaluate or register the supplier.
The information required may vary depending on the relevant form and the purpose for which it is used. Certain information may be necessary to process your request or communicate with you. If you do not provide such information, we may be unable to process your request or provide the related service.
Information Collected Automatically
When you visit the Website, certain technical information may be collected automatically, including:
- Internet Protocol (IP) address.
- Browser type, device type, and operating system.
- Pages you visit and how you interact with them.
- Duration and timing of your visit.
- The source or method through which you accessed the Website.
- Cookies and similar tracking technologies.
- Technical information relating to the performance and security of the Website.
We also use certain third-party services and technologies, including Google Analytics to analyse Website usage, Google Tag Manager to manage tags and technologies used on the Website, and Google reCAPTCHA to help protect forms against automated submissions and misuse.
These services may process certain technical information relating to your device, connection, or interaction with the Website, depending on the nature of each service.
How We Use Your Information
We use your personal data only for purposes associated with the reason for which it was collected. These purposes may include:
- Responding to your enquiries and contact requests.
- Processing registrations of interest in our projects and communicating with prospective customers.
- Arranging and managing visit booking requests.
- Providing the information or services you request from us.
- Processing and evaluating job applications and communicating with applicants.
- Evaluating supplier registration applications and managing communications with suppliers.
- Operating, maintaining, and improving the Website and its user experience.
- Analysing how visitors use the Website and measuring its performance.
- Protecting the Website, forms, and related systems against misuse, fraud, or unauthorised activity.
- Complying with applicable legal and regulatory requirements and maintaining records where required.
- Exercising or defending our legal rights.
- Sending marketing communications or materials where permitted by law and, where required, after obtaining your consent.
We process your personal data based on the appropriate lawful basis applicable to the relevant processing activity. This may include your consent, taking steps in response to a request made by you, fulfilling contractual or legal obligations, or pursuing a legitimate interest of Urubah in a manner that does not prejudice your rights or interests protected by law.
We will not use your personal data for a new purpose that is incompatible with the purpose for which it was originally collected unless permitted by applicable law or after obtaining your consent where required.
How We Share Your Information
We disclose personal data only to the extent necessary to fulfil the purposes described in this Privacy Policy and in accordance with applicable laws.
Where necessary, we may disclose certain personal data to:
- Technology, hosting, and maintenance service providers that assist us in operating the Website and related systems.
- Website analytics and performance measurement service providers, including technology services provided by Google.
- Marketing or communications service providers engaged by Urubah where their involvement is necessary to provide a service or fulfil a specified purpose.
- Professional advisers, such as legal advisers, accountants, or auditors, where necessary.
- Governmental, regulatory, judicial, or other competent authorities where disclosure is required or permitted under applicable laws.
Personal data may also be disclosed in connection with a business restructuring, merger, acquisition, or transfer of all or part of Urubah’s business, provided that such data is processed in accordance with applicable legal requirements and appropriate safeguards.
Where we engage service providers to process personal data on our behalf, we seek to ensure that such processing is limited to the specified purpose and that appropriate measures are in place to protect personal data.
Transfer and Processing of Data Outside the Kingdom
Certain technology services we use, including services provided by global service providers, may require certain personal data to be processed or stored outside the Kingdom of Saudi Arabia.
Where personal data is transferred, disclosed, or processed outside the Kingdom, we seek to ensure that this is carried out in accordance with the Personal Data Protection Law, its implementing regulations, and the applicable requirements governing transfers of personal data outside the Kingdom, together with appropriate safeguards and protective measures.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and in accordance with applicable legal and operational requirements.
Retention periods vary depending on the type of data and the purpose for which it is processed, including:
- Enquiries, communications, and registrations of interest: for as long as necessary to follow up on the request and manage the relevant relationship.
- Visit booking information: for as long as necessary to manage the visit and any related follow-up.
- Job application information: for as long as necessary to assess the application and complete the recruitment process, or to retain it for future opportunities where permitted.
- Supplier information: for as long as necessary to evaluate the supplier, manage the relationship, and comply with applicable legal and commercial requirements.
- Technical and Website usage data: for as long as necessary for analytics, security, Website improvement, and in accordance with the settings of the technologies used.
