Privacy policy

Bona (بونا) is a private real estate brokerage in Jeddah, Saudi Arabia, operating under REGA FAL licence 1100313556, with its office in Al Rawdah District, Jeddah 23432. For the purposes of the PDPL, Bona is the controller of the personal data described here.

Reach us on WhatsApp at +966 59 329 6933. Email us at info@bona-real-estate.com.

Bona records website interactions such as page and property views, downloads, contact clicks and submitted enquiries. These records can include a visitor/session identifier, the page, referral and campaign information, advertising click identifiers, your consent choices, IP address and browser information. Our service stores these records to connect enquiries to visits and understand how people use the site.

Before optional tracking consent, the site still sends first-party interaction records to Bona and keeps visit context in session storage on your device. Choosing Essential only prevents optional Google and advertising tags from loading; it does not stop enquiry processing or all first-party records. Your consent choice is stored in local storage so the site remembers it.

If you accept analytics or advertising tracking, first-party attribution can also use local storage and a bona_id cookie with a 90-day lifetime. Google Analytics 4 loads with analytics consent; Meta Pixel loads with advertising consent. Google and Meta server event delivery is configured. TikTok Pixel is configured to load with advertising consent; event receipt is still being verified. Snapchat website tracking is not active. You can change your choice using Cookie settings in the footer.

GitHub Pages hosts the website; Cloudflare and our image hosting deliver pages or images. These services receive technical request information such as your IP address and browser details.

Website enquiry forms send the information you enter to Bona’s enquiry service, where it is stored and made available for follow-up. This can include your name, phone number, property interest, budget, message, page and visit reference. A form may also prepare a WhatsApp message; the website record does not depend on you sending that message.

When you choose a WhatsApp link, it opens WhatsApp with a prepared message and may include a property or visit reference. The WhatsApp message is sent when you press Send in WhatsApp. WhatsApp is operated by Meta and handles the conversation under its own terms and privacy policy. Bona may store enquiry information and match a received message to the visit reference.

When you contact Bona on WhatsApp about a property or an enquiry, or when we write to you about one, Bona stores that conversation — your messages and our replies, including the earlier messages of the same chat from up to 30 days before it became an enquiry — so that we can serve your enquiry. For a photo, voice note or file we keep only a note of its type, a document’s file name and any caption, not the item itself. Chats on the same number that are not about a Bona enquiry are not stored; the next paragraph describes the one narrow exception. If a stored conversation turns out not to be about one, any short excerpt of its first message kept with the enquiry record stays there (see “How long we keep it” below), and the messages we stored from it are deleted straight away.

There is one narrow exception. When a message sent or received on our number uses one of these property words — villa, apartment, rent (rental, for rent), for sale, real estate, property, duplex, penthouse, townhouse, or in Arabic فيلا, شقة, إيجار (للإيجار), للبيع, عقار, دوبلكس, بنتهاوس, تاون هاوس — or mentions a property document, meaning a brochure, or a floor plan, plan, price list, payment plan, master plan, fact sheet or booklet mentioned together with a property such as a unit, a project or a tower, or when the owner of Bona sends a document whose name or caption calls it a brochure, floor plan, plan, price list, payment plan, master plan, fact sheet or booklet, or names TK Estate & Design, his other company, and the chat is not already a Bona enquiry, we keep only the number (and the ids WhatsApp gives the chat), the name WhatsApp shows for it, those words (or that it was a property or TK document), and when such messages were sent, how many there were and who sent the last one, until 30 days after the last such message, so that the owner of Bona can check whether it is a Bona enquiry. A plan, a price list or a booklet mentioned on its own does not count. The conversation itself is not stored unless he adds it to the Bona inbox or it later becomes a Bona enquiry; it is then stored as the paragraph above says, its earlier messages included. If he marks it as not a Bona client, only the number and the ids WhatsApp gives the chat are kept, for up to a year, so that it is not shown to him again.

