Privacy Policy
Last updated: July 11, 2026
Data we process
- Account and contact details you provide, such as name, email, and mobile number.
- Property details, documents, and images submitted by an owner for review and publication.
- Enquiries, saved searches, favourites, conversations, and service notes.
- Limited operational and security data, such as network address, browser type, and request logs.
- Payment references and status when a paid service is used. Damj does not store card numbers or PINs.
Why we use data
- To operate accounts, listings, search, alerts, and broker communications.
- To review title-deed and advertising-licence details and listing verification signals before publication.
- To protect the platform, prevent abuse, and record sensitive events.
- To handle support and privacy requests, legal obligations, and evidence needed for a dispute.
- To prioritise buyer enquiries using user-declared signals; the score is not a financial guarantee or credit decision.
Scope
This policy explains personal-data processing across the Damj website and app. Damj follows the Saudi Personal Data Protection Law and applicable regulations, and updates this page when the product or processing changes.
Processors and disclosure
Damj uses hosting, database, messaging, payment, and analytics providers to operate the service. Each receives only the data needed for its function. Damj does not sell personal data. Data may be disclosed when required by applicable law or a valid official request, or to protect a legal right.
Payment data and property-money path
The payment gateway processes card data for a paid service; Damj retains the transaction reference and status needed for settlement and support. The property sale price and earnest money never enter Damj accounts. If agreed, earnest money moves buyer to seller under a documented tripartite agreement, and the sale price moves between them through the government escrow.
Security
Damj uses encrypted connections, access controls, database-level data isolation, private storage for sensitive files, and operational logging. No system is risk-free; contact Damj promptly if you suspect unauthorised access.
Your rights and requests
You may request access, correction, a copy of available data, withdrawal of a withdrawable consent, or account deletion, subject to lawful exceptions and records required for a dispute. Account export and deletion workflows are available; use the contact page for other requests.
Retention and deletion
Each data category is retained only as long as needed for its purpose, an active transaction, a dispute, or an applicable legal obligation. Account deletion does not erase records that must lawfully be retained; those records are restricted from ordinary use.
Cookies and analytics
The website uses essential cookies for session, language, and security. Performance measurement may run when configured under the available consent settings. You can restrict non-essential storage in your browser, which may reduce measurement functionality.
Children
The service is intended for adults. If you believe a minor submitted data without a lawful basis, use the contact page to request review.
Contact and official source
To exercise a right or submit a complaint, use the contact page.