Legal

Privacy Policy

Last updated: March 16, 2026

1. Introduction

NOLA ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our platform for fractional real estate investment. NOLA operates under the regulatory framework of the Real Estate General Authority (REGA) Regulatory Sandbox in the Kingdom of Saudi Arabia.

2. Information We Collect

We may collect the following types of information:

  • Personal identification information (name, email address, phone number, national ID or Iqama number)
  • Financial information required for KYC/AML compliance (bank details, source of funds documentation)
  • Property-related information provided by property owners (title deeds, property valuations, legal documents)
  • Technical data (IP address, browser type, device information, usage patterns)
  • Communication records (emails, support tickets, in-platform messages)

3. How We Use Your Information

We use the information we collect to:

  • Verify your identity and comply with KYC/AML regulations
  • Process fractional investment transactions and investment activities
  • Communicate with you about your account, transactions, and platform updates
  • Improve our platform, services, and user experience
  • Comply with legal obligations and regulatory requirements
  • Prevent fraud and ensure platform security

4. Data Sharing & Disclosure

We do not sell your personal information. We may share your data with:

  • Regulatory authorities (REGA, CMA) as required by law
  • Licensed PropTech partners for property management services
  • KYC/AML verification service providers
  • Legal and compliance advisors when necessary
  • Technology service providers who assist in platform operations, subject to strict confidentiality agreements

5. Data Security

We implement industry-standard security measures to protect your information, including encryption of data in transit and at rest, access controls, regular security audits, and secure infrastructure. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. We also retain data as necessary to comply with legal obligations, resolve disputes, and enforce our agreements, in accordance with Saudi Arabian data protection regulations.

7. Your Rights

In accordance with applicable data protection laws in Saudi Arabia, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data, subject to legal and regulatory retention requirements
  • Withdraw consent for data processing where consent is the legal basis
  • Lodge a complaint with the relevant regulatory authority

8. Cookies & Tracking

We use cookies and similar tracking technologies to enhance your browsing experience, analyze platform usage, and deliver relevant content. You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

9. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party services you access through our platform.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@nolatoken.com or through our Contact page.