1. Who We Are
FANUUN BCG is a global technology advisory and execution firm with its primary operations headquartered in Riyadh, Kingdom of Saudi Arabia. We operate internationally with offices in Dubai (UAE), Vancouver (Canada), and Tallinn (Estonia). We are the data controller responsible for the personal information collected through our website at www.f-bcg.com and through our business operations. For all privacy-related enquiries, please write to us at info@f-bcg.com or call +966 55 867 3949.
2. Personal Data We Collect
We collect personal data only when you voluntarily provide it to us or when it is generated through your use of our website. Categories include: contact and enquiry data (full name, professional email, phone number, job title, organisation, country, and message content), newsletter subscription data (email address, first name, subscription date), and technical data (IP address, browser type, pages visited). We do not collect sensitive personal data such as health information or financial details through this website.
3. How We Use Your Personal Data
We use personal data to: respond to enquiries including sending automatic acknowledgements; deliver newsletter publications and regulatory updates to subscribers who have opted in; improve our website using aggregated, anonymised analytics; comply with legal obligations in jurisdictions where we operate; and understand how prospective clients engage with our services.
4. Legal Basis for Processing
We process personal data under: consent (for newsletter subscriptions where you have explicitly opted in); contractual necessity (when responding to enquiries or providing requested services); legitimate interests (for analytics and website improvement where such processing does not override your rights); and legal obligation (where required to retain records under applicable law).
5. Email Communication via Amazon Web Services
Our contact form and newsletter system sends emails using Amazon Simple Email Service (Amazon SES), operated by AWS Inc. Email data is processed through AWS infrastructure in the EU (Stockholm) region. Amazon Web Services is a PDPL-compliant and GDPR-compliant processor. All email transmissions are encrypted using TLS. By submitting the contact form or subscribing to our newsletter, you consent to the processing of your email data through AWS SES for the sole purpose of delivering your requested communication.
6. How We Share Your Data
We do not sell, rent, or trade your personal data to any third party. We may share data with service providers (Amazon Web Services for email delivery), professional advisors where required for legitimate business operations, legal authorities where required by law or court order in KSA or another jurisdiction where we operate, and in business transfers subject to equivalent privacy obligations.
7. Data Retention
Contact form submissions are retained for 3 years from the date of submission. Newsletter subscriptions are retained until you unsubscribe; upon unsubscription, we remove your email from our active mailing list within 30 days. Technical and usage logs are retained for up to 12 months for security and operational purposes.
8. Your Rights
Subject to applicable law including the Saudi PDPL, you have the right of access, right to rectification, right to erasure, right to restriction, right to object, and right to withdraw consent. To exercise any of these rights, contact us at info@f-bcg.com. We will respond within 30 days. For complaints, you may contact the Saudi Data and AI Authority (SDAIA) at sdaia.gov.sa.
9. Security
We implement appropriate technical and organisational measures to protect your personal data. These include TLS encryption for all data transmitted to and from our website, TLS encryption for all email communications via AWS SES, and access controls limiting who within our organisation can access personal data.
10. Contact Us
Email: info@f-bcg.com | Phone: +966 55 867 3949 | Address: FANUUN BCG, Riyadh, Kingdom of Saudi Arabia