Privacy Policy

This policy explains the personal data that will be collected, the purpose of collection, the mechanism and method of collection, storage means, how it is processed and destroyed, the data owner rights and how to exercise them, and how to contact the company.

"Hawyia Units" is a trademark owned by Hawyia Auctions Company, a company established in the Kingdom of Saudi Arabia (hereinafter referred to as "the Company"), whose activities include providing real estate services and holding real estate auctions. The Company is committed to maintaining the confidentiality of information and using it in accordance with relevant regulations and this policy.

By agreeing to and using the website or the purposes referred to in this policy, you acknowledge that you have read the Privacy Policy, understood its content, and agreed to what is stated therein.

1. Personal Data Processed by the Company

The Company processes the following personal data depending on the service:

• Personal information, including for example (full name, date of birth, ID number, commercial registration, email address, national address) — Mandatory.
• Mobile number — Mandatory.
• Login account information (username and password) — Mandatory.
• Bank account information — Mandatory.
• Employment information, for example: job title, employer — Mandatory.
• Cookie data — Mandatory.
• Internet Protocol (IP) address — Mandatory.

2. Purpose of Collecting Personal Data

The Company collects the personal data of the registration applicant for a number of purposes, namely: for real estate and financial inquiries, to communicate and provide the Company\u2019s services, to verify the user whether a natural or legal person, to contact the user when needed, to issue and direct invoices and letters when needed, to transfer amounts, for certain marketing and advertising purposes including sending promotional and marketing messages, for development and improvement purposes, and for troubleshooting purposes. The Company will not process data in a manner inconsistent with the purpose of its collection.

If you do not wish to receive promotional and advertising messages, you may log in to the Company\u2019s website and select the option to stop promotional messages, or contact the Company using the contact details referred to in this policy.

If the user does not provide their personal data as stated in this policy, this may cause some technical or administrative issues for the user. To avoid this, the Company must be provided with correct data as required.

3. Methods of Data Collection

The Company collects the personal data of service applicants or users through various methods, including: through its official website/application, whether by registration or by visiting the website, through products and services by contacting the Company\u2019s numbers and staff, by providing the Company with personal data, by the Company offering products or services for use as a supplier or beneficiary, or by contacting the Company through social media such as filling out submitted forms.

The legal basis for collecting personal data is the user\u2019s consent. Data is collected directly by entering the required information, or indirectly through cookies collected when visiting the website. The Company stores personal data on the servers of its contracted providers and on the Company\u2019s own servers.

4. Data Update

The Company may request the user to update their data for various purposes explained at the time of the request, and the Company has the right to suspend services to the user if the data is not updated.

The user has the right to request correction, completion, or updating of their personal data held by the Company, through requesting a data amendment via the dedicated icon on the homepage, or by contacting the Company using the contact details referred to in this policy.

5. Amending or Updating the Privacy Policy

The user is notified when the Company amends or updates any clause of this policy — including the purpose of collecting personal data — via the website, registered email, or mobile number.

The Company has the right to suspend the service to the user if consent to the update is not confirmed. If the user continues to use the website after becoming directly aware of the amendment or update to the policy without raising any objection, this is considered acceptance of it.

This Privacy Policy was last updated on: February 16, 2025

6. Rights of the Personal Data Owner

• The user has the right to know the legal basis for collecting data and the purpose of its collection.
• The user has the right to access or request their personal data whenever they wish, through their personal page after registering on the Company\u2019s website, or by contacting the Company.
• The user has the right to request the updating, completion, correction, or destruction of their personal data.
• The user has the right to withdraw their consent to the processing of their personal data at any time, unless there are legal or contractual grounds requiring continued processing.

7. Disclosure of Personal Data

The Company undertakes not to disclose the user\u2019s personal data to any entity or individual, whether inside or outside the Kingdom, except as stated in this policy or as legally required.

The Company may share some personal data with its partners, such as parent or affiliated companies, as well as service providers supporting the Company\u2019s business, for the purposes of this policy. The Company is committed to ensuring these parties are bound by confidentiality and data protection controls.

The Company has the right to disclose the user\u2019s personal data if the data owner consents to disclosure in accordance with the provisions of the law, if the data was collected from a publicly available source, if the requesting entity is a public authority for public interest or security purposes, to implement another law or satisfy judicial requirements, if disclosure is necessary to protect public health or public safety, or to achieve the legitimate interests of the controller — unless this would prejudice the rights of the data owner or conflict with their interests.

8. Data Owner Rights and Method of Destruction

The Company undertakes to destroy personal data if it is no longer necessary to achieve the purpose of its collection, or if the owner wishes to have it destroyed, by permanently deleting their account from the website or requesting the Company to permanently delete their data from its records.

The Company may retain the user\u2019s personal data even after the purpose of its collection has ended, if there is a legal basis requiring retention for a specified period, or if it is closely related to a case pending before a judicial authority.

The Company undertakes to destroy the user\u2019s personal data immediately upon the occurrence of the relevant cause, by removing and completely deleting it from the Company\u2019s database and the processor\u2019s database, if any.

9. Contact Details for Complaints and Objections

If you have any concerns or believe we have not complied with the Personal Data Protection Law, you may submit a complaint to:

If you are not satisfied with how we handled your complaint, you may submit a complaint to the competent authority: the Saudi Data & AI Authority (SDAIA).