{"id":279,"date":"2024-04-17T08:22:40","date_gmt":"2024-04-17T08:22:40","guid":{"rendered":"https:\/\/forsa.com.sa\/california-consumer-privacy-act-ccpa\/"},"modified":"2024-04-17T08:22:40","modified_gmt":"2024-04-17T08:22:40","slug":"data-protection-pdpl","status":"publish","type":"page","link":"https:\/\/forsa.com.sa\/ar\/data-protection-pdpl\/","title":{"rendered":"\u0625\u0634\u0639\u0627\u0631 \u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a (\u0646\u0638\u0627\u0645 PDPL)"},"content":{"rendered":"<div class=\"forsa-legal forsa-ui\">\n<p class=\"forsa-legal__updated\"><em>Last updated: June 2025<\/em><\/p>\n<p>This notice supplements our <a href=\"https:\/\/forsa.com.sa\/ar\/privacy-policy-2\/\">\u0633\u064a\u0627\u0633\u0629 \u0627\u0644\u062e\u0635\u0648\u0635\u064a\u0629<\/a> and explains how FORSA complies with the <strong>Saudi Personal Data Protection Law (PDPL)<\/strong> and implementing regulations issued by the Saudi Data &amp; AI Authority (SDAIA).<\/p>\n<h2>Data controller<\/h2>\n<p class=\"forsa-legal__entity\"><strong>\u0641\u0631\u0635\u0629<\/strong> (operating the forsa.com.sa marketplace)<br \/>\nH52J+GJ6, Al Baladeah, Aziziyah, Riyadh, 12211, Saudi Arabia<br \/>\nKingdom of Saudi Arabia<br \/>\nEmail: <a href=\"mailto:support@forsa.com.sa\">support@forsa.com.sa<\/a> \u00b7 Phone: +966 554663387<\/p>\n<h2>Categories of personal data we process<\/h2>\n<table class=\"forsa-legal__table\">\n<thead>\n<tr>\n<th>Category<\/th>\n<th>Examples<\/th>\n<th>Retention (typical)<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Identity &amp; contact<\/td>\n<td>Name, email, phone, national address<\/td>\n<td>Account lifetime + legal minimum<\/td>\n<\/tr>\n<tr>\n<td>Transaction<\/td>\n<td>Orders, payments, invoices, refunds<\/td>\n<td>Up to 10 years (tax\/accounting)<\/td>\n<\/tr>\n<tr>\n<td>Vendor KYC<\/td>\n<td>CR number, VAT, bank details, ID copies<\/td>\n<td>Relationship + regulatory period<\/td>\n<\/tr>\n<tr>\n<td>Technical<\/td>\n<td>IP, device ID, logs, cookies<\/td>\n<td>Months to 2 years<\/td>\n<\/tr>\n<tr>\n<td>Communications<\/td>\n<td>Support tickets, chat, email<\/td>\n<td>3 years after resolution<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Lawful bases for processing<\/h2>\n<p>We process personal data on one or more of the following bases under the PDPL:<\/p>\n<ul>\n<li>Your <strong>consent<\/strong> (e.g. optional marketing, non-essential cookies).<\/li>\n<li><strong>Performance of a contract<\/strong> (orders, accounts, vendor agreements).<\/li>\n<li><strong>Legal obligation<\/strong> (tax, anti-fraud, regulatory reporting).<\/li>\n<li><strong>Legitimate interests<\/strong> (security, analytics, service improvement) where not overridden by your rights.<\/li>\n<li><strong>Vital interests<\/strong> or <strong>public interest<\/strong> where applicable and permitted by law.<\/li>\n<\/ul>\n<h2>Your rights under the PDPL<\/h2>\n<p>Subject to applicable exceptions, you have the right to:<\/p>\n<ul>\n<li><strong>Be informed<\/strong> about how your data is collected and used (this notice and our Privacy Policy).<\/li>\n<li><strong>Access<\/strong> your personal data held by FORSA.<\/li>\n<li><strong>Request correction<\/strong> of inaccurate or incomplete data.<\/li>\n<li><strong>Request destruction<\/strong> of personal data when no longer needed or when withdrawal of consent applies, unless retention is required by law.<\/li>\n<li><strong>Withdraw consent<\/strong> for consent-based processing at any time.<\/li>\n<li><strong>Object<\/strong> to certain processing where provided by law.<\/li>\n<\/ul>\n<h2>How to submit a PDPL request<\/h2>\n<p>Email <a href=\"mailto:support@forsa.com.sa\">support@forsa.com.sa<\/a> with subject <strong>&#8220;PDPL Data Subject Request&#8221;<\/strong> and include:<\/p>\n<ul>\n<li>Your full name and registered email or phone on your FORSA account;<\/li>\n<li>Description of your request (access, correction, deletion, etc.); and<\/li>\n<li>Proof of identity where necessary to protect your data from unauthorised disclosure.<\/li>\n<\/ul>\n<p>We will acknowledge your request and respond within the period required by the PDPL and SDAIA guidance.<\/p>\n<h2>Data sharing and processors<\/h2>\n<p>We use trusted processors (hosting, payments, SMS, analytics) bound by data-processing agreements. Marketplace vendors receive order data as independent controllers or processors for fulfilment purposes. A list of main processor categories is available on request.<\/p>\n<h2>Cross-border transfers<\/h2>\n<p>Where data is transferred outside KSA, we implement safeguards required by the PDPL, including approved contractual clauses and transfer assessments.<\/p>\n<h2>Security and breach notification<\/h2>\n<p>We maintain technical and organisational measures appropriate to the risk. If a personal data breach poses a risk to your rights, we will notify SDAIA and affected individuals as required by law.<\/p>\n<h2>Complaints to SDAIA<\/h2>\n<p>If you believe we have not handled your personal data in accordance with the PDPL, you may contact us first. You also have the right to lodge a complaint with the Saudi Data &amp; AI Authority (SDAIA).<\/p>\n<h2>Updates<\/h2>\n<p>This notice may be updated to reflect legal or operational changes. The &#8220;Last updated&#8221; date at the top indicates the current version.<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Last updated: June 2025 This notice supplements our Privacy Policy and explains how FORSA complies with the Saudi Personal Data Protection Law (PDPL) and implementing regulations issued by the Saudi Data &amp; AI Authority (SDAIA). Data controller FORSA (operating the forsa.com.sa marketplace) H52J+GJ6, Al Baladeah, Aziziyah, Riyadh, 12211, Saudi Arabia Kingdom of Saudi Arabia Email: [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-279","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/forsa.com.sa\/ar\/wp-json\/wp\/v2\/pages\/279","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forsa.com.sa\/ar\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/forsa.com.sa\/ar\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/forsa.com.sa\/ar\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forsa.com.sa\/ar\/wp-json\/wp\/v2\/comments?post=279"}],"version-history":[{"count":0,"href":"https:\/\/forsa.com.sa\/ar\/wp-json\/wp\/v2\/pages\/279\/revisions"}],"wp:attachment":[{"href":"https:\/\/forsa.com.sa\/ar\/wp-json\/wp\/v2\/media?parent=279"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}