Privacy Policy
Effective date: March 19, 2026 | Last updated: March 19, 2026
Saudi Tokenized Real Estate (“we,” “us,” “the Platform”), operated by The Vanderbilt Portfolio AG, is committed to protecting the privacy of all visitors and users. This Privacy Policy explains in detail what information we collect, how we collect it, the legal bases for processing, how we use and protect that information, your rights as a data subject, and how you may contact us regarding privacy matters. By accessing sauditokenizedrealestate.com, you acknowledge that you have read and understood this policy.
Scope of This Policy
This policy applies to all data processing activities conducted through sauditokenizedrealestate.com, including our market intelligence reports, regulatory analysis, entity profiles, comparison tools, investment strategy guides, glossary resources, and any email communication initiated by users. This policy does not govern data processing by third-party websites linked from this Platform, including government regulatory portals such as the Capital Market Authority (cma.org.sa), the Real Estate General Authority, or the Saudi Central Bank.
Information We Collect
Automatically collected information. When you visit this Platform, our servers and analytics tools automatically collect certain technical data. This includes your IP address (anonymized at the network level for analytics), browser type and version, operating system, screen resolution, device category (desktop, mobile, tablet), referring URL, pages viewed, time spent on each page, scroll depth, click interactions, and geographic location at the country and city level derived from your IP address. This data is collected through Google Analytics 4, which processes data according to Google’s privacy policies. We have configured Google Analytics to anonymize IP addresses and to respect Do Not Track browser signals where technically feasible.
Voluntarily provided information. We collect personal information that you voluntarily submit to us. This includes your name and email address when you subscribe to our newsletter, your email address and message content when you contact us at info@sauditokenizedrealestate.com, and any information you include in institutional data licensing inquiries submitted through our contact channels. We do not require account creation to access any published content on the Platform.
Information we do not collect. We do not collect financial account information, investment portfolio details, cryptocurrency wallet addresses, government-issued identification numbers, biometric data, or any data categorized as sensitive personal data under applicable data protection regulations. Our Platform is an informational resource about Saudi real estate tokenization — we do not facilitate investment transactions, hold investor funds, or process financial transactions of any kind.
Cookies and Tracking Technologies
This Platform uses the following categories of cookies:
Essential cookies. Required for basic site functionality including page navigation, content delivery network optimization, and security protections. These cookies do not collect personally identifiable information and cannot be declined without affecting Platform functionality. Essential cookies are session-based and expire when you close your browser.
Analytics cookies. Google Analytics 4 sets cookies to distinguish unique users and sessions, enabling us to understand traffic patterns, popular content, and user behavior in aggregate. Analytics cookies have a maximum retention period of 14 months. You may decline analytics cookies via the cookie consent banner displayed on your first visit. Declining analytics cookies does not affect your ability to access any content on the Platform.
Advertising cookies. Google AdSense may serve advertisements on this Platform. Depending on your cookie consent preferences, AdSense may use cookies to serve personalized advertisements based on your browsing history across websites in the Google Display Network, or non-personalized advertisements based solely on the content of the page you are viewing. Google’s privacy policy (policies.google.com/privacy) governs all data collection by AdSense. You may manage your Google advertising preferences at adssettings.google.com.
Cookie consent management. Our cookie consent banner allows you to accept or decline non-essential cookies (analytics and advertising) on your first visit. Your preference is stored in a local cookie for 12 months. You may change your preferences at any time by clearing your browser cookies and revisiting the Platform.
How We Use Your Information
We use collected information for the following purposes: operating and maintaining the Platform; analyzing aggregate traffic patterns to improve content quality and relevance; understanding which market intelligence topics, regulatory updates, and investment strategy guides generate the most reader engagement; responding to your inquiries and newsletter subscription requests; delivering newsletter communications to subscribers; ensuring Platform security and preventing abuse; and complying with applicable legal obligations.
We do not use your information for automated decision-making or profiling. We do not sell, rent, or share your personal information with third parties for their marketing purposes.
Legal Basis for Processing
Our processing of personal data is based on the following legal grounds under applicable data protection laws: legitimate interest (analytics processing to improve Platform content), consent (cookie-based tracking and newsletter subscriptions), contractual necessity (responding to your inquiries and licensing requests), and legal obligation (retaining records as required by applicable law).
Third-Party Services and Data Sharing
We use the following third-party services that may process your data:
Google Analytics 4 — traffic analytics. Data is processed on Google servers. We have executed a Data Processing Agreement with Google and configured IP anonymization.
