Privacy Policy

 Fortis Privacy Notice

Last Updated: October 2025

1. Introduction

This Privacy Policy and Notice explains how Fortis MENADigital Solutions LLC and its affiliated companies operating within the UnitedArab Emirates (together "Fortis", "we", "us","our") collect, use, share, and protect your Personal Data when you visit our website www.wefortis.com (the"Website").

We are committed to protecting your privacy and handlingyour Personal Data in accordance with applicable data protection laws,including the UAE Federal Decree-Law No. 45/2021 concerning the Protection ofPersonal Data ("PDPL").

This Notice applies to the processing of Personal Datacollected through this Website, including data collected in connection with ourcustomer loyalty program (the "Loyalty Program"). Our specificproducts and services may be subject to separate privacy policies or notices.

2. Data Controller Details

Fortis MENA Digital Solutions LLC is the primary datacontroller responsible for the Personal Data collected via this Website. Ourregistered office is at One Central, Office 304/305, The Offices, iSpaceMultispace Offices, Dubai, UAE.

For any questions regarding this Privacy Notice, pleasecontact our Data Protection Office at: privacy@fortis.world.

3. What Personal Data We Collect

"Personal Data" is any data relating to anidentified or identifiable natural person. We collect Personal Data in thefollowing ways:

• 3.1.     Information Collected Automatically: When you visit our Website, we may     automatically collect technical and usage information using cookies and     similar technologies, such as your IP address, browser type, and pages     visited. This helps us operate and improve the Website. For more details,     please see our Cookie Policy.
• 3.2.     Information You Provide Voluntarily: We collect information you provide     through contact forms (e.g., name, company, email) , direct communications,     or when you subscribe to our marketing communications.
• 3.3.     Information for the Loyalty Program: If you join our Loyalty Program,     administered by a third-party provider, we and our provider collect data     to manage your account. This includes:
   
  • Account      Registration Data: Your name, email, phone number, and a password.
   
  • Transaction      Information: Details of your purchases linked to your loyalty      account.
   
  • Program      Activity Data: Information on rewards earned and redeemed.
 
• 3.4.     Sensitive Personal Data: We do not intentionally collect sensitive     Personal Data (e.g., health data, religious beliefs) through this Website     and request that you do not provide it.

4. How We Use Your Personal Data

We use your Personal Data for the following purposes:

• Website     Operation and Improvement: To enable core functionality, manage     security, and analyze usage to improve performance.
• Communication     and Business Development: To respond to your inquiries and provide     information about our solutions.
• Loyalty     Program Administration: To create and manage your membership, track     points, process rewards, and communicate with you about your account.
• Processing     Requests: To manage and respond to your data protection rights     requests.
• Marketing     Communications: To send you marketing information where we have your     explicit consent or as permitted by law for existing clients.

5. Legal Basis for Processing

We process your Personal Data based on the following legalgrounds under the UAE PDPL:

• Consent:     For non-essential cookies and for sending direct marketing. You can     withdraw your consent at any time.
• Contractual     Necessity: To take steps at your request before entering a contract     (e.g., responding to a service inquiry) and to perform our contract with     you when you join the Loyalty Program.
• Legal     Obligation: To comply with our legal duties, such as responding to     your data rights requests.
• Legitimate     Interests: For essential website security, analyzing usage trends, and     communicating with existing clients about similar services.

6. Data Sharing and Disclosure

We do not sell your Personal Data. We may share it in theselimited circumstances:

• Third-Party     Service Providers: With trusted partners who provide services on our     behalf, such as website hosting and analytics.
   
  • Loyalty      Program Provider: We share required Personal Data with MyBoomerang,      who administers our Loyalty Program on our behalf. They are contractually      obligated to protect your data and use it only for this purpose.
 
• Affiliated     Companies: Within the Fortis group of companies in the UAE for     administrative purposes.
• Legal     Requirements: If required by law, regulation, or a court order.
• Business     Transfers: In the event of a merger or acquisition, your data may be     transferred as part of the transaction.

We will not share your Personal Data with external thirdparties for their own direct marketing without your explicit consent.

7. International Data Transfers

Your Personal Data may be processed by us or our serviceproviders in locations outside the UAE , which may not have equivalent dataprotection laws. This includes data processed by third-party Loyalty Programproviders.  Where such transfers occur,we ensure appropriate safeