Home · Privacy notice
Privacy notice
Last updated 27 September 2026
This notice explains how we collect, use, share and protect your personal data when you visit ihsanalharamain.com, send us a client brief, or engage us through the Ihsan al-Haramain Consulting Programme. It follows the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The Ihsan al-Haramain Consulting Programme is operated by Alpha1Estates, a UK-headquartered real estate advisory firm. Alpha1Estates is the controller of your personal data.
Alpha1Estates, c/o Alpha1Corp, 167-169 Great Portland Street, London W1W 5PF, United Kingdom. Company number 05408364.
Privacy questions: info@alpha1estates.com
2. The personal data we collect
Information you give us
- Identity and contact details: name, nationality, country of residence, telephone or WhatsApp number, email and postal address.
- Professional details: employer, position, company or institution, where you enquire on behalf of an organisation.
- Property requirements: your objective, preferred locations, property type, size, budget, financing position, time horizon and investment criteria.
- Residency and visa status in Saudi Arabia, where relevant to your eligibility.
If you become a client, we will also collect identification documents and financial information needed to complete checks and your transaction.
Religion (special category data)
Under Saudi law, individual ownership in Makkah and Madinah is limited to Muslims. Where you ask us to advise on property in Makkah or Madinah, we may need to record that you are Muslim in order to assess your eligibility. Religion is special category data under UK GDPR. We collect it only for this purpose, only with your explicit consent, and we do not ask for it in the website form.
Information collected automatically
Technical data when you use the website, such as your IP address, browser type and device information, and the pages you visit. See our Cookie policy.
Information from third parties
Once you engage us, we may receive information from KYC, anti-money-laundering and sanctions-screening providers, and from public registries and sanctions lists.
3. Why we use your data, and our lawful basis
|
Purpose |
Lawful basis |
|
Responding to your enquiry or client brief |
Legitimate interests (answering people who contact us) and steps you ask us to take before a contract |
|
Providing our advisory services under the Client Advisory Agreement |
Performance of a contract |
|
Assessing eligibility for property in Makkah and Madinah |
Your explicit consent |
|
Identity, anti-money-laundering and sanctions checks |
Legal obligation |
|
Keeping records of our advice and transactions |
Legal obligation and legitimate interests |
|
Sending updates and market news you have asked for |
Consent |
|
Running and securing this website |
Legitimate interests |
|
Establishing, exercising or defending legal claims |
Legitimate interests and legal obligation |
4. Who we share your data with
We share only what each party needs, and only where it is relevant to your enquiry or engagement:
- Property developers, sellers and landlords, when you ask us to pursue a property.
- Banks, financiers and mortgage providers.
- Lawyers, notaries and other professional advisers acting in your transaction.
- Saudi government registries and authorities, including the Real Estate General Authority and its Saudi Properties platform, as required to complete a transaction.
- KYC, anti-money-laundering and sanctions-screening providers.
- IT, hosting and email providers who process data for us under contract.
- Our own professional advisers, and regulators or law enforcement where the law requires it.
We do not sell your personal data.
5. International transfers
Advising on property in Saudi Arabia means some of your data will be transferred there. The UK has not designated Saudi Arabia as providing an adequate level of data protection, so we protect these transfers with the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Where neither is possible, we rely on your explicit consent or on a transfer being necessary for a contract with you, as permitted by Article 49 UK GDPR. Some of our service providers may process data in other countries under equivalent safeguards.
6. How long we keep your data
- Enquiries that do not lead to an engagement: up to 24 months from your last contact.
- Client records: the length of the engagement plus 6 years.
- Marketing preferences: until you withdraw consent.
We may keep data longer where the law requires it or where it is needed for a legal claim.
7. How we protect your data
We use organisational and technical measures appropriate to the risk, including access controls, encryption in transit and staff confidentiality obligations. Client briefs sent through the website are transmitted over an encrypted connection.
8. Your rights
You have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to our use of your data, including for direct marketing;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting processing already carried out.
To exercise any of these rights, email info@alpha1estates.com. We will reply within one month.
9. Marketing
We send market updates only if you have agreed to receive them. You can withdraw consent at any time by clicking “unsubscribe†in any email or by emailing us.
10. Children
Our services are not intended for anyone under the age of 18, and we do not knowingly collect their data.
11. Complaints
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.
12. Changes to this notice
We may update this notice from time to time. The date at the top shows when it last changed.