Privacy Policy سياسة الخصوصية

FASTER Facility Services ("FASTER", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, and services in the Kingdom of Saudi Arabia.

This policy is designed to comply with the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL) issued by Royal Decree No. M/19 dated September 16, 2021, and its implementing regulations.

FASTER Facility Services is the data controller responsible for your personal data. For any inquiries regarding this privacy policy or your personal data, please contact us at:

• Company: FASTER Facility Services
• Address: King Fahd Road, Riyadh, Kingdom of Saudi Arabia
• Email: privacy@fasterfm.com
• Phone: +966 11 234 5678

We collect information that you provide directly to us and information automatically collected when you use our services:

Personal Information You Provide:

• Full name and contact information (phone number, email address)
• Residential or service address
• National ID number (for service verification)
• Payment information (processed through secure third-party providers)
• Profile picture (optional)
• Service preferences and booking history
• Communications with customer support

Information Collected Automatically:

• Device information (device type, operating system, unique device identifiers)
• Location data (with your consent) to provide nearby services and track service delivery
• Usage data (app features used, time spent, interactions)
• Log data (IP address, access times, pages viewed)

Location Data:

Our app collects location data to enable accurate service delivery and technician tracking, even when the app is closed or not in use. This background location data is used to:

• Assign nearby service requests to technicians
• Provide customers with accurate arrival time estimates
• Verify service completion at the correct location
• Optimize routing for faster service delivery

You can disable location access at any time through your device settings. However, disabling location services may limit core functionality such as service booking and technician dispatch.

Device Permissions:

Our app may request access to the following device features:

• Camera: To capture photos for service documentation, profile pictures, or to report issues
• Photo Library: To upload images from your gallery for profile or service-related purposes
• Push Notifications: To send booking confirmations, technician arrival updates, promotional offers, and important service alerts. You can manage notification preferences in your device settings at any time
• Phone: To enable direct calling to customer support or your assigned technician

Third-Party SDKs and Services:

Our app integrates the following third-party services that may collect data:

• Sentry: Crash reporting and error monitoring to improve app stability. Collects device info, OS version, and crash logs (no personal data)
• Supabase: Backend services for authentication and data storage
• Expo: App update delivery and push notification services
• Payment Providers: Secure payment processing (card data is handled entirely by PCI-compliant providers and never stored on our servers)

These third parties process data under their own privacy policies and our data processing agreements.

Advertising and Tracking:

We do not use advertising identifiers (IDFA/GAID) for targeted advertising. We do not sell your data to advertisers. Any analytics we collect are used solely to improve our services and user experience.

We use the collected information for the following purposes:

• Service Delivery: To process your bookings, dispatch technicians, and provide the services you requested
• Account Management: To create and manage your account, verify your identity, and provide customer support
• Communications: To send booking confirmations, service updates, and important notifications
• Improvement: To analyze usage patterns and improve our app, services, and customer experience
• Safety & Security: To detect fraud, protect our users and technicians, and maintain platform integrity
• Legal Compliance: To comply with applicable laws and regulations in Saudi Arabia
• Marketing: To send promotional offers and updates (with your consent, which you can withdraw at any time)

Under Saudi Arabia's PDPL, we process your personal data based on:

• Consent: You have given explicit consent for specific purposes (e.g., marketing communications, location tracking)
• Contract Performance: Processing is necessary to fulfill our service agreement with you
• Legal Obligation: Processing is required to comply with Saudi Arabian laws
• Legitimate Interests: Processing is necessary for our legitimate business interests, balanced against your rights

We may share your personal data with:

• Service Providers: Technicians and service professionals assigned to your bookings (limited to necessary information)
• Payment Processors: Secure third-party payment providers to process transactions
• Technology Partners: Cloud hosting and analytics providers under strict data protection agreements
• Government Authorities: When required by law or to protect legal rights

We do not sell your personal data to third parties for their marketing purposes.

In accordance with Saudi Arabia's PDPL:

• Your personal data is primarily stored and processed within the Kingdom of Saudi Arabia
• If data transfer outside Saudi Arabia is necessary, we ensure appropriate safeguards are in place as required by the regulatory authority
• We use data centers located in Saudi Arabia or approved jurisdictions with equivalent data protection standards

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Account data: Retained while your account is active and for 3 years after deletion request
• Transaction records: Retained for 7 years for tax and legal compliance
• Service history: Retained for 5 years for quality assurance and dispute resolution
• Marketing data: Deleted upon consent withdrawal

Under Saudi Arabia's Personal Data Protection Law, you have the following rights:

• Right to Access: Request a copy of your personal data we hold
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Right to Withdraw Consent: Withdraw previously given consent at any time
• Right to Object: Object to processing for direct marketing purposes
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Complaint: Lodge a complaint with the Saudi Data and AI Authority (SDAIA)

To exercise any of these rights, please contact us at privacy@fasterfm.com. We will respond to your request within 30 days.

You have the right to delete your account and associated personal data at any time. To delete your account:

1. Open the FASTER app
2. Go to Settings (or Profile > Account Settings)
3. Tap "Delete Account"
4. Confirm your identity via OTP verification
5. Review and confirm the deletion request

Alternatively, you may request account deletion by emailing privacy@fasterfm.com from your registered email address.

What happens when you delete your account:

• Your personal profile data (name, email, phone, address, profile picture) will be permanently deleted within 30 days
• Active bookings must be completed or rescheduled before account deletion can proceed
• Transaction records will be retained for 7 years as required by Saudi tax regulations (ZATCA)
• Anonymized service data may be retained for analytics and business improvement purposes
• Any remaining wallet balance or credits will be forfeited unless refunded before deletion

We implement appropriate technical and organizational measures to protect your personal data:

• End-to-end encryption for data transmission
• Secure data storage with access controls
• Regular security assessments and penetration testing
• Employee training on data protection
• Incident response procedures for data breaches

While we strive to protect your data, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and protect your account credentials.

Our services are not intended for children under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately, and we will take steps to delete such information.

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze app usage and performance
• Provide personalized content
• Detect and prevent fraud

You can manage cookie preferences through your device settings. Disabling certain cookies may affect app functionality.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes through the app or via email. The "Last updated" date at the top indicates when this policy was last revised. We encourage you to review this policy periodically.