⚠️ Pre-launch draft for review
This privacy policy is under final legal review and subject to revision before official launch.
Privacy Policy
Last updated: Pre-launch draft
1. Introduction
FZ ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the FZ e-commerce platform ("Platform").
This policy applies to all users of the Platform, including merchants, their customers, and visitors to FZ-hosted stores.
2. Information We Collect
Account Information
- Name, email address, and phone number
- Business name and commercial registration details
- Password (stored in hashed form only)
- Profile and store configuration preferences
Transaction Data
- Order details, payment amounts, and transaction IDs
- Shipping addresses and delivery information
- Payment method metadata (we do not store full card numbers)
Usage Data
- Pages visited, features used, and session duration
- Device type, browser, and IP address
- Error logs and performance metrics
3. How We Use Your Information
We use collected information to:
- Provide and maintain the Platform services
- Process transactions and manage merchant accounts
- Send service-related communications (order confirmations, security alerts)
- Improve the Platform through analytics and performance monitoring
- Comply with legal obligations in the Kingdom of Saudi Arabia
- Prevent fraud and protect Platform security
4. Data Sharing
We may share your information with:
- Payment processors (e.g., Moyasar) — to process transactions
- Email service providers — to deliver transactional emails
- Analytics services — to improve Platform performance
- Legal authorities — when required by law
We do not sell your personal information to third parties.
5. Data Storage and Security
Your data is stored on secure servers. We implement industry-standard security measures including encryption, access controls, and regular security audits. Passwords are stored using bcrypt hashing and are never stored in plain text.
6. Your Rights
In accordance with applicable data protection regulations, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Export your data in a portable format
- Withdraw consent for data processing
7. Cookies
The Platform uses essential cookies for authentication and session management. We may also use analytics cookies to understand how the Platform is used. You can manage cookie preferences through your browser settings.
8. Data Retention
We retain your personal data for as long as your account is active and for a reasonable period afterward as required by law or for legitimate business purposes. Transaction records may be retained longer for compliance with financial regulations.
9. Children's Privacy
The Platform is not designed for individuals under 18 years of age. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes through the Platform or via email. Continued use of the Platform after changes constitutes acceptance of the updated policy.
11. Contact
For privacy-related inquiries, please contact us through the Platform's help center or support channels.