Privacy Policy

This Privacy Policy governs the processing, collection, storage, and protection of personal and commercial data by Future Source Solutions Company (referred to herein as “Future Source”, “we”, “us”, or “our”), a commercial entity duly registered under the laws of the Kingdom of Saudi Arabia since 2019, operating under an ISO 9001:2015 certified Quality Management System.

This policy applies to all interactions across our corporate digital domains (including futuresourcetrading.com), digital quotation platforms, WhatsApp business routing systems, customer relationship portals, and in-person transactions conducted across our strategic operational hubs in Jeddah (Western Region HQ), Jubail Industrial City (Eastern Province), and Duba / NEOM Gateway (Tabuk Region).

In accordance with the Saudi Personal Data Protection Law (PDPL), promulgated under Royal Decree No. M/19 dated 09/02/1443H and amended by Royal Decree No. M/148 dated 05/09/1444H, and its Implementing Regulations overseen by the Saudi Data and Artificial Intelligence Authority (SDAIA), we process personal and corporate data under the following legitimate legal grounds:

• Contractual Necessity: Processing is required to prepare official Request for Quotation (RFQ) responses, execute supply contracts, manage vendor onboarding, fulfill site purchase orders, and arrange logistics dispatch to project sites (including NEOM, Red Sea, Jubail, and Yanbu).
• Statutory & Regulatory Obligations: Compliance with the mandatory requirements of the Zakat, Tax and Customs Authority (ZATCA) for electronic invoicing (Fatoora), the Saudi Commercial Books Law, Ministry of Commerce regulations, and Saudi Civil Defense safety reporting.
• Legitimate Commercial Interests: Safeguarding our digital networks against cyber threats, verifying commercial identity, maintaining ISO 9001:2015 traceability audits, and verifying product warranty registrations (such as Karam fall-arrest harness serial numbers).
• Consent: Where explicitly provided by you, such as subscribing to technical machinery updates, equipment safety inspection bulletins, or manufacturer recall alerts.

We adhere strictly to the principle of Data Minimization mandated by the Saudi PDPL, collecting only the categories of information strictly required to facilitate professional industrial equipment procurement:

Your data is processed strictly for defined, transparent, and legitimate operational objectives:

1. Fast-Track Quotation Generation: Reviewing engineering specifications, bill-of-quantities (BOQ), and equipment requirements to calculate accurate unit rates and delivery lead times within 2 to 4 working hours.
2. Multi-Regional Supply Logistics: Coordinating haulage, heavy equipment transport, and express hot-shot couriers from our facilities in Duba, Jubail, and Jeddah directly to client construction yards and plant facilities.
3. Statutory Compliance & Fatoora Integration: Generating compliant XML and QR-code embedded tax invoices directly connected with ZATCA Phase 2 integration platforms.
4. Quality & Safety Traceability: Maintaining batch tracking, mill test certificates (MTC), manufacturer certificates of conformity (CoC), and harness inspection records per SASO and European (EN) standards.
5. Customer Service & Warranty Administration: Managing factory warranty claims with OEMs (including Karam, Makita, Bosch, and DeWalt) and coordinating certified calibration or replacement units.

In strict compliance with SDAIA National Data Governance Regulations and the PDPL cross-border transfer rules, all primary customer repositories, accounting databases, and RFQ records are securely hosted within the Kingdom of Saudi Arabia.

Retention Timelines:

• Financial & Transaction Records: Retained for a mandatory statutory duration of ten (10) years in compliance with the Saudi Commercial Books Law and ZATCA tax audit standards.
• Unfulfilled RFQs & Quotation Enquiries: Retained for twenty-four (24) months to facilitate recurring price indexing and re-quote requests, after which they are permanently destroyed or anonymized.
• Equipment Warranty & Serial Registrations: Retained for the active lifespan of the certified equipment or up to seven (7) years to support mandatory safety inspection history.

Future Source Solutions Company maintains strict corporate non-disclosure standards. We do not sell, rent, lease, or monetize customer records, RFQ requests, or vendor directories under any circumstances.

Data is shared strictly on a confidential need-to-know basis with the following vetted recipients:

• Approved Logistics Partners: Licensed Saudi commercial transport providers and couriers for the sole purpose of transporting heavy cargo and delivering shipments to job sites.
• Original Equipment Manufacturers (OEMs): When necessary to validate factory warranties, provide technical compliance documentation, or register serial numbers for certified fall-protection systems.
• Financial & Banking Institutions: Commercial banks in Saudi Arabia facilitating verified corporate wire transfers, Letters of Credit (LC), and credit line processing.
• Statutory Saudi Authorities: Judicial courts, the Ministry of Commerce, ZATCA, or national security agencies when compelled by a valid court order or statutory obligation under Saudi law.

Under the Saudi Personal Data Protection Law, individuals and designated corporate representatives possess specific statutory rights regarding their personal data:

• Right to be Informed: The right to know the legal basis, purpose, and methods of personal data collection and processing.
• Right of Access: The right to request access to and inspect a copy of the personal data held by us, provided it does not infringe on trade secrets or proprietary pricing models.
• Right to Rectification: The right to request the correction, completion, or updating of inaccurate or outdated corporate contact details.
• Right to Destruction / Erasure: The right to request the permanent destruction of personal data when the original processing purpose has expired, subject to statutory retention exceptions under Saudi tax and commercial laws.
• Right to Withdraw Consent: Where processing is predicated exclusively on consent, you may withdraw your consent at any time without retroactive impact.

How to Exercise Your Rights: Submit a formal written notice to our Data Protection Desk at sales1@futuresourcetrading.com. We are committed to verifying identity and responding formally within thirty (30) calendar days, as stipulated by SDAIA regulations.

Our web portal employs limited, privacy-focused cookies and caching technologies to ensure operational performance, session continuity, and platform stability:

• Essential Technical Cookies: Strictly necessary for navigation, security token validation, inquiry modal state preservation, and load-balancing.
• Preference Cookies: Storing regional branch selections (e.g., Jeddah, Jubail, or Duba) to optimize localized catalog and lead-time display.
• Performance Telemetry: Aggregated, anonymized metrics measuring page loading speed, script execution latency, and link health to guarantee high availability.

You can configure your browser preferences to reject non-essential cookies. Essential technical cookies cannot be disabled without impairing the quotation submission functionality.

In alignment with our ISO 9001:2015 Quality Management Framework and national cybersecurity guidelines, Future Source implements robust technical and administrative safeguards:

• Data Encryption: All incoming and outgoing data transmissions across our platform are secured using Transport Layer Security (TLS 1.3) with 256-bit encryption. Stored databases utilize AES-256 cryptographic standards.
• Access Restrictions: Access to client procurement ledgers and contact directories is restricted strictly to authorized sales engineers, logistics coordinators, and accounting executives via multi-factor authentication (MFA).
• Vulnerability Assessments: Routine vulnerability scans, penetration testing, and continuous audit trails to detect and remediate potential security threats proactively.

Future Source Solutions Company reserves the right to amend this Privacy Policy periodically to reflect technological advancements, operational developments, or statutory updates enacted by the Saudi Data and AI Authority (SDAIA). The “Last Updated” timestamp at the top of this document indicates the effective revision date.

For compliance inquiries, data subject requests, or regulatory correspondence, please contact our designated Data Protection Desk: