Privacy Policy

1Who is responsible for your data

• Firno, commercial registration 7015151553, VAT number 300822362500003, registered address 7978 Khalid Ibn Al Waleed, Al Rawdah Dist., Riyadh 13213, Kingdom of Saudi Arabia (national short address RFRA7978).
• For anything about your data: info@firno.com.sa

2What we collect

• Account details: name, email address, mobile number.
• Delivery addresses you save, and the phone number attached to each — the courier calls it.
• Order history: products, quantities, amounts, order status.
• Limited technical data to run the site and protect it from abuse, including your IP address.
• For wholesale accounts: legal name, commercial registration, VAT certificate, business activity.

3What we do not collect

We never store your card details. Payment happens entirely at the payment provider (Moyasar); only the result and a reference number reach us.

4Why we collect it

• To fulfil, deliver and invoice your order.
• To contact you about an order in progress.
• To meet invoicing and tax obligations.
• To protect the store from abuse.

5Who sees it

• The payment provider (Moyasar), to take payment.
• The courier delivering your order, who receives your name, address and phone number only.
• Our email provider, to send order and shipping confirmations.
• Our hosting and database provider.
• We do not sell or rent your data to anyone.

6How long we keep it

• Orders, invoices, returns and refund records: ten years. The Zakat, Tax and Customs Authority requires them, and a deletion request does not reach them.
• Account details and saved addresses: while your account exists. Closing the account deletes the addresses and erases your identity from past orders, while the orders themselves remain for tax purposes.
• An abandoned basket: ninety days from the last time you changed it, then deleted automatically.
• Stock alerts: until we send the notification, then thirty days.
• The admin audit log: kept indefinitely. It is the trail we rely on in a dispute or a security incident.
• Staff activity log: one year. Raw payment-provider callbacks: one hundred and eighty days.
• The full statement, table by table, is in our retention policy document.

7Your rights

• You may see your data, correct it, ask us to delete your account, and receive a copy of it.
• The last two are available immediately from the "My data and privacy" page inside your account: a button that downloads a complete copy of your data as JSON, and a flow that closes the account for good, which asks for your password and a typed confirmation.
• Closing the account deletes your addresses, basket, wishlist, alerts, reviews and subscription, and erases your name, address, phone and email from past orders. The orders themselves stay, for tax purposes.
• For anything else — or if you cannot reach your account — write to info@firno.com.sa and we will respond within thirty days.

8Cookies

We use strictly necessary cookies only: the ones that keep you signed in and hold your basket. No advertising cookies, no third-party tracking.