Scope of this policy
This page explains information associated with the Rawas website and its contact channels. The current website is a prototype. Before services launch, the final policy must identify the legal entity responsible for data and reflect actual processing practices.
The current website
The enquiry, registration-of-interest and recruitment forms are previews. Their code does not send your entries or CV to Rawas, or add them to a database or customer management system.
Selecting a file in the recruitment form does not upload it. Your browser may retain form entries through features such as autofill, depending on your settings.
Information requested by services
Proposed fields for future services include your name, contact details and message; your project and apartment preferences for property enquiries; and your CV and professional information for recruitment.
These fields describe the proposed experience; they do not mean collection has begun. When services are enabled, required and optional fields and their purposes should be explained.
Purposes of processing
Proposed purposes include responding to general enquiries, handling requests for project information, brochures and visits, reviewing applications, and operating and protecting the service.
The legal basis for each purpose must be established before processing begins. Agreement to receive a reply does not automatically constitute consent to marketing; any necessary marketing consent must be requested separately.
Cookies and browsing data
The homepage stores cookie preferences in your browser’s local storage for 180 days. Session storage records whether you have seen the opening animation. Optional analytics and marketing categories remain off unless selected; no optional tracking tools are currently connected. You can reopen cookie preferences from the footer. If storage is blocked, your choices apply only during the current visit.
The shared preview uses an external hosting provider, which may process technical connection and request data needed to deliver and protect pages under its own policies.
The prototype code does not include advertising or marketing analytics tools. This does not describe processing performed independently by the host or browser. Tracking tools, their purposes and appropriate consent choices must be identified before they are introduced.
Sharing and external services
The current forms are not integrated with sales or recruitment systems. Before providers are added, their categories, purposes, access limits and any transfers outside Saudi Arabia and applicable safeguards must be explained.
Email, telephone and other external links may open another application. Information you send there is also subject to that channel’s policies.
Retention and security
The prototype does not create enquiry or recruitment records. Before actual collection starts, the operational website needs approved retention and deletion criteria, access controls, security measures and incident procedures.
Please do not enter identity numbers, payment details or sensitive personal information in preview fields or general messages.
Your data rights
Where your personal data is processed, the Saudi Personal Data Protection Law provides rights including being informed, access, obtaining a copy, correction, completion or updating, and requesting destruction, subject to statutory conditions and exceptions. Consent may be withdrawn where it is the basis for processing, subject to applicable law.
Requests are reviewed according to the processing involved and appropriate identity verification, without requesting unnecessary information. Complaints may be submitted to the competent authority through official channels where applicable.
Contact about privacy
Contact Rawas through the contact page, contact@rawas.sa or 920004322. These are the contact channels displayed in the prototype; the privacy-request channel and the identity of the data controller must be approved before launch.
Approval and updates
This draft is dated 23 October 2026. It is not a confirmation of full compliance or a description of services that have not yet been activated. It must be updated when company details, providers, processing locations, retention periods and rights procedures are approved.
For the rights reference, consult the Personal Data Protection Law on the National Data Governance Platform.