Privacy policy

PRIVACY POLICY – FAKHAMA ENGRAVED

Last Updated: [17/05/2026]

Fakhama Engraved we respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [fakhamaengraved.com] or make a purchase. It also informs you of your rights under the Personal Data Protection Law of Saudi Arabia (PDPL) and the KSA E-Commerce Law.

1. INFORMATION WE COLLECT

We may collect and process the following categories of personal data about you:

Personal Identification Information: Full name, billing/shipping address, email address, phone number, and any name or text you provide for pen engraving purposes.

Transaction Information: Details about orders you place, including products purchased, payment method, pricing, and invoice history.

Technical Information: IP address, browser type and version, time zone setting, browser plug-in types, operating system and platform, and other technology on the devices you use to access our website.

Usage Information: Information about how you use our website, products, and services (e.g., pages viewed, time spent, and referral source).

Marketing and Communications Information: Your preferences in receiving marketing from us and your communication preferences.

We do not intentionally collect "sensitive data" (such as health, biometric, or genetic information). If you provide such data voluntarily, you explicitly consent to its processing as described herein.

2. HOW WE USE YOUR INFORMATION

We use your personal data only for legitimate business purposes and as permitted by the PDPL, including:

  • To process and deliver your orders, including managing payments, engraving services, and shipping.

  • To manage your account and provide customer support.

  • To personalize and improve your shopping experience on our website.

  • To communicate with you, including sending order confirmations, shipping updates, and responding to your inquiries.

  • To comply with legal obligations, including tax, anti-fraud, and regulatory requirements under Saudi law.

  • (If you opt-in) To send you promotional materials, special offers, or newsletters. You may withdraw your consent at any time via the unsubscribe link in our emails or by contacting us directly.

3. LEGAL BASIS FOR PROCESSING (PDPL Compliance)

Under the PDPL, we process your personal data only when we have a valid legal basis, including:

  • Your explicit consent.

  • The processing is necessary for the performance of a contract with you (e.g., completing your purchase).

  • The processing is necessary for compliance with a legal obligation under Saudi law.

4. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies (small text files stored on your device), web beacons, pixels, and similar tracking technologies to enhance your browsing experience and analyze website traffic.

We use the following types of cookies:

  • Essential Cookies: Necessary for the website to function and to provide you with services you request (e.g., adding items to cart).

  • Preference Cookies: Remember your settings and preferences (e.g., language or currency).

  • Analytics Cookies: Collect aggregated information about how visitors interact with our site, helping us improve performance.

  • Marketing Cookies: Used to track visitors across websites to display relevant advertisements.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of our website.

Third-Party Cookies: Certain cookies may be placed by trusted third-party service providers (e.g., Shopify, Google Analytics) for analytics and performance monitoring. These third parties are governed by their own privacy policies.

5. THIRD-PARTY SERVICES

We use third-party service providers to help us operate our business and deliver products and services to you. These may include:

  • Payment processors Bank Transfers – to securely process credit card and other digital payments.

  • Shipping carriers Manual Shipping – to deliver your orders.

  • E-commerce platform provider (e.g., Shopify) – to host our store and manage transactions.

  • Email marketing service – to send order and promotional communications.

  • Analytics providers (e.g., Google Analytics) – to understand website performance.

We only share your personal data with these third parties to the extent necessary to perform their specific services. All third-party processors are contractually bound to handle your data in compliance with the PDPL and maintain appropriate security measures.

We do not sell, trade, or rent your personal identification information to third parties for their own marketing purposes without your explicit consent.

6. DATA SECURITY

We take the security of your personal data seriously and have implemented appropriate technical and organizational measures to protect it against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

  • Secure Sockets Layer (SSL) encryption for all online transactions.

  • Access controls and restricted permissions – only authorized personnel have access to customer data.

  • Regular security audits and vulnerability assessments.

  • Internal policies for data handling and breach response.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security. If we become aware of any data breach that may affect your rights and interests, we will notify SDAIA within 72 hours and notify affected individuals without undue delay, as required by the PDPL.

7. DATA RETENTION

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements under Saudi law.

In general, we retain customer data for seven (7) years following the last transaction to comply with tax and financial record-keeping obligations. After this period, your personal data will be securely deleted or anonymized. Contact information for marketing purposes is retained until you withdraw your consent or unsubscribe.

8. YOUR RIGHTS (PDPL Data Subject Rights)

Under the PDPL, you have the following rights regarding your personal data:



Right Description
Right to Access You have the right to request a copy of the personal data we hold about you and to be informed of how it is processed.
Right to Correction You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Deletion (Right to be Forgotten) You may request the deletion of your personal data when there is no longer a legal basis for its retention.
Right to Object You have the right to object to the processing of your personal data for direct marketing purposes at any time.
Right to Withdraw Consent Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time.
Right to Restrict Processing You may request that we temporarily restrict the processing of your data in certain circumstances (e.g., while we verify its accuracy).

To exercise any of these rights, please contact us at [growmore.admin@gmail.com] or [0567097607 ]. We will respond to your request within 30 days as required under the PDPL. There is no fee for making a request, but we may charge a reasonable administrative fee for manifestly unfounded or excessive requests.

9. CROSS-BORDER DATA TRANSFERS

Your personal data is primarily stored and processed within the Kingdom of Saudi Arabia. However, some of our third-party service providers may operate outside KSA. In such cases, we ensure that:

  • The transfer complies with the PDPL and its Implementing Regulations.

  • The receiving country has adequate data protection standards as recognized by SDAIA, or appropriate safeguards (such as Standard Contractual Clauses) are in place.

By using our website and providing your personal data, you acknowledge and agree to such transfers where necessary for the performance of our services.

10. CHILDREN'S PRIVACY

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately. If we discover that a child under 18 has provided us with personal data, we will delete such information promptly.

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will post the updated policy on this page and update the "Last Updated" date at the top of the policy. We encourage you to review this page periodically to stay informed about how we are protecting your information.

For significant changes that affect your rights, we may notify you directly via email or by placing a prominent notice on our website.

12. CONTACT INFORMATION

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, or if you wish to exercise any of your rights as a data subject, please contact us at:

Fakhama Engraved

  • Email: growmore.admin@gmail.com

  • Phone: [+966567097607 ]

  • Business Address: Dammam (Eastern Region)

  • Commercial Registration No.: NA

We are committed to working with you to resolve any concerns. Under the PDPL, you also have the right to lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA) if you believe your data protection rights have been violated.