سياسة الخصوصية
PRIVACY POLICY
Last updated: September 23, 2026
FAHS SIRRI LLC (“FAHS SIRRI,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit our website, create an account, purchase products, communicate with us, or otherwise use our services.
FAHS SIRRI operates an online store powered by Shopify. Shopify provides the e-commerce infrastructure used to operate our website and process transactions.
This Privacy Policy is intended to comply with applicable laws and regulations in the Kingdom of Saudi Arabia, including the Personal Data Protection Law (“PDPL”) and its Implementing Regulations.
By using our website or providing personal information to us, you acknowledge that you have read and understood this Privacy Policy.
1. WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?
The controller responsible for personal information processed through this website is:
FAHS SIRRI LLC
Umluj, Umluj 27897
Kingdom of Saudi Arabia
Email: contact@fahssirri.com
Questions or requests relating to privacy or personal information may be submitted to the email address above.
2. PERSONAL INFORMATION WE COLLECT
Depending on how you interact with FAHS SIRRI, we may collect the following categories of personal information.
Contact Information
This may include:
- Name
- Email address
- Telephone number
- Billing address
- Shipping address
Account Information
If you create an account, we may process:
- Account username
- Password or authentication information
- Account preferences
- Saved addresses
- Account settings
Passwords may be processed through Shopify or other service providers and are not intended to be accessible to FAHS SIRRI in readable form.
Order and Transaction Information
This may include:
- Products ordered
- Order history
- Shopping-cart contents
- Returns and refunds
- Payment status
- Delivery information
- Transaction identifiers
Because FAHS SIRRI sells health-screening and diagnostic products, information about products you purchase may in some circumstances reveal or indicate information relating to your health. Such information may therefore constitute sensitive personal data under Saudi law and will receive additional protection.
Payment Information
Payments may involve information such as:
- Payment method
- Payment confirmation
- Billing information
- Transaction reference
Complete payment-card details are generally processed directly by authorized payment providers and are not intended to be stored by FAHS SIRRI.
Customer Communications
We may process information that you provide when you:
- Contact customer service
- Request a return or refund
- Submit a complaint
- Ask a product-related question
- Communicate with us through email, telephone, chat or another support channel
Please avoid sending unnecessary medical information or test results through ordinary customer-service channels.
Device and Technical Information
When you use our website, certain information may be collected automatically, including:
- IP address
- Browser type
- Device type
- Operating system
- Device identifiers
- Website activity
- Referring website
- Pages visited
- Date and time of access
- Cookie and similar technology information
3. INFORMATION WE DO NOT REQUIRE
FAHS SIRRI does not generally require customers to provide:
- Medical records
- Medical diagnoses
- Laboratory records
- Test results
- Government identification documents
unless such information is genuinely required for a specific lawful purpose.
Please do not provide sensitive medical information unless it is necessary for the service you are requesting.
4. HOW WE COLLECT PERSONAL INFORMATION
We may collect personal information:
Directly From You
For example when you:
- Place an order
- Create an account
- Contact us
- Request support
- Request a return or refund
- Subscribe to permitted communications
- Submit information through our website
Automatically
Information may be collected through:
- Cookies
- Analytics technologies
- Server logs
- Shopify technologies
- Similar tracking or website technologies
From Service Providers
We may receive information from companies that help us operate the store, including:
- Shopify
- Payment processors
- Shipping and courier companies
- Fraud-prevention providers
- IT and cloud-service providers
- Analytics providers
- Customer-service providers
5. MANDATORY AND OPTIONAL INFORMATION
Certain information is required to process an order.
For example, we normally require your:
- Name
- Contact details
- Delivery address
- Payment information
If you do not provide information necessary to process payment or deliver an order, we may be unable to complete your purchase.
Other information, such as optional marketing preferences or account preferences, is voluntary.
6. WHY WE PROCESS PERSONAL INFORMATION
We process personal information only where there is an appropriate legal basis under applicable Saudi law.
Depending on the circumstances, processing may be based on:
- Performance of our agreement with you
- Your consent
- Compliance with a legal or regulatory obligation
- Protection of your interests where permitted by law
- A legitimate interest where permitted under the PDPL and where such interest does not override your rights
- Another lawful basis permitted under Saudi law
Legitimate interest will not be relied upon as a legal basis for processing sensitive personal data where prohibited by the PDPL. Saudi regulations expressly restrict use of legitimate interest for sensitive information.
