Privacy Policy
This policy explains how FT Digital Products collects, processes and protects your personal data when you use https://fdtree.com, in accordance with the Saudi Personal Data Protection Law (Royal Decree No. M/19 dated 9/2/1443H, as amended by Royal Decree No. M/148 dated 5/9/1444H) and its Implementing Regulations issued by the Saudi Data and AI Authority (SDAIA).
1. Data controller
FT Digital Products — Riyadh — Saudi Arabia — CR —.
Privacy contact: support@fdtree.com
2. Data we collect
- Identity and contact: name, email, mobile, company name, VAT number, city/country.
- Order data: products purchased, licence type, amounts, invoices, coupon codes, licence records and download links.
- Payment data: method type, transaction status, the last four card digits and the gateway reference. We never collect or store your full card number or CVV — payment takes place entirely on the licensed gateway's pages. For bank transfers we retain the receipt you upload solely for verification.
- Technical data: IP address, browser and device type, pages visited and download logs — for security and abuse prevention.
- Correspondence: the content of support messages and tickets.
We do not collect or request sensitive personal data, and we do not target our services at children under 18.
3. Legal basis and purposes
- Fulfilling your order, issuing licences and invoices — performance of the contract.
- Technical support and answering enquiries — contract performance and our legitimate interest in serving customers.
- Retaining invoices and accounting records — compliance with tax and commercial regulations.
- Protecting the site and preventing fraud or abuse of download links — legitimate interest and protection of our legal rights.
- Newsletter and offers — your explicit consent, withdrawable at any time.
Under Article 5 of the E-Commerce Law we do not use or disclose your personal data for unauthorised purposes without your consent.
4. Sharing with third parties
We do not sell or rent your data. We share it only as necessary with licensed payment gateways, our hosting provider, our email service provider, analytics tools where enabled, and judicial or regulatory bodies upon a lawful request. Every processor is bound to keep the data confidential and use it only for the specified purpose.
5. Cross-border transfers
Some data may be processed by service providers outside the Kingdom (such as email services or international gateways). Where this occurs we comply with the transfer controls set out in the PDPL and its Implementing Regulations, and transfer only the minimum necessary.
6. Retention
Order, invoice and licence data is kept for the period required by tax and commercial regulations and to preserve your download and support entitlement. Download and payment logs are kept for a period sufficient for security and dispute resolution. Newsletter data is kept until you withdraw consent. Data is destroyed or anonymised once its purpose has ended, unless a statutory retention obligation applies.
7. Your rights
Article 4 of the PDPL guarantees you the right to be informed, the right of access, the right to obtain a copy in a clear and readable format, the right to correction, the right to have your data destroyed, and the right to withdraw consent at any time.
To exercise any of these, write to support@fdtree.com. We may ask you to verify your identity first. Destroying order data may end your download and support entitlement and cannot be performed for data we are legally required to retain.
If you are not satisfied with our response you have the right to complain to SDAIA through its official channels.
8. Security
We apply appropriate technical and organisational measures, including HTTPS encryption in transit, one-way irreversible password hashing, blocking direct access to product files and serving them only through time-limited signed links, role-based access control in the admin panel, and logging of sign-ins and changes. No transmission over the internet can be guaranteed absolutely secure.
9. Cookies
We use cookies necessary to operate the site: your session, the shopping cart, the display language and the CSRF protection token. Where enabled we may also use analytics cookies. You can configure your browser to refuse cookies, but refusing the necessary ones prevents checkout from completing.
10. External links
The site may link to other websites (such as live demos or documentation). We are not responsible for their privacy practices.
11. Changes to this policy
We may update this policy, effective from publication on this page. We will notify you by email of any material change affecting how your data is processed.
12. Contact
FT Digital Products — Riyadh — Saudi Arabia
Privacy: support@fdtree.com · General: sales@ft.sa · Phone: —