1. What we collect

We collect only what the service requires, and it differs by what you use:

Contact and enrolment details: name, mobile number, email, city, and, when applying to a programme, your qualification and field of study.
National ID or Iqama number: optional when applying to the free programmes under the national initiative: providing it speeds up verification of initiative eligibility and documentation of attendance and the certificate; leaving it blank does not block your application. It is never shown on any public page and never shared with a commercial party.
Your CV: when you apply for a job or a free programme. It is uploaded over an encrypted connection to Vercel Blob storage, and any file not linked to an actual application is deleted automatically within 24 hours.
Payment details: entered and processed by our payment gateways (Moyasar, Tabby, Tamara). We never receive or store card numbers on our servers : the gateway returns only a transaction reference and its status.
Skills assessment answers: stored without identity unless you choose to leave your details at the end.
Aggregate usage data via our own first-party measurement, Vercel Analytics and Google Analytics : page, referrer, country and device type, plus active reading time and how far down a page a reader got. Its purpose is to improve and order our content.
Our first-party measurement: no cookies, no identifier that follows you between visits, and no IP address stored. A random identifier lasting only for the open tab is used and cleared when the tab closes, and records are deleted after twelve months.
Where your visit came from: when you reach us from an ad, a post or another site, we keep the source, the campaign and your first page on your device only (not on our servers), for ninety days. It reaches us only with a form you send yourself (registration, contact or a call request), so we can tell which of our channels actually help people. The same goes for your optional answer to “How did you hear about us?”.
Advertising pixels (Meta, TikTok and Snapchat): once enabled, each platform places a cookie on your device and receives your page views and events such as sending a registration or completing a payment with its amount, to measure our ads and show them to people similar to those interested in our programmes. We never send them your name, mobile number or email. You can block them by blocking cookies in your browser or in each platform’s ad settings.
Google Analytics works differently, and we say so plainly: it places a cookie on your device carrying an identifier that persists between your visits, and your IP address reaches it so that an approximate location can be derived from it. Google’s commitment not to log IP addresses covers visitors from the EU, Switzerland and the UK only, and does not extend to our visitors inside the Kingdom. The data is processed by Google outside the Kingdom. You can block it with Google’s official opt-out add-on or by blocking cookies in your browser: nothing you use on the site is affected.

2. Legal basis and purpose

Performing the service: completing enrolment and payment, issuing the certificate, and contacting you about your programme.
Legal obligation: tax invoicing and record-keeping under Saudi regulations.
Your consent: marketing messages, if you opt in, and you may withdraw consent at any time.

3. Who we share it with

We do not sell or rent your data. Sharing is limited to service providers who process it on our behalf, and only as far as needed:

Payment gateways: Moyasar, Tabby and Tamara, to complete payment.
Vercel: website hosting and storage of uploaded files.
Neon: database.
Our email provider, to send confirmations and invoices.
Google, Meta, TikTok and Snapchat: the measurement and advertising data described above, without your name, mobile number or email.

When our integration with the National eLearning Center (NELC) goes live: it is being prepared and is not active yet : training completion data will be transferred to register the certificate in the national record. We will update this policy when it does.

4. Where it is stored and for how long

Data is stored on our providers’ servers, which may be outside Saudi Arabia; we contract with them to protect it to a standard equivalent to our own.
CVs not linked to an application: deleted automatically after 24 hours.
Enrolment and payment records: kept as long as needed for the purpose they were collected for and for our legal obligations, then deleted or anonymised.
You may request deletion sooner, and we will act on it except where a legal obligation prevents us.

5. How we protect it

The entire site runs over an encrypted connection (HTTPS), and access to trainee data is limited to the members of our team who need it. Card data is never stored with us in the first place.

6. Your rights under the Personal Data Protection Law

Under Saudi Arabia’s Personal Data Protection Law (PDPL), you have the right to:

be informed of how your data is used;
access it and obtain a copy;
request correction of anything inaccurate or incomplete;
request its destruction once it is no longer needed;
withdraw consent where processing relies on it.

To exercise any of these rights, email info@fsi.edu.sa; we respond within thirty days. If our response does not satisfy you, you may complain to the Saudi Data & AI Authority (SDAIA) as the competent supervisory authority.

7. Cookies

We use essential cookies: the trainee’s portal session, our team’s admin session, and a referral code if you arrived through a referrer’s link. Alongside them sit the Google Analytics cookie for measurement and, once enabled, the advertising pixel cookies (Meta, TikTok and Snapchat), as detailed in section 1. Our own first-party measurement sets no cookie at all. You can block the non-essential ones in your browser: nothing you use on the site is affected.

8. Children’s privacy

Our services are intended for people aged 18 and over. Anyone younger may enrol with the consent of a parent or guardian.

9. Changes to this policy

We may update this policy; the last-updated date appears below. We notify registered trainees by email of any material change.

10. Contact

For any question about your privacy, contact us at info@fsi.edu.sa.

Last updated: October 2026

Privacy Policy