1. Personal data we collect
We collect the personal data you provide when you create an account, place an order, request a service, or contact us. This may include: name, company name, billing and delivery addresses, email, phone/WhatsApp number, Commercial Registration (CR) number or national ID when required for invoicing, order details, and payment information (processed by our payment provider). We also collect technical and usage data automatically when you visit the Site (IP address, device and browser type, cookies and usage data). 

2. How we use your data
We use your personal data to: process and fulfil orders, take payment, deliver goods and provide installation and after-sales services; communicate with you about orders, service appointments and support; manage your account and the Site; send transactional messages and, where you opt in, marketing messages (you can unsubscribe at any time); and comply with legal and tax obligations (for example invoices, VAT and safety records).

3. Lawful basis for processing
We process personal data where necessary to perform a contract with you (orders and services), to comply with legal obligations (tax, safety and regulatory requirements), with your consent (marketing communications) and, where appropriate, for our legitimate business interests (fraud prevention, improving our services) provided those interests do not override your rights.

4. Sharing and recipients
We may share personal data with trusted third parties who help operate the Site or provide services: payment processors, delivery and logistics providers, installers and subcontractors (for site work), IT and hosting providers, and professional advisers. These parties act on our instructions and are required to protect your data. We do not sell your personal data.

5. International transfers
If we transfer your personal data outside the Kingdom of Saudi Arabia, we will ensure transfers comply with PDPL requirements and use appropriate safeguards or permitted transfer mechanisms.

6. Data retention
We keep personal data only as long as necessary to fulfil the purposes set out above and to meet legal, tax or accounting requirements. Typical retention periods include the duration needed to support warranty and service records and the period required by tax and accounting laws.

7. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse (for example access controls, secure hosting and staff training). No internet system is completely secure, and in the event of a data breach we will follow applicable reporting and notification rules.

8. Cookies and similar technologies
We use cookies and similar technologies to operate the Site, remember preferences, analyse site usage and provide basic functionality. You can manage cookie settings in your browser; however, disabling some cookies may affect Site functionality.

9. Your rights
You may have rights under PDPL to request access to your data, rectification, restriction of processing, erasure (in certain circumstances), objection to processing (including direct marketing) and data portability where applicable. To exercise your rights contact us (contact details below). We will verify identity before fulfilling requests and respond within the timeframes required by law.

10. Children
We do not knowingly collect personal data from children. If we learn we have collected data of a child in violation of applicable law we will delete it.

11. Third-party links
The Site may contain links to third-party websites. This Privacy Policy does not apply to those sites; please review their privacy policies before providing personal data.

12. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be posted on https://www.ftco.com.sa/store with an updated effective date.

13. Contact
For privacy questions, to exercise your rights, or to make a complaint contact: [email protected], or WhatsApp +966 50 544 4629. Please provide your name and order/invoice number (if any) and we may request proof of identity before processing requests.

14. Legal note
This Privacy Policy is a template prepared for FTCO and does not constitute legal advice.