The owner of Bona and authorised members of the Bona team can read these conversations and reply to you through a private dashboard that requires sign-in. Replies sent from the dashboard come from Bona’s WhatsApp number, +966 59 329 6933, and the dashboard records which team member sent each one.

We keep a stored conversation for up to five years after its last message; it is then deleted automatically. The five years apply to the messages; your enquiry record itself follows “How long we keep it” below. That automatic deletion does not reach two other copies: the WhatsApp gateway server that Bona runs for this number keeps its own copy of the conversation, with no set time limit, and the chat also stays on our phones, in WhatsApp, under WhatsApp’s own terms. To have a conversation deleted from the dashboard, from our gateway server or from our phones, message us on WhatsApp or call us on +966 59 329 6933; see “Your rights” below.

When nobody on our team has written in your WhatsApp chat with us in the last 24 hours, Dana, our AI assistant, may answer your new messages from our number. Her first message identifies her as an AI assistant. Your messages in that conversation, our earlier replies in it and what we hold about your enquiry (such as your name, interest, budget and district) are sent to Retell and the AI providers it uses to produce the reply; she quotes only prices published on this site and hands the conversation to a team member when you ask to speak to a person, ask to view a home or make an offer. Write to us to have those messages deleted from our records.

Dana, our AI concierge, sends your messages or voice, page context and language through Bona’s service to Retell and the AI providers used for the conversation. Bona may store chat transcripts, call information and enquiry details received from this service. Calls may be recorded or transcribed. Use WhatsApp instead if you do not want to use the website concierge; on WhatsApp, Dana may also answer when nobody on our team has written in the chat in the last 24 hours — see “WhatsApp conversations with our team” for what that involves and how to ask for a person.

While you are talking to Dana the conversation is also kept in your own browser, in its session storage, so that it survives moving from page to page. It is held there for at most two hours, it stays on your device, and it is erased when you choose “New conversation” or close the tab.

If you leave a name, a number and what you are looking for, Bona stores that as an enquiry so a principal can follow it up, and handles it exactly like a WhatsApp enquiry — see “The data we hold, and why” below. Dana is not a person, gives no valuation and quotes no price that is not published on this site; a principal is always one WhatsApp message away instead. To have a concierge conversation, a recording, or the enquiry it produced deleted, write to us on WhatsApp at +966 59 329 6933.

When you contact us we keep what you give us: name, phone number, the property or area you are interested in, your budget or requirements if you share them, and the messages exchanged. If we arrange a viewing or act for you in a transaction, we also hold the documents it requires, such as a copy of your national ID or iqama, the title deed and the terms agreed.

We use this data to answer your enquiry; to arrange and record viewings; to represent you as buyer, seller, landlord or tenant; to prepare brokerage and lease agreements; and to meet our obligations as a licensed broker, including REGA record-keeping, Ejar registration of tenancies and anti-money-laundering checks where the law requires them.

We also link enquiries to visit and campaign records to measure contact outcomes. Advertising providers may use consented event data under their own policies.

Under the PDPL we rely on: your consent, given when you choose to contact us and withdrawable at any time; the steps you ask us to take before a contract, and the performance of a contract with you; our legal obligations as a REGA-licensed broker; and, for basic non-sensitive contact details only, our legitimate interest in replying to people who write to us, never applied in a way that overrides your rights.

We do not ask for sensitive data (health, religion, biometrics and the like); please do not send it to us.

Browser storage and server records have different lifetimes. First-party visit storage can use a 90-day lifetime after optional consent; session storage normally lasts for the tab session. Clearing browser storage does not delete enquiries, interaction records or conversation records already stored by Bona or a service provider.

Contact us to ask about retention or request deletion of your enquiry and related records. Retention for transaction documents and any records that must be kept to meet legal obligations is handled separately. This notice does not promise that server records are automatically deleted when browser identifiers expire.

Property owners and developers: information needed to progress an enquiry, viewing or offer, as described to you when arranging the service.

