Last updated: June 2025

We know that you care how information about you is used and shared. This Privacy Notice describes how FORSA collects and processes your personal information when you use our website, mobile application, vendor portal, and related services (together, “FORSA Services”).

These policies are published in English and Arabic. If there is any inconsistency between language versions, the Arabic text prevails to the extent permitted by applicable law in the Kingdom of Saudi Arabia (“KSA”).

Controller of personal information

FORSA is the data controller of personal information collected and processed through FORSA Services for marketplace operations, customer accounts, and platform administration.

FORSA (operating the forsa.com.sa marketplace)
H52J+GJ6, Al Baladeah, Aziziyah, Riyadh, 12211, Saudi Arabia
Kingdom of Saudi Arabia
Email: [email protected] · Phone: +966 554663387

What personal information does FORSA collect?

We collect personal information to provide and improve FORSA Services. This includes:

Information you provide

  • Account registration: name, email, mobile number, password (stored in hashed form), and optional profile details.
  • Orders and checkout: delivery address, billing details, order notes, and proof-of-delivery information.
  • Vendor applications: business name, commercial registration, tax/VAT details, bank information, store address, and identity documents for verification.
  • Customer support: communications by email, phone, chat, WhatsApp, or web forms.
  • Partnership and investor inquiries submitted through our contact forms.

Automatic information

  • Device and browser data: IP address, device identifiers, browser type, operating system, and app version.
  • Usage data: pages viewed, search queries, clicks, session duration, and error logs.
  • Location data: approximate location derived from IP or GPS where you enable location services (e.g. nearby stores).
  • Cookies and similar technologies — see our Cookie Policy.

Information from other sources

  • Payment gateways (transaction status, masked card data — we do not store full card numbers).
  • Delivery partners (proof of delivery, updated address information).
  • Vendors (order fulfilment updates and customer service messages).
  • Identity and fraud-prevention service providers where permitted by law.

For what purposes does FORSA use your personal information?

  • Orders and delivery: process orders, payments, refunds, and communicate order status.
  • Marketplace operations: connect buyers with vendors, display listings, and facilitate contracts between parties.
  • Account and security: authenticate users, prevent fraud, and protect platform integrity.
  • Customer support: respond to inquiries and resolve disputes.
  • Improvement and analytics: analyse performance, fix errors, and develop new features.
  • Marketing: send promotional offers where you have opted in or where permitted by law; you may opt out at any time.
  • Legal compliance: meet obligations under Saudi law including tax (ZATCA), e-commerce, consumer protection, and lawful requests from authorities.
  • Consent-based processing: where we ask for your consent for a specific purpose, you may withdraw it at any time.

Cookies and other identifiers

We use cookies, pixels, and similar technologies to operate FORSA Services, remember preferences, and measure usage. For details and your choices, read our Cookie Policy.

Does FORSA share your personal information?

We do not sell your personal information. We share data only as described below:

  • Marketplace vendors: when you purchase from a third-party vendor, we share order and delivery details necessary to fulfil your order. The vendor’s use of your data is governed by their own privacy practices.
  • Service providers: payment processors, hosting, SMS/OTP providers, analytics, customer support tools, and delivery partners — only to perform services on our behalf under contractual confidentiality and data-protection obligations.
  • Legal and safety: when required by law, court order, or to protect rights, safety, and security of users, FORSA, or others.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Privacy Notice or equivalent protections.
  • With your direction: when you choose to share information or connect third-party services.

How secure is information about me?

  • We use encryption in transit (TLS/SSL) for data transmitted between your device and our servers.
  • Payment processing follows PCI DSS requirements through certified payment partners; we do not store full payment card numbers on our servers.
  • We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the data we process.
  • You are responsible for keeping your password confidential and signing out on shared devices.

No method of transmission or storage is completely secure. If you believe your account has been compromised, contact us immediately at [email protected].

What information can I access — and what choices do I have?

Under the Saudi Personal Data Protection Law (PDPL) and our policies, you may have the right to:

  • Access personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion where applicable law allows.
  • Object to or request restriction of certain processing.
  • Withdraw consent where processing is consent-based.
  • Receive information about how your data is processed.

You can update much of your account information in My Account on the website or app. For other requests, email [email protected] with subject line “PDPL Request”. We will respond within the timeframe required by applicable law.

You may opt out of marketing emails using the unsubscribe link in any message or by contacting us. You may disable non-essential cookies via your browser — see our Cookie Policy.

Are children allowed to use FORSA Services?

FORSA does not knowingly collect personal data from children under 18 without parental consent. If you are under 18, you may use FORSA Services only with the involvement and consent of a parent or legal guardian. Products on our marketplace are intended for purchase by adults or supervised minors.

How long do we keep your personal information?

We retain personal information for as long as needed to provide FORSA Services, fulfil the purposes described in this notice, comply with legal obligations (including tax and accounting records), resolve disputes, and enforce agreements. When data is no longer required, we delete or anonymise it in accordance with our retention schedule and applicable law.

Saudi Arabia Personal Data Protection Law — legal basis

The PDPL requires a lawful basis for processing personal data. Depending on the purpose, we rely on:

  • Performance of a contract: processing orders, accounts, payments, and vendor onboarding.
  • Legal obligation: tax, regulatory, and law-enforcement requirements.
  • Legitimate interests: fraud prevention, platform security, service improvement, and limited direct marketing where balanced against your rights.
  • Consent: optional marketing, certain cookies, and any processing where we explicitly request your consent.

For a dedicated summary of PDPL rights, see our Data Protection (PDPL) notice.

Transfers outside the Kingdom of Saudi Arabia

Where personal data is transferred outside KSA (for example to cloud hosting or payment providers), we ensure appropriate safeguards as required by the PDPL and regulations issued by the Saudi Data & AI Authority (SDAIA), including standard contractual clauses or equivalent measures approved under Saudi law.

Contacts, notices and revisions

For privacy questions or to exercise your rights, contact us at [email protected].

FORSA (operating the forsa.com.sa marketplace)
H52J+GJ6, Al Baladeah, Aziziyah, Riyadh, 12211, Saudi Arabia
Kingdom of Saudi Arabia
Email: [email protected] · Phone: +966 554663387

You may lodge a complaint with the Saudi Data & AI Authority (SDAIA) if you believe your rights under the PDPL have been infringed.

We may update this Privacy Notice from time to time. Material changes will be posted on this page with an updated date. Continued use of FORSA Services after changes constitutes acceptance of the updated notice, unless applicable law requires additional consent.