Google AdSense — advertising. Google may collect data through advertising cookies as described above. See Google’s privacy policy for full details.
Cloudflare — content delivery and security. Cloudflare processes limited technical data (IP addresses, request headers) to deliver content and protect against malicious traffic. Cloudflare’s privacy policy governs this processing.
Newsletter service provider — email delivery. Subscriber email addresses are processed by our email service provider solely for the purpose of delivering our newsletter. Subscriber data is not shared with other parties.
We do not share your personal information with any Saudi government entities including CMA, REGA, SAMA, or any tokenization platforms analyzed on this site.
Data Retention
Analytics data is retained in Google Analytics for 14 months from collection. Newsletter subscriber data is retained until you unsubscribe. Email correspondence is retained for 24 months from the date of last communication. Cookie consent preferences are retained for 12 months. We review retention schedules annually and delete data that is no longer necessary for its stated purpose.
Data Security
We implement technical and organizational measures to protect your data, including: HTTPS encryption for all data in transit, access controls limiting data access to authorized personnel, regular security audits of Platform infrastructure, and secure configuration of all third-party service integrations. While we implement industry-standard security measures, no method of electronic transmission or storage is 100 percent secure, and we cannot guarantee absolute security.
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
Right of access — You may request a copy of all personal data we hold about you.
Right of rectification — You may request correction of inaccurate personal data.
Right of erasure — You may request deletion of your personal data, subject to legal retention requirements.
Right to restrict processing — You may request that we limit how we use your data.
Right to data portability — You may request your data in a structured, machine-readable format.
Right to object — You may object to processing based on legitimate interest, including analytics.
Right to withdraw consent — Where processing is based on consent (cookies, newsletter), you may withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at info@sauditokenizedrealestate.com. We respond to all data rights requests within 30 calendar days. If we require additional time due to request complexity, we will notify you within the initial 30-day period.
International Data Transfers
The Vanderbilt Portfolio AG is based in Switzerland. Data collected through the Platform may be processed in Switzerland, the European Economic Area, and the United States (through Google’s infrastructure). Where data is transferred outside your jurisdiction, we rely on appropriate safeguards including standard contractual clauses and adequacy decisions.
Children’s Privacy
This Platform is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately at info@sauditokenizedrealestate.com, and we will delete the data.
Changes to This Policy
We may update this Privacy Policy to reflect changes in our data practices, third-party services, or applicable law. Material changes will be noted by updating the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Platform after changes constitutes acceptance of the updated policy.
Contact Information
For all privacy-related inquiries, data rights requests, or complaints:
Email: info@sauditokenizedrealestate.com
Entity: The Vanderbilt Portfolio AG
Saudi Arabia Personal Data Protection Law (PDPL) Compliance
In addition to international data protection standards, we comply with the Saudi Arabia Personal Data Protection Law (PDPL), which became effective in September 2023 under Royal Decree M/19. The PDPL governs the collection, processing, and transfer of personal data relating to Saudi residents and citizens. Key PDPL-specific provisions applicable to this Platform include: processing of personal data requires a lawful basis (consent, legitimate interest, or legal obligation), data subjects have the right to know what data is collected and how it is processed, cross-border data transfers require adequate protection measures, and data breach notification must occur within 72 hours of discovery.
Our compliance with the PDPL ensures that Saudi-based users of this Platform — including institutional investors, CMA sandbox participants, and real estate professionals researching tokenization frameworks — receive data protection consistent with Saudi law. We maintain a PDPL compliance register documenting all data processing activities, lawful bases, retention periods, and cross-border transfer mechanisms.
Cookie Consent Details and Google AdSense
This Platform participates in the Google AdSense program for advertising revenue. Google AdSense uses cookies and similar technologies to serve advertisements. Detailed information about AdSense data processing:
Personalized advertising: When you consent to advertising cookies, Google may use data from your visits to this and other websites to show you advertisements that are relevant to your interests. This includes data about the pages you visit, the content you interact with, and your geographic location. Google’s advertising partners may also receive this data.
Non-personalized advertising: When you decline advertising cookies or when we detect that personalized ads are not appropriate (for example, in jurisdictions where explicit consent is required), Google serves context-based advertisements related to the content of the page you are viewing rather than your browsing history.
Ad revenue and Platform operation. Advertising revenue through Google AdSense supports the free publication of our market intelligence, regulatory analysis, and investment strategy content. No content on this Platform is influenced by advertising relationships — our editorial independence from advertisers is absolute.
See also our Terms of Service and Research Methodology for additional information about how we operate this Platform.
Updated March 19, 2026