Privacy Policy
Draft for review · مسودة للمراجعة — Not effective and not accepting payments. لم تدخل حيز التنفيذ ولا تستقبل مدفوعات.
Last updated: [EFFECTIVE DATE]
This policy explains what personal data FM Ascend collects and why, in line with the Saudi Personal Data Protection Law (PDPL) and the E-Commerce Law.
What we collect
- Email address, to send your one-time sign-in link, your receipt and service messages.
- Subscription record: plan, start and end dates, and a payment reference from Moyasar.
- A sign-in cookie, a strictly necessary cookie that keeps you signed in. We do not use advertising cookies.
- Your study progress (answers, marks, notes), stored on your own device in your browser[or on our servers, if added later].
- Site statistics from Cloudflare Web Analytics, which counts page visits without cookies and without identifying you.
Payments
Payments are processed by Moyasar. Your card number is entered on Moyasar's secure form and is never sent to or stored by FM Ascend. We receive only the payment result, amount and a reference.
Who we share it with
Only service providers needed to run the service: Cloudflare (hosting and security), Moyasar (payments) and Resend (sending sign-in emails). Some of these may process data outside Saudi Arabia under their own safeguards. We never sell your data or use it for advertising.
How long we keep it
We keep account data while your subscription is active and for [RETENTION PERIOD, e.g. 12 months] after it ends, and payment records for as long as Saudi law requires. Then we delete them.
Your rights
You can ask to see, correct or delete your data, or withdraw consent, by emailing [email protected]. We act on rights requests without delay and within 30 days. A further period of up to 30 days applies only where the law permits, with advance notice and reasons. We may verify your identity using proportionate information. You may also complain to the Saudi Data & AI Authority (SDAIA).
Security
The site runs over HTTPS, sign-in links expire quickly, and access to data is limited to the operator.
Controller, purposes and lawful grounds
FM Ascend, as shown on our Contact page is responsible for the data described here. Account and payment processing support the service you request; security and legal records are processed on the applicable legal grounds. Optional marketing requires separate consent where required, which you can withdraw without losing purchased access.
Support and technical records
We receive the messages you email us. Hosting and security providers may process IP addresses, browser information and security logs to deliver and protect the service. [VERIFY LOG CATEGORIES AND RETENTION]. Do not send patient records or sensitive medical details.
Browser storage, transfers and safeguards
Browser storage may hold preferences and study progress; clearing it may remove local-only progress. [CONFIRM ALL ACTUAL COOKIES / STORAGE / PROCESSORS]. International processing requires applicable safeguards; use of this site alone is not a substitute for a lawful transfer basis. We notify affected people and competent authorities of a breach where legally required.
Changes to this policy
We identify the current version by its effective date and notify users of material changes on the site or by email.
Merchant: FM Ascend · Kingdom of Saudi Arabia · [email protected]