Privacy policy

TK Estate & Design (TK Estate) is a private real estate brokerage in Jeddah, Saudi Arabia, operating under REGA FAL licence 1200048020 (CR 7053753344), with its office at 3646 Prince Muhammad bin Abdulaziz Rd, Al Rawdah, Jeddah 23432. For the purposes of the PDPL, TK Estate & Design is the controller of the personal data described here.

Reach us by email at info@tk-estates.com or on WhatsApp at +966 56 738 7731.

Very little. This site is a set of static pages: no accounts, no database of visitors, no login. Browsing it creates no record of you with TK Estate & Design beyond what is described below.

Analytics and advertising cookies are set only with your consent. When you first visit, a consent banner asks whether Google Analytics 4 (which helps us understand which pages are read) may use analytics cookies and whether we may enable the Meta Pixel (to measure our Instagram and Facebook advertising); you can accept both, accept analytics cookies alone, or refuse both, and you can change your choice at any time from the link in the footer. Google Analytics 4 runs on every visit, whatever you choose. Until you accept analytics cookies, it is told that you have not consented: it sets no cookie and stores no identifier on your device, and the measurements it sends to Google (the page you open, with any advertising click identifier taken out of its address, the page that referred you and technical details of your browser such as its language and screen size, which reach Google with your IP address, as any request to a website does) are not linked to you or to your earlier visits, unless you then accept analytics cookies before the page is fully reloaded: Google Analytics then keeps the code it was using as the identifier in its cookie, so the measurements already sent with that code (on that page and on any page you opened before it through the site's links) join your later visits. Once you accept analytics cookies, it uses its cookies to recognise your browser from one page and one visit to the next. Either way, Google Analytics 4 also records on its own when you scroll to the bottom of a page, click a link to another website (WhatsApp links included, with the link's address), download a file such as a brochure, start or send one of the site's forms, or search the site, and the site tells it when you view a property, open its photos, 3D tour, video or map, download a brochure, tap a Call or WhatsApp button or send an enquiry, with the button used and the property's code (and, once you accept analytics cookies, the random visit code), never what you type. If you have accepted advertising cookies, each of these reports to an advertising platform also carries a code of its own for that report (not the visit code; for an enquiry, the same code our customer system stores with it), so that each platform counts it only once; Google Analytics and Google Ads receive that code only if you have also accepted analytics cookies. The Meta Pixel stays switched off until you accept advertising cookies. If you accept advertising cookies, Google Analytics also works with Google Ads, which we have linked to it: Google may set its advertising cookies (_gcl_au, and _gcl_aw with an ad's click identifier when you arrive from one of our ads) and keep advertising information in your browser's local storage (_gcl_ls), such as that click identifier and a note of conversions such as enquiries, and it receives Google Analytics' measurements of your visit through its advertising services (Google Ads and DoubleClick), so that it can tell which of our ads led to a visit or an enquiry. Google also receives a signal it could use to build advertising audiences; we have not switched on audience sharing with Google Ads (personalised advertising), and we will update this notice before we do. Even if you do not accept advertising cookies, when you send an enquiry or tap a Call or WhatsApp button, Google Ads receives a signal that this happened, without advertising cookies and with any ad click identifier removed: the address and title of the page and technical details of your browser, together with, if you have not accepted analytics cookies, the random code Google Analytics gives your visit when it measures without cookies (the same code stays on pages you open through the site's links until the page is fully reloaded), or, if you have accepted analytics cookies, Google Analytics' identifier for your browser. Google uses such signals to estimate how many enquiries and calls our ads bring. If you refuse, no cookie from Google or Meta is set. Before you choose, or if you refuse, the site keeps only this in your browser: your choice, once made, and, until you close the tab, a note of the visit (how you arrived: the landing page, the referring page and any campaign tags or click identifiers in the link; when, and how many pages you have opened) with random codes for it, one of which the WhatsApp buttons add to your message as a reference. Beyond that, only the technical logs below exist, and Google Analytics' measurement, which runs without cookies. If you accept analytics or advertising cookies, the site keeps that note in your browser after you close the tab as well, together with the identifiers of the tools you accepted, and sets its own cookie, tk_id, which holds the note's random code; the cookie lasts 90 days and is renewed on every page you open. If you withdraw consent later, the site stops using the tool concerned at once (Google Analytics goes back to measuring without cookies), but cookies Google or Meta had already set stay in your browser until they expire or you clear them.

As with any website, the pages are served by a hosting provider (Cloudflare Pages) and the photographs by a server operated for us and delivered through Cloudflare. They may keep short-lived technical logs (IP address, browser type, page requested) to keep their service secure. We do not use those logs to identify you.

