Privacy Policy

Makaan ("we", "our", or "us") respects your privacy and is committed to protecting your personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and applicable regulations. This privacy policy explains how we collect, use, and safeguard your information when you use our services and website. Our services include office space rental (shared desks, private offices, meeting rooms), storage space rental (regular and cold storage), website design and development, mobile app development, and commercial registration assistance.

We process your personal data based on your explicit consent, which you provide when creating an account, making a booking, or using our services. You have the right to withdraw your consent at any time by contacting us. In some cases, we process data based on contractual necessity (to fulfill services you requested) or legal obligations under Saudi law.

We collect the following types of information: • Personal Information: Name, email address, phone number, and billing information when you register or make a booking. • Biometric Data: Fingerprint or facial recognition data for access control (with your explicit consent). • Usage Data: Information about how you use our spaces and services. • Technical Data: IP address, browser type, and device information when you visit our website. • Payment Data: Transaction details processed through our payment providers. • Business Data: Company information provided for commercial registration services.

We use your information to: • Process bookings and payments for office and storage spaces • Deliver website design, app development, and commercial registration services • Provide access to our physical spaces • Send booking confirmations and important service updates • Improve our services and user experience • Comply with legal obligations under Saudi law • Prevent fraud and ensure security

We implement appropriate technical and organizational security measures to protect your personal data, including: • Encryption of sensitive data in transit and at rest • Secure storage of biometric data on-premises • Regular security audits and updates • Access controls and employee training • Incident response procedures for data breaches

We do not sell your personal data. We may share your information with: • Payment processors (Stripe, Moyasar) to process transactions • Service providers who assist in our operations under data protection agreements • Government authorities for commercial registration services when you request this service • Legal authorities when required by law

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected: • Account data: Retained while your account is active and for 2 years after deletion request • Booking records: Retained for 5 years for accounting and legal compliance • Biometric data: Deleted within 30 days of access revocation • Payment records: Retained as required by Saudi tax and commercial regulations • Website analytics: Anonymized after 12 months

Your data is primarily stored and processed within the Kingdom of Saudi Arabia. Where data transfer outside KSA is necessary (e.g., payment processing through international providers), we ensure adequate protection is in place through: • Contractual safeguards with data recipients • Ensuring the receiving country has adequate data protection laws • Obtaining your explicit consent where required by PDPL

Under the Saudi Personal Data Protection Law, you have the right to: • Access your personal data and obtain a copy • Correct inaccurate or incomplete information • Request deletion of your data (subject to legal retention requirements) • Withdraw consent for data processing at any time • Request restriction of processing in certain circumstances • Export your data in a portable format • Lodge a complaint with the competent authority if you believe your data rights have been violated

In the event of a personal data breach that may harm your interests, we will: • Notify the relevant authority within 72 hours of becoming aware of the breach • Inform affected individuals without undue delay • Document the breach and the measures taken to address it

We use essential cookies to operate our website and optional cookies to improve your experience and analyze site traffic. When you first visit our website, a cookie consent banner will appear allowing you to choose between accepting all cookies or only essential ones. Your preference is stored locally and you can change it at any time by clearing your browser data. Essential cookies are necessary for the website to function and cannot be disabled. Analytics cookies help us understand how visitors use our site.

If you have questions about this privacy policy, wish to exercise your data rights, or want to lodge a complaint, please contact us at: Email: privacy@makaan.space Address: Riyadh, Saudi Arabia