Privacy policy for this website

What this policy covers

It covers this catalogue website — the pages you are reading now, and nothing else. Our products are separate services running at their own addresses, holding customer data of their own, and each has its own privacy policy linked from the footer of every page here. If your question is about data inside a product, read that product's policy.

The operator is FTH Digital Marketing. Our identifiers are at the end of this page.

What this website collects

Nothing. Every page here is a file sent to your browser as it is. There is no account, no sign-in and no profile, and at the moment there is no form for you to submit. We build no record of your visit.

Emailing us is different. Your address, whatever you write and anything you attach arrive in a mailbox our team reads, and stay there until we delete them. We use them to answer you and for nothing else.

We are building a contact form. When it exists, this page will say what it asks for, what happens to what you send and how long we keep it — and it will say so before the form accepts a single message. We would rather publish a policy that says "nothing" and mean it than one that describes a form nobody has built.

Measurement and advertising

This website loads no analytics service and no tag manager. Nothing here profiles you, scores you or follows you to another site.

We know that because we checked from outside, at the address you use, on 2026-09-01 — not by reading our own source code. The source code is not the whole story: a network provider can add a script to a page after it has left our server, and this domain has carried one that way before.

If we ever add measurement to this website, this page and the cookie page will say so before it starts, and the date at the top will change.

Our network provider

Cloudflare delivers this website and terminates the encrypted connection between your browser and us. Doing that necessarily means handling your address on the internet and the details of your request, and it may set a strictly necessary security cookie so it can tell a person from an automated request.

Cloudflare adds nothing to our pages today: what leaves our server is, byte for byte, what reaches you. It has added something before — a small script that hid printed email addresses from address-harvesting robots — and it is one setting away from doing so again. That is why we check from outside instead of trusting our own source code, and why we update this page when the answer changes.

Read the cookie page

Your rights

Under the Personal Data Protection Law of the Kingdom of Saudi Arabia you may ask what personal data we hold about you, ask for a copy of it, ask us to correct it, ask us to destroy it, and withdraw a consent you have given.

Write to privacy@fth.marketing. Tell us enough to find you — for most people that is simply the address you wrote to us from. Because this website itself holds nothing, a request about it is usually a request about an email you sent us.

A request about one of our products goes to the same address. Say which product, and which account or page it concerns.

If our answer does not satisfy you, you may complain to the competent supervisory authority in the Kingdom.

AI access to client data

This section concerns our clients' data in Business Manager, not visitors to this website.

1. Client data is kept in Business Manager. AI (for example Claude) reaches it automatically through one route only: FTH's GBP MCP connector. The connector keeps no client data, and Business Manager decides what leaves. Files and images a staff member uploads by hand into an AI conversation are covered by clause 5.
2. Google reviews are not stored in our systems. They are read live from Google on each request, so they are always current. Google sends the reviewer's name with each review. Business Manager removes it before the review leaves, unless it is allowed, and does not keep it. Each client has two separate permissions: what our team sees, and what reaches AI. What reaches AI never exceeds what the team sees. De-identification happens in exactly one layer, Business Manager.
3. Reviewer names and ids reach AI only when that client's permission is opened. Where the client's contract locks it, only the client's own consent opens it. The request goes to the official email in the contract, and the client confirms with a code sent to their email. The client may accept some items and decline others. Each consent is recorded with its date and time. If the client is deleted from our systems, the record of the consent and of any withdrawal is kept in full as evidence of them, including the email the request went to, the IP address and browser it was confirmed from, a digital fingerprint of the text shown, and the date and time.
4. The connector works both ways. AI reads client data through it (profile, reviews, performance). It writes one thing through it, replies to reviews, and a reply is published only after a staff member confirms it. Measured: neither Business Manager nor the connector contains a model-provider library, a model endpoint or a model key. Both were measured with the same instrument on 2026-09-30, on the deployed release, with a positive control proving the instrument detects a planted sample. Any new AI capability is added to this statement before it is switched on.
5. Not measured; a conduct commitment: the systems do not stop a staff member from typing a person's name or other data into an AI conversation by hand, or from uploading a file or image to it. We commit to training the team and forbidding it; it is not a technical guarantee.
6. Every edit or reply made through AI is recorded on the client's timeline under the name of the staff member who asked for it.

All data is stored on servers in the EU (Contabo), and AI processing happens outside Saudi Arabia. Saudi-only storage is not promised.

The canonical copy of this statement is published on its own page: https://gbp.fth.marketing/data-processing?lang=en

Changes

When this policy changes, the date at the top of the page changes with it. We keep no archive of older versions online, so if a version matters to you, save it.