7. HOW WE USE YOUR PERSONAL INFORMATION
We may use personal information to:
Process and Fulfil Orders
Including to:
- Accept and process orders
- Process payments
- Confirm transactions
- Arrange delivery
- Provide order updates
- Process returns and refunds
Operate the Website
Including to:
- Create and manage accounts
- Maintain shopping carts
- Remember permitted preferences
- Improve website functionality
- Diagnose technical issues
Customer Service
Including to:
- Answer questions
- Handle complaints
- Investigate delivery issues
- Process returns
- Respond to customer requests
Security and Fraud Prevention
Including to:
- Protect customer accounts
- Detect fraud
- Prevent unauthorized transactions
- Protect our website and systems
- Investigate unlawful activity
Legal and Regulatory Compliance
Including where necessary to:
- Comply with Saudi laws
- Maintain legally required business records
- Respond to lawful requests from competent authorities
- Comply with tax, accounting, consumer-protection or regulatory requirements
- Address product-safety or regulatory obligations
8. SENSITIVE AND HEALTH-RELATED PERSONAL INFORMATION
Health information is considered sensitive personal data under the Saudi PDPL.
Because FAHS SIRRI sells health-screening products, a customer's purchase history or communications may in some circumstances reveal information relating to health or health concerns.
We therefore apply additional safeguards to such information.
FAHS SIRRI does not use sensitive personal information, health-related order information or test-related information for marketing, targeted advertising or advertising profiling.
We do not intentionally disclose sensitive health-related purchase information to advertising partners for personalized advertising.
Where consent is required to process sensitive personal data, we will obtain the form of consent required by applicable law.
Saudi PDPL specifically provides enhanced protection for health information and prohibits processing sensitive data for marketing purposes.
9. MARKETING COMMUNICATIONS
Where permitted by law and where required consent has been obtained, we may send general marketing communications concerning FAHS SIRRI.
You may unsubscribe from marketing emails at any time using the unsubscribe mechanism provided in the communication or by contacting:
Unsubscribing from marketing does not prevent us from sending necessary transactional communications such as:
- Order confirmations
- Payment notices
- Delivery updates
- Return information
- Product-safety notices
- Customer-service communications
We do not use sensitive health information or health-related purchase history to determine which marketing communications you receive.
10. COOKIES AND SIMILAR TECHNOLOGIES
FAHS SIRRI and our service providers may use cookies and similar technologies to operate and improve the website.
Cookies may include:
Essential Cookies
Necessary for functions such as:
- Shopping carts
- Checkout
- Account authentication
- Security
- Payment processing
Analytics Cookies
These may help us understand:
- Website traffic
- Website performance
- General visitor behaviour
- Technical errors
- How customers navigate the store
Advertising Technologies
Where legally permitted and enabled, advertising technologies may be used for general marketing measurement or advertising.
We do not authorize sensitive health information, health-related order information or test results to be used for personalized advertising.
Where required by applicable law, non-essential cookies or tracking technologies will be subject to appropriate consent or preference controls.
11. ANALYTICS AND ADVERTISING PROVIDERS
Our website may use services provided by companies such as:
- Shopify
- Meta
- Other analytics or advertising technology providers
These technologies may process device information, IP addresses, cookie identifiers and website interaction information, subject to our configuration and applicable privacy requirements.
We take reasonable measures to prevent health-related purchase information and sensitive personal information from being used for personalized advertising.
These providers may independently process certain information in accordance with their own privacy policies.
12. HOW WE DISCLOSE PERSONAL INFORMATION
We may disclose personal information where reasonably necessary to operate our business.
Recipients may include:
Shopify
Our store is hosted on Shopify. Shopify processes information necessary to provide and improve its e-commerce services.
Payment Providers
Information necessary to authorize and process transactions may be provided to payment processors and financial institutions.
Shipping and Delivery Providers
We may provide information such as your:
- Name
- Telephone number
- Delivery address
- Delivery instructions
to courier and logistics companies where required to deliver your order.
IT and Service Providers
We may use providers for:
- Hosting
- Cybersecurity
- Cloud infrastructure
- Customer service
- Analytics
- Fraud prevention
- Communications
These providers should only receive information reasonably necessary for the services they provide.
Authorities
We may disclose information where required or permitted under applicable law, including in response to lawful requests from competent Saudi authorities.
13. WE DO NOT SELL PERSONAL INFORMATION
FAHS SIRRI does not sell customer personal information.
We do not sell customer medical information, health-related order information or sensitive personal data.
14. SHOPIFY
Our online store is powered by Shopify.
Information you provide through our store may be processed by Shopify to provide hosting, checkout, security, fraud prevention and other e-commerce functionality.
Shopify may process information in countries outside Saudi Arabia.
Shopify's processing of personal information is also subject to its applicable privacy documentation.
