Privacy Policy
Last updated: 29 June 2026
OI Real Estate (“we”, “us”, “our”) operates the website and digital platform at oirealestateksa.com (the “Platform”) as a Saudi real estate brokerage and developer, connecting property seekers—particularly Muslim buyers in England—with opportunities and projects in the Kingdom of Saudi Arabia.
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when you use the Platform, submit enquiries, communicate with us, or interact with our services. It is designed to reflect applicable requirements in the Kingdom of Saudi Arabia and the United Kingdom.
1. Data Controller & Contact Details
For the purposes of applicable data protection laws, the data controller is the entity operating OI Real Estate as part of the Original Identity group of projects.
- Trading name: OI Real Estate (a project under Original Identity — originalidentity.net)
- Registered establishment (KSA unified number): 7053331117
- Parent company: Sensation Beds Limited (commercial registration / identity no. 12871417)
- Registered / operational presence: Jeddah, Kingdom of Saudi Arabia; advisory presence: London, United Kingdom
- Email: info@oirealestateksa.com
- Privacy enquiries: info@oirealestateksa.com (subject line: “Privacy Request”)
2. Legal & Regulatory Framework
We process personal data in accordance with the laws and regulations applicable to our activities in each jurisdiction, including but not limited to:
Kingdom of Saudi Arabia
- Personal Data Protection Law (PDPL), Royal Decree No. M/19 dated 16/9/1443H (14 September 2021), as amended (including Royal Decree No. M/148 dated 5/9/1444H).
- Implementing Regulations of the Personal Data Protection Law (SDAIA Board Resolution No. 1/6/1443 and amendments).
- Regulations and guidance issued by the Saudi Data & Artificial Intelligence Authority (SDAIA).
- Anti-Cyber Crime Law (Royal Decree No. M/17 dated 8/3/1428H) where relevant to security incidents.
- Real Estate Authority (REGA) regulations on property advertising and licensing.
- E-Commerce Law (Royal Decree No. M/126 dated 7/11/1440H) for electronic commercial communications where applicable.
United Kingdom
- UK General Data Protection Regulation (UK GDPR) as retained and amended in domestic law.
- Data Protection Act 2018 (DPA 2018).
- Privacy and Electronic Communications Regulations 2003 (PECR), including cookies and electronic marketing.
- Information Commissioner’s Office (ICO) guidance on transparency, international transfers, and legitimate interests.
- Consumer Rights Act 2015 and Consumer Protection from Unfair Trading Regulations 2008.
- Equality Act 2010 — we do not process special category data for discriminatory purposes.
3. Personal Data We Collect
We may collect the following categories depending on how you use the Platform:
- Identity & contact: name, email, telephone/WhatsApp number, country of residence.
- Enquiry data: property requirements, budget, preferred cities, messages, viewing requests.
- Account data (if applicable): admin login credentials, role, audit logs.
- Technical data: IP address, browser, device identifiers, approximate location, pages viewed.
- Cookie & analytics data as described in our cookie banner.
- Communications: emails, forms, calls, WhatsApp records.
- Marketing preferences where offered.
Data we do not intentionally require
We do not require special category data (e.g. religious belief, health) to browse listings. If you voluntarily include such information in a message, we treat it as enquiry content and limit use to responding to your request.
4. Sources of Personal Data
- Directly from you via forms, contact page, email, phone, or WhatsApp.
- Automatically via cookies, server logs, and similar technologies.
- Verified partner agents or developers (generally property data); analytics providers with consent.
5. Purposes & Legal Bases
We process personal data for the following purposes:
Under UK GDPR (Article 6)
- Responding to enquiries — Contract (Art. 6(1)(b)) and/or Legitimate interests (Art. 6(1)(f)).
- Platform security and fraud prevention — Legitimate interests (Art. 6(1)(f)).
- Legal compliance — Legal obligation (Art. 6(1)(c)).
- Non-essential cookies — Consent (Art. 6(1)(a)).
- Direct marketing where permitted — Legitimate interests or Consent with PECR opt-out.
Under Saudi PDPL
- Providing requested services and property enquiries — PDPL Art. 5 and Implementing Regulations (consent, legitimate interest where permitted, contractual steps at your request).
- PDPL compliance including security, breach notification, and cross-border rules (Arts. 29–30).
- Explicit consent where required (e.g. certain marketing) under PDPL Art. 6.
7. Data Retention
We retain data only as long as necessary unless law requires longer retention.
- Enquiries: typically up to 3 years from last contact.
- Marketing consent records: duration of consent plus limitation periods.
- Security logs: typically 12–24 months.
- Legal/regulatory records as required under PDPL and UK law.
8. Your Rights
United Kingdom (UK GDPR / DPA 2018)
Contact info@oirealestateksa.com — we respond within one month (extendable under Art. 12(3)).
- Access (Art. 15), rectification (16), erasure (17), restriction (18), portability (20), objection (21).
- No solely automated decisions with legal/significant effects on buyers.
- Complaint to ICO: ico.org.uk
Kingdom of Saudi Arabia (PDPL)
Contact info@oirealestateksa.com with identity verification.
- Right to be informed (Art. 4), access (7), correction (8), deletion where prescribed (9), withdraw consent (6).
- Complaint to SDAIA: sdaia.gov.sa
9. Security & Breach Notification
We use appropriate technical and organisational measures including TLS encryption and access controls.
We notify regulators and/or individuals of breaches as required under UK GDPR Arts. 33–34 and PDPL breach provisions.
11. Children
The Platform is not directed at under-18s. We do not knowingly collect children’s data.
12. Changes
We may update this Policy with a new “Last updated” date. Material changes may require additional notice or consent where legally required.
13. Contact
- Privacy: info@oirealestateksa.com
- SDAIA (KSA): sdaia.gov.sa
- ICO (UK): ico.org.uk
Questions about these policies? Contact Us