When you send an enquiry from a listing, the contact page or the List With Us page, the site sends what you typed — your name, phone number, email, message, the property you asked about and the language you used — to our enquiry service, together with how you reached the site, taken from the note of the visit described above: the campaign tags of the link that brought you (for example, which of our Google ads you clicked and the keyword it was shown for) or, without them, the website that referred you, and, only if you have accepted advertising cookies, the click identifier Google added to that link (gclid, or gbraid or wbraid). We use it to see which of our advertising brings enquiries, and so that our team knows how you found us. With that consent, we may also tell Google that this click led to an enquiry, to measure our Google ads: for this we send Google only the click identifier and the time of the enquiry, never your name, phone number, email or message. Separately, Google's tag tells Google Ads when an enquiry is sent, as described in What this website collects. That service records the enquiry in TK Estate & Design's own customer system (hosted on a server we control) so that an advisor can follow it up, notifies our team, and sends a copy to info@tk-estates.com. If you entered an email address, we also send you a short confirmation that your enquiry was received, and we send the same confirmation to the phone number you entered, on WhatsApp. These confirmations concern only the enquiry you sent: they are not marketing messages and do not add you to any list.

The same page then offers to open WhatsApp with a message pre-filled from your enquiry. Nothing is sent to WhatsApp unless you press send there.

A hidden anti-spam field and a short rate limit protect the form; no other profiling is applied to what you submit.

The Call and WhatsApp buttons on this site open your phone app or WhatsApp on your device. A WhatsApp button also adds a reference line to the pre-filled message (the property's code, where there is one, the random visit code described above, and the words "via Google" when you reached the site through one of our Google ads), which you can see and delete before you send. If you send the message with the words "via Google" in it, our customer system records that you found us through one of our Google ads. A tap on a Call or WhatsApp button is recorded in Google Analytics 4 with the button used and the property's code, and with that same visit code only once you accept analytics cookies; until then it is recorded without cookies. If you have accepted advertising cookies, the tap is also sent to the Meta Pixel as a contact, with the property's code, and reaches Google Ads with its advertising cookie; otherwise the only advertising platform told of it is Google Ads, through the signal without advertising cookies described in What this website collects. A message travels from your WhatsApp account to our WhatsApp Business number only when you press send. This optional prefilled enquiry is separate from the automatic transactional WhatsApp confirmation scheduled after you submit the website form, which does not require you to press Send in WhatsApp.

WhatsApp is operated by Meta. Once you message us, Meta's WhatsApp Terms of Service and Privacy Policy govern how the conversation is transmitted and stored on their side, including on servers outside Saudi Arabia.

When you contact us we keep what you give us: name, phone number, email, the property or area you are interested in, your budget or requirements if you share them, and the messages exchanged. If we arrange a viewing or act for you in a transaction, we also hold the documents it requires, such as a copy of your national ID or iqama, the title deed and the terms agreed.

We use this data to answer your enquiry; to arrange and record viewings; to represent you as buyer, seller, landlord or tenant; to prepare brokerage and lease agreements; and to meet our obligations as a licensed broker, including REGA record-keeping, Ejar registration of tenancies and anti-money-laundering checks where the law requires them.

We do not sell personal data, we do not build marketing profiles, and we will not add you to any mailing list without asking.

Under the PDPL we rely on: your consent, given when you choose to contact us or accept analytics or advertising cookies, and withdrawable at any time; the steps you ask us to take before a contract, and the performance of a contract with you; our legal obligations as a REGA-licensed broker; and our legitimate interest, never applied in a way that overrides your rights, for two things only: replying to people who write to us, using basic non-sensitive contact details, and measuring how this website is used and how our advertising performs, without advertising cookies (the measurement Google Analytics makes without cookies and without identifying you before you accept analytics cookies, and the signal Google Ads receives when an enquiry is sent or a Call or WhatsApp button is tapped without advertising consent, which carries Google Analytics' identifier for your browser only if you have accepted analytics cookies; both described above).

We do not ask for sensitive data (health, religion, biometrics and the like); please do not send it to us.

Enquiries that do not lead to a viewing or a transaction are deleted within 24 months of the last message between us. Records of viewings and of transactions we have brokered are kept for as long as REGA and Saudi commercial and tax rules require, normally ten years from the end of the transaction, then destroyed. Analytics data in Google Analytics is retained for 14 months. Google's advertising cookies _gcl_au and _gcl_aw, set only with advertising consent, expire after 90 days; its _gcl_ls entry stays in your browser's storage until you clear it. In your browser, the note of your visit that the site keeps once you accept analytics or advertising cookies is used for 90 days from when it was created, then replaced by a new one on your next visit, and its tk_id cookie expires 90 days after the last page you opened; choosing Essential only deletes both at once.

