Download
Data Protection Specifications, version 3.4, English (PDF) مواصفات حماية البيانات، الإصدار 3.4، Arabic (PDF)
Superseded editions remain available: v3.3, English (PDF) v3.3, Arabic (PDF) v3.2, English (PDF) v3.2, Arabic (PDF) v3.1, English (PDF) v3.1, Arabic (PDF) v3.0, English (PDF) v3.0, Arabic (PDF)
Status of this document
This specification stands on its own. It describes FTH's personal data protection practices across all its services, it applies to every client whose data FTH processes, and it is not an annex to any particular agreement.
The governing version is the one published on this page, carrying a version number and a date. Any other copy governs only if it matches it.
- Changes that add or alter a commitment are published with a new version number and take effect on the date stated in that version.
- New or replacement sub-processors are published on the sub-processor register. Publication is the notice, and FTH may engage the sub-processor from the date it is listed. A client may object on reasonable data protection grounds within thirty days of publication, and FTH works with the client to address the objection. Where the sub-processor is part of the platform's infrastructure and the objection cannot be resolved, the client may terminate the service that relies on it, and termination is limited to that service rather than the client's other services. An objection does not suspend the engagement.
- Clarifications that reduce no commitment take effect on publication.
- Every version is listed below with its date and a summary of what changed.
Where the two texts differ, the Arabic text prevails.
Version history
| Version | Date | What changed |
|---|---|---|
| 3.4 | 15 October 2026 | States that reviewers' names are shown by default once an administrator of the client records the acknowledgement, and that the client may hide them; describes the short reviewer code shown where a name is not; makes approval of review replies a policy the client sets for its workspace, its branches and its members. |
| 3.3 | 10 October 2026 | Adds two categories of personal data in the FTH Maps platform: franchisee contact details, and the people Google lists on a branch's Business Profile; states the purpose of each, who can see it, its retention and its erasure. |
| 3.2 | 27 September 2026 | Adds FTH Business Manager and FTH's internal systems; adds MyFatoorah, Google (Gemini) and OpenAI to the sub-processors; describes the protection applied before content reaches AI providers, encrypted local and off-site backups, restore tests, logging and retention. |
| 3.1 | 21 September 2026 | Adds reviewer-name storage as a client option, the optional classification and its workspace switch, authentication logging, diagnostic data rules, masking limits, backup periods and the payment provider. |
| 3.0 | 30 August 2026 | Covers FTH's Business Profile services and the FTH Maps platform as an independent product; sets the publication and notice model; describes AI processing for each service, FTH personnel access, diagnostic data and FTH's responsibility for its sub-processors. |
| 2.4 | 30 July 2026 | Earlier issued version. |
Contact
Privacy enquiries, data subject requests and audit requests: privacy@fth.sa for FTH's Business Profile services, privacy@fth.marketing for its products. Every clause in the document is demonstrable against the platform.