Privacy Policy

Who we are and what this covers

This policy explains how 1 FGCC Company (the "Institute") collects, uses and protects your personal data when you visit this website or register for any training programme. It is applied under the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL) and its Implementing Regulations. The Institute is the data controller.

Data we collect

• Identity and contact data: name, email, mobile number, city, employer and job title.
• Registration data: the course and session requested, preferred language, and any special requirements or accessibility arrangements you choose to share.
• Payment data: processed directly by a licensed payment service provider; we do not store full card numbers on our systems.
• Training data: attendance records and assessment or exam results once you join a course.
• Technical data: IP address, browser and device type, and pages visited, collected via the cookies described in the Cookie Policy.

Why we process it (legal basis)

• Performance of a contract: processing your registration, delivering the training, and issuing certificates and invoices.
• Legal obligation: tax invoicing, and requirements of regulators and certification bodies.
• Legitimate interest: improving our services, site security and fraud prevention, without overriding your rights.
• Consent: marketing messages and non-essential cookies; you may withdraw consent at any time without retroactive effect.

Sharing your data

We do not sell or rent your personal data. We may share it, kept to a minimum, with:

• Service providers acting on our behalf under data-processing agreements (website hosting, cloud databases, the payment provider, messaging, email and analytics tools).
• Certification bodies when you register for an accredited exam.
• Government or judicial authorities where required by law or a competent order.

Retention

We keep registration data and training records for as long as needed to provide the service and for the periods required by law (including accounting and tax retention of around six years), then destroy or anonymise them. Marketing contact data is kept until you withdraw consent.

Your rights

You have the right to: be informed of how your data is used, access it and obtain a copy, request its correction or destruction, withdraw consent, and object to certain processing. To exercise any right, contact us through the website contact form, by email info@fgcc.edu.sa, or on +966 11 499 4203; we will respond within the statutory period. If you are not satisfied with our response, you may lodge a complaint with the competent authority.

Security and breach notification

We apply reasonable organisational and technical controls to protect your data against loss and unauthorised access. If a breach affecting your data occurs, we notify the competent authority and inform you within the statutory timeframes and conditions.

Children's data

Our services are aimed at people aged 18 and over. We do not knowingly collect data from minors without a guardian's consent.

Updates

We may update this policy; the update takes effect from the date it is published on this page.