We may retain certain personal data for longer periods where required by applicable laws or regulations, to comply with legal or regulatory obligations, or to protect legal rights and claims.
Once personal data is no longer required and there is no lawful basis for retaining it, it will be securely deleted or destroyed, or anonymised so that it can no longer be associated with you.
Your Rights
Under the Personal Data Protection Law and other applicable laws, you have a number of rights relating to your personal data, depending on the nature of the processing and the applicable lawful basis. These include:
Right to Be Informed
You have the right to know how your personal data is collected, the purposes for which it is collected and processed, the lawful basis for processing, how it is used and stored, and the categories of parties to whom it may be disclosed.
Right of Access
You have the right to request access to your personal data held by us, subject to applicable legal requirements.
Right to Obtain a Copy
You have the right to request a copy of your personal data held by us in a clear and readable format, where possible and in accordance with applicable laws.
Right to Correction
You have the right to request the correction, completion, or updating of your personal data where it is inaccurate, incomplete, or outdated.
Right to Request Destruction
You have the right to request the destruction of your personal data where the purpose for which it was processed has ended or in other circumstances provided for under applicable law, unless there is a lawful basis requiring its continued retention.
Right to Withdraw Consent
Where the processing of your personal data is based on your consent, you have the right to withdraw that consent at any time, unless another lawful basis permits us to continue processing the data.
Right to Lodge a Complaint
You have the right to contact us regarding any enquiry or complaint relating to the processing of your personal data. You may also lodge a complaint with the competent data protection authority in accordance with applicable procedures.
To exercise any of these rights, you may contact us at:
Email: info@urubah.sa
We may request certain information to verify your identity before processing your request in order to protect your personal data against unauthorised access, modification, or destruction.
We will respond to your request within the applicable statutory timeframes and in accordance with the Personal Data Protection Law and its implementing regulations.
Cookies and Tracking Technologies
The Website uses cookies and similar technologies to support its operation and security, understand how it is used, improve its performance, and enhance the user experience.
Cookies are small technical files or identifiers that may be stored on or read from your device when you visit the Website.
Essential and Security Technologies
Certain technologies are used to support the Website’s core functionality and protect forms and systems against unlawful use, automated submissions, and malicious activity. These may include Google reCAPTCHA.
Analytics and Performance Cookies
We use Google Analytics to obtain information that helps us understand how visitors use the Website, including pages visited, duration of use, and interaction with content, for the purpose of measuring and improving Website performance.
Tag and Technology Management
We use Google Tag Manager to manage and operate tags and technologies used on the Website in an organised manner. Measurement, analytics, or other technologies used on the Website may be deployed through Google Tag Manager.
Information collected through third-party services may be processed in accordance with the privacy policies and terms of the relevant service providers.
You may manage, delete, or block cookies through your browser settings. Disabling certain cookies or essential technologies may affect the availability or proper functioning of certain features of the Website.
Where your consent is legally required for the use of non-essential cookies or technologies, such use will be managed in accordance with applicable legal requirements.
Security
We implement appropriate administrative, organisational, and technical measures designed to protect your personal data against loss, damage, unauthorised access, use, modification, or disclosure.
We also seek to restrict access to personal data to individuals or entities that require such access to perform specific duties and only within the scope of their authorised permissions.
However, no method of transmitting or storing information can be guaranteed to be completely secure. We therefore review and enhance our security measures as appropriate to the nature of the data and the risks associated with its processing.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable legal and regulatory requirements.
The updated version will be published on this page together with the date of the most recent update. Any amendments will become effective from the date specified in the published version unless otherwise stated.
Where any amendment requires us to obtain new consent from you under applicable law, we will request such consent through an appropriate method.
We recommend reviewing this page periodically to stay informed of any updates.
Privacy Enquiries and Complaints
If you have any enquiry, request, or complaint regarding this Privacy Policy or the way in which your personal data is collected or processed, you may contact us at:
Urubah Investment
3800 Prince Mohammed bin Salman bin Abdulaziz Road
Al Rabie District, Riyadh 13315
Kingdom of Saudi Arabia
Email: info@urubah.sa
Phone: +966 11 475 5775