15. INTERNATIONAL TRANSFERS
Some of our technology and service providers may process personal information outside the Kingdom of Saudi Arabia.
This may include providers involved in:
- E-commerce infrastructure
- Cloud hosting
- Payments
- Cybersecurity
- Analytics
- Communications
Where personal information is transferred outside Saudi Arabia, FAHS SIRRI will take measures required under the Saudi PDPL and the Regulation on Personal Data Transfer outside the Kingdom.
This may include assessing applicable safeguards, limiting transferred information to what is necessary and applying appropriate contractual, technical or organizational protections.
Saudi rules require international transfers to comply with the PDPL's transfer requirements and applicable safeguards.
16. DATA RETENTION
We retain personal information only for as long as reasonably necessary for:
- The purpose for which it was collected
- Order fulfilment
- Customer support
- Accounting and taxation requirements
- Fraud prevention
- Legal claims
- Compliance with regulatory requirements
- Other legitimate legal obligations
Different categories of information may therefore have different retention periods.
When personal information is no longer required and there is no lawful reason to retain it, we will take reasonable measures to securely delete, destroy or anonymize it in accordance with applicable law.
17. DATA SECURITY
We use reasonable administrative, organizational and technical measures designed to protect personal information against:
- Unauthorized access
- Unauthorized disclosure
- Loss
- Misuse
- Alteration
- Destruction
Access to sensitive information should be limited to persons who reasonably require access for legitimate business purposes.
However, no electronic system or method of transmission can be guaranteed to be completely secure.
Customers should not send sensitive information through unsecured channels unless necessary.
18. YOUR RIGHTS UNDER THE SAUDI PDPL
Subject to the applicable conditions and exceptions under Saudi law, you may have the following rights:
Right to Be Informed
You have the right to understand why we collect your personal information, the legal basis for processing and how the information will be used.
Right of Access
You may request access to personal information that we maintain about you.
Right to Obtain a Copy
You may request a clear and readable copy of your personal information, subject to applicable legal requirements.
Right to Correction
You may request that inaccurate, incomplete or outdated personal information be corrected, completed or updated.
Right to Request Destruction
You may request destruction of personal information where the requirements for such destruction are satisfied under applicable Saudi law.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent subject to applicable law.
Withdrawal does not invalidate processing lawfully carried out before consent was withdrawn.
These rights are reflected in Saudi PDPL guidance issued by SDAIA.
19. HOW TO EXERCISE YOUR PRIVACY RIGHTS
To submit a privacy request, contact:
Please include sufficient information for us to understand and process your request.
We may need to verify your identity before providing, correcting or deleting personal information in order to protect you from unauthorized requests.
We will respond within the period required by applicable law.
We will not discriminate against you for lawfully exercising your privacy rights.
20. CHILDREN AND PERSONS WITHOUT FULL LEGAL CAPACITY
Our online store is not directed specifically toward children.
Where a person does not have the legal capacity required to provide valid consent or enter into a transaction, involvement or authorization from an appropriate parent or legal guardian may be required in accordance with applicable law.
We do not knowingly seek to collect children's personal information for marketing purposes.
21. THIRD-PARTY WEBSITES
Our website may contain links to websites, platforms or services operated by third parties.
FAHS SIRRI does not control the privacy practices of independent third-party websites.
We recommend reviewing the privacy policy of any third-party service before providing personal information to it.
22. DATA BREACHES
If a personal-data breach occurs, FAHS SIRRI will assess the incident and take appropriate steps in accordance with applicable Saudi data-protection requirements.
Where notification to a competent authority or affected individuals is legally required, we will provide such notification in accordance with applicable law.
23. COMPLAINTS
If you have concerns regarding the way FAHS SIRRI collects or processes personal information, please contact us first at:
We will investigate privacy complaints and respond in accordance with applicable requirements.
Where you believe that your rights under the Saudi PDPL have been violated, you may also have the right to submit a complaint to the competent Saudi data-protection authority through the channels made available by the Saudi Data & AI Authority (SDAIA).
SDAIA's official guidance confirms individuals' right to raise complaints concerning PDPL compliance.
24. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy periodically to reflect:
- Changes to our business
- New services or technologies
- Changes to service providers
- Legal or regulatory developments
- Improvements to our privacy practices
When we update the policy, we will update the “Last updated” date at the beginning of this page.
Where legally required, we will provide additional notice or obtain additional consent.
25. CONTACT US
For questions about this Privacy Policy, personal information or your privacy rights, contact:
FAHS SIRRI LLC
Umluj, Umluj 27897
Kingdom of Saudi Arabia
Email: contact@fahssirri.com