Service providers include GitHub Pages and Cloudflare for hosting/delivery; Meta for WhatsApp and advertising measurement; Google for analytics; and Retell and its AI service providers for the concierge and for Dana’s WhatsApp replies. Opening an embedded Matterport tour sends technical information to Matterport. These providers also apply their own privacy policies.

With advertising consent, Meta server events may include event and campaign identifiers, IP/browser information and hashed matching information derived from a lead’s phone number or first name. Hashing is not anonymisation. Google analytics events carry identifiers and interaction/source information; the current Google server delivery also requires advertising consent.

TikTok Pixel loads on public pages with advertising consent and may use first-party cookies for event matching. Automatic Advanced Matching is enabled for email addresses, phone numbers, names, address details (city, region, postal code and country) and external IDs. It can detect eligible identifiers, hash them in the browser and send them to TikTok for attribution, audience matching and advertising optimisation; hashing is not anonymisation. Enhanced Data Postback is enabled and can collect page and property metadata, button interactions, scroll engagement and performance information. We exclude TikTok from the internal operations dashboard. Snapchat tracking remains pending setup. The separate TikTok server integration sends Contact and SubmitForm events with event ID/time, page URL, IP/browser information and available TikTok cookie/click identifiers. That server integration does not send names, phone numbers, email addresses or message text, and requires advertising consent at the event and at delivery. Configuration does not establish successful receipt or matching.

Authorities: information may be provided when required by applicable law.

Bona uses a staff dashboard backed by the enquiry database. Authorised staff can view and update lead and campaign records stored on our service. The older static planning dashboard stores some planning notes locally in the staff member’s browser; this does not mean all Bona records are browser-only.

Bona’s hosting, messaging, analytics, advertising-measurement, tour and AI providers may process data outside Saudi Arabia. The location and processing arrangements depend on the provider and service. We do not claim that all website or enquiry records remain inside Saudi Arabia. Contact us for information about the handling of your particular enquiry.

Under the PDPL you have the right to know what personal data we hold about you and how we use it; to receive a copy in a clear, readable form; to have it corrected, completed or updated; to have it deleted or destroyed; and to withdraw any consent you have given, at any time, without affecting what was done before.

To use any of these rights, message us on WhatsApp. We will confirm your identity and respond within 30 days, at no charge.

If you are not satisfied with our answer, you may complain to the competent authority for personal data protection in Saudi Arabia, the Saudi Data & AI Authority (SDAIA), through its published channels.

Our services and this site are intended for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has sent us personal data, tell us and we will delete it.

The staff enquiry dashboard requires authentication. Bona’s service stores enquiry and interaction records on its server, with access controls for the service and staff tools. Contact us if you have concerns about access to your records.

No method of transmission is perfectly secure. If we learn of a breach affecting your data, we will notify you and the competent authority as the PDPL requires.

We will update this page when our practices change, for example if we enable analytics or change how we handle your data. The date at the top shows the current version; material changes will be flagged here for 30 days.

30 September 2026: we added “WhatsApp conversations with our team”. Bona now stores its WhatsApp conversations with clients about their enquiries, and authorised team members can read and answer them from a private dashboard.

30 September 2026: we added a narrow exception to “WhatsApp conversations with our team”. When a message sent or received on our number uses one of the property words that section lists, or mentions a property document as that section defines it, or the owner of Bona sends one of the kinds of document it lists or a document of TK Estate & Design, and the chat is not already a Bona enquiry, we keep a short record of the chat — the number, the name WhatsApp shows and those words, not the conversation — until 30 days after the last such message, so that the owner of Bona can check it. If he marks it as not a Bona client, only the number and the ids WhatsApp gives the chat are kept, for up to a year.

1 October 2026: we added Dana, our AI assistant, to “WhatsApp conversations with our team”. When nobody on our team has written in a WhatsApp chat in the last 24 hours, she may answer new messages from our number, identifies herself as an AI assistant in her first message, and hands the conversation to a team member on request; your messages in those chats, our earlier replies and your enquiry details are sent to Retell and the AI providers it uses.