Legal

Privacy policy

What we collect, why, where it's kept, and what you can ask us for.

The controller

The party responsible for processing your personal data through this website is:

Full legal name: شركة فكة حلول (Sharikat Fkah Hulul)
Unified national number: 7055054576
Address: Riyadh, Saudi Arabia
Data protection officer: info@fkahtech.com

What this policy covers

If you sign a written subscription agreement with Fkah, its terms prevail on what it covers, and this policy applies to everything else.

What we collect

We collect what you type, and the technical data a visit produces on its own. We buy no data from third parties.

Waitlist form: Company name, commercial registration number, work email, mobile number, your role, and a rough band for your monthly B2B invoicing, along with which side of a trade you are on.
Contact form: Name, company, email, mobile number, what the enquiry is about, and the text of your message.
Complaint form: Name, company, commercial registration number, email, mobile number, the category of complaint, and the details as you write them.
Consent record: The wording you agreed to, the date, and which form it came from.
Technical data: IP address, browser and device type, the page you arrived from, and the time of the visit.

What we never ask for

No form asks for a bank account number, a card number, an identity document, or any sensitive data. Please do not send them to us.

Why we process it

To answer your message or request.
To tell you when the service is available, if you explicitly agreed to that.
To receive, handle and follow up complaints.
To measure and improve the website in aggregate.
To stop abuse of the forms and automated submissions.
To meet our legal obligations and keep the records they require.

We use your data for nothing else. We tell you in advance about any new purpose, and start it only on a valid lawful basis.

Lawful basis

Where we stand today: marketing contact rests on your explicit consent, which you may withdraw at any time. Withdrawal does not affect processing carried out before it.

Handling complaints and keeping their records rests on our legal obligations.

Technical data and form protection rest on a legitimate interest in running the site safely.

We process your data on the basis of your consent, to carry out a request you made, or to meet a legal obligation, under the Personal Data Protection Law and its Implementing Regulation.

Who processes data on our behalf

We do not sell your data and we do not share it with advertisers. We use service providers to run the site, and these are their roles:

Each customer's accounts are analysed for that customer alone: they are not pooled with another customer's data, not sold, and not shown to any third party.

The database: A database inside Saudi Arabia, where form submissions, accounts and conversations with the site assistant are held.
Site delivery: Delivering the pages of the site to visitors, and checking that a form was sent by a person rather than a script.
Analytics: There is no analytics tool on the site today, and no tracking cookies.

Every service provider is bound to protect the data and to process it only for our purposes and on our instructions, inside the Kingdom of Saudi Arabia.

Where your data is held

What this site’s forms send — together with accounts and conversations with the site assistant — is held in databases inside Saudi Arabia, and their backups are in the Kingdom with them.

Personal data is therefore not transferred outside the Kingdom in the ordinary course of running this site.

This processing follows the safeguards required by the Personal Data Protection Law and its Implementing Regulation.

Your rights

Under the Personal Data Protection Law, you may ask:

To know how your data is processed and why.
To access the data we hold about you.
To receive a copy of it in a readable format.
To correct anything wrong, incomplete or out of date.
To have your data destroyed once it is no longer needed for the purpose it was collected for.
To withdraw your consent to marketing contact at any time.
To complain to the competent data protection authority if our answer does not satisfy you.

To exercise any of these: info@fkahtech.com. We verify your identity first, then answer within the statutory period.

How long we keep it

We keep data for as long as the purpose it was collected for requires, then destroy it. The periods are:

Conversations with the site assistant: 180 days from the last message, then deleted automatically.
Waitlist submissions: For as long as the purpose it was collected for requires, then destroyed.
Contact messages: For as long as the purpose it was collected for requires, then destroyed.
Complaint records: For as long as the purpose it was collected for requires, then destroyed.
Marketing consent records: For as long as the purpose it was collected for requires, then destroyed.
Technical logs: For as long as the purpose it was collected for requires, then destroyed.

Data security

We publish our security controls in their real state: what is live today, and what is planned and not yet built.

We claim no certificate, audit or penetration test that has not happened.

The detail is on the security page under Trust.

Data about minors

This site is aimed at businesses and the people who represent them. We do not knowingly collect data from anyone under the age of majority.

This site is meant for businesses and the people who represent them, and we do not knowingly collect data about minors. If a minor's data reaches us by mistake, we delete it.

Changes to this policy

We update this page when what we collect, where it is held, or who processes it changes.

The date of the last revision is at the top. Where a change materially affects the basis of your consent, we tell you directly before it takes effect.

Contact

For any question or request about your data: info@fkahtech.com

To make a formal complaint with a deadline and a reference number, use the complaints page.