You can ask us to delete your data sooner at any time. We will, unless a law requires us to keep it, in which case we will tell you which law and for how long.

Property owners and developers: only with your consent, and only what is needed to progress a viewing or an offer, such as your name and when you can visit. We never pass your number to an owner or developer without telling you.

Service providers: Cloudflare (hosting of these pages and the enquiry service, and delivery of photographs), the image storage server operated for us, Meta (WhatsApp Business, and the Meta Pixel if you accept advertising cookies), Google (Google Analytics 4 on every visit: without cookies until you accept analytics cookies, and with them once you do; and Google Ads, which, if you have accepted advertising cookies, may receive the click identifier of one of our ads and the time of the enquiry it led to, as well as Google Analytics' measurements of your visit, and which otherwise receives, when an enquiry is sent or a Call or WhatsApp button is tapped, only a signal without advertising cookies, carrying Google Analytics' identifier for your browser if you have accepted analytics cookies), Telegram (an internal notification to our team when an enquiry arrives), and our email provider (the copy sent to info@tk-estates.com and the confirmation sent to you). When you choose to open a 3D tour, the tour is served by Matterport, Inc. (United States), which then receives your IP address and may set its own cookies; nothing from Matterport loads until you press play. The maps on the contact page and on listing pages are served by OpenStreetMap (OpenStreetMap Foundation, United Kingdom) and load automatically with the page, typically as the map nears the visible area of your browser window; OpenStreetMap receives your IP address when the map loads. Links that open Google Maps are ordinary links: Google Maps receives nothing unless you follow one.

Authorities: REGA, the courts or other Saudi authorities when the law requires it, and only to the extent required.

Some of the providers above process data outside the Kingdom: Cloudflare delivers these pages through its global network, Meta stores WhatsApp messages on its own infrastructure abroad, and Google, Meta, Telegram, Matterport and OpenStreetMap operate their services from outside Saudi Arabia. A WhatsApp conversation with us, the technical logs of your visit, Google Analytics' measurement of your visit (without cookies until you accept analytics cookies; with advertising cookies, also through Google's advertising services), the signal Google Ads receives, without advertising cookies, when an enquiry is sent or a Call or WhatsApp button is tapped, the click identifier of a Google ad that led to an enquiry, with the time of that enquiry (only if you have accepted advertising cookies), and the enquiry notifications may therefore be processed outside Saudi Arabia. Our own customer records stay on a server we control.

The PDPL permits such transfers where they are necessary to provide a service you have asked for and appropriate safeguards are in place. We keep what leaves the Kingdom to the minimum and keep no client records on those platforms beyond the conversation or notification itself.

Under the PDPL you have the right to know what personal data we hold about you and how we use it; to receive a copy in a clear, readable form; to have it corrected, completed or updated; to have it deleted or destroyed; and to withdraw any consent you have given, at any time, without affecting what was done before.

To use any of these rights, email info@tk-estates.com or message us on WhatsApp. We will confirm your identity and respond within 30 days, at no charge.

If you are not satisfied with our answer, you may complain to the competent authority for personal data protection in Saudi Arabia, the Saudi Data & AI Authority (SDAIA), through its published channels.

Our services and this site are intended for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has sent us personal data, tell us and we will delete it.

Client records are kept on access-controlled devices and accounts used only by TK Estate & Design staff, with two-step verification on our WhatsApp Business account and our hosting. Property documents are shared only through channels we control, and copies of ID documents are deleted once the transaction they were needed for is complete, unless the law requires us to keep them.

No method of transmission is perfectly secure. If we learn of a breach affecting your data, we will notify you and the competent authority as the PDPL requires.

We will update this page when our practices change, for example if we add a new analytics or advertising tool or change how enquiries are handled. The date at the top shows the current version; material changes will be flagged here for 30 days.

12 November 2026: Google Analytics 4 now runs on every visit, without cookies until you accept analytics cookies; it used to load only once you had accepted them. See What this website collects. And if you have accepted advertising cookies, we may now tell Google that a click on one of our ads led to an enquiry. See The enquiry form. When you send an enquiry or tap a Call or WhatsApp button, Google Ads now also receives a signal without advertising cookies even if you have not accepted advertising cookies. If you have accepted them, Google Analytics has worked with Google Ads since we linked the two on 5 November 2026 (this notice now describes it), and with this update its measurements also reach Google's advertising services. See What this website collects.

We measure visits and improve our advertising. Essential cookies keep the site working. Until you accept analytics, Google Analytics measures visits without cookies and without identifying you; with your consent it uses cookies. Google Ads is also told, without advertising cookies, when you send an enquiry or tap a Call or WhatsApp button. Advertising cookies load only with your consent, and you can change your mind at any time from the footer.