Privacy Policy

1. Introduction

This Privacy Policy explains how personal data is collected, used, processed, and protected when you visit the Fatora website or use Fatora’s services, products, and systems.

By using the website or the services, you acknowledge that you have read this Policy. Your consent may be requested separately where consent is required for a particular processing activity under applicable laws.

2. Scope of This Privacy Policy

This Policy applies to personal data collected through the Fatora website and the services, systems, forms, and communication channels associated with it, depending on the nature of your use of the service.

Our services may contain links to websites or services belonging to third parties. Fatora does not control the privacy practices of those parties, and we therefore recommend that you review their privacy policies when using them.

3. Data We May Collect

The types of data collected depend on how you use the website and the services and may include the following, when provided or when needed to deliver the service:

• Basic identification data, such as name.
• Contact data, such as phone number and email address.
• Data about the business or commercial activity that the customer provides when requesting the service or creating an account.
• Account data required to log in and manage use of the system.
• Information provided through contact forms, system trial requests, quotation requests, or technical support requests.
• Technical and usage data, such as Internet Protocol (IP) address, browser type, device, operating system, and usage logs, when collected by the website’s systems or servers.

4. How Data Is Collected

Personal data may be collected directly from you when you create an account, contact us, fill in a form, subscribe to a Fatora service, or use the system.

Certain technical information may also be collected automatically when you visit the website or use the services, for the purpose of operating the service, improving performance and protection, and resolving technical issues.

5. Purposes of Using Data

Personal data may be processed for purposes related to providing and operating Fatora’s services, including, as the case may be:

• Creating and managing accounts and enabling users to access the services.
• Providing the services of the Fatora system and operating its various features.
• Processing customer requests, inquiries, and technical support requests.
• Communicating with the user regarding the account, the service, or related requests.
• Managing subscriptions and the contractual relationship with customers.
• Improving the quality of the services and the user experience, and developing system features.
• Maintaining the security and integrity of the website and systems, and detecting unlawful use, fraud attempts, or intrusion attempts.
• Complying with statutory and regulatory requirements and with requests issued by competent authorities, where applicable.
• Sending marketing messages or offers where legally permitted, taking into account the user’s choices and rights regarding such messages.

6. Cookies and Similar Technologies

The website may use cookies or similar technologies where they are necessary to operate the website, maintain sessions, enhance security, and improve the user experience.

Settings in your browser that block certain cookies may affect how some features of the website or services work.

7. Data Sharing and Disclosure

Users’ personal data is not sold as a commercial product. Data may be shared to the extent necessary to provide the service or to meet statutory requirements, including, where needed, with:

• Technical, hosting, or support service providers engaged to operate the service.
• Parties that provide services necessary to complete operations related to the user’s request or subscription, where applicable.
• Competent governmental, judicial, or regulatory authorities, where disclosure is required by law or pursuant to a lawful legal request.
• In cases of restructuring, merger, or transfer of part of the business, with the necessary measures taken to protect the data in accordance with applicable laws.

8. Transfer of Data Outside the Kingdom

If providing certain services requires personal data to be processed, stored, or transferred outside the Kingdom of Saudi Arabia, this is handled in accordance with the statutory requirements applicable to transferring personal data outside the Kingdom, with the appropriate safeguards required in each case.

9. Data Retention Period

Personal data is retained for the period necessary to achieve the purposes for which it was collected, or for the period required by the contractual relationship or by applicable statutory and regulatory requirements.

When the statutory or operational need to retain the data ends, it is handled in accordance with appropriate procedures for destruction or for removing the ability to link it to the data subject, unless there is a statutory reason requiring its continued retention.

10. Data Protection and Security

We take appropriate technical, organizational, and administrative measures designed to protect personal data against unauthorized access, use, disclosure, modification, loss, or unlawful destruction.

However, no electronic means or technical system can be guaranteed to be absolutely secure. We therefore continuously review and improve our protection measures in line with the nature of the services and the risks associated with them.

11. Rights of the Personal Data Subject

Subject to the provisions, exceptions, and controls set out in applicable laws and regulations, the data subject may have a number of rights relating to their personal data, including:

• The right to be informed of how their personal data is collected and the purpose of processing it.
• The right to access their personal data in accordance with statutory controls.
• The right to request a copy of their personal data in a clear and readable format, where applicable.
• The right to request the correction of inaccurate personal data, the completion of incomplete data, or the updating of outdated data.
• The right to request the destruction of personal data in cases permitted by law.
• The right to withdraw consent to data processing where consent is the legal basis for the processing, in accordance with applicable controls.

A request relating to personal data may be submitted through the official contact channels set out at the end of this Policy, and the request will be handled in accordance with applicable statutory requirements and controls.

12. Minors’ Data

Fatora’s services are primarily intended for businesses, organizations, and users authorized to use the systems on their behalf. We do not knowingly aim to collect personal data directly from minors through the website for purposes unrelated to the provision of our legitimate services.

If you believe that a minor’s personal data has been provided inappropriately, please contact us so that we can review the request and take appropriate action in accordance with applicable laws.

13. User Responsibility for Data

The user undertakes to provide true, accurate, and up-to-date data when using the services, and is responsible for keeping the login credentials for their account confidential and not sharing them with unauthorized persons.

If the user enters or processes data relating to other persons through the Fatora system, the user is responsible for ensuring that an appropriate legal basis exists for processing that data and for complying with the requirements applicable to their business.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, data processing practices, or statutory requirements.

The updated version will be published on this page with the last updated date revised, and we recommend that you review this page periodically to stay informed of any changes.

15. Contact Us

For inquiries regarding this Privacy Policy or to exercise any of the rights relating to personal data, you can contact the Fatora team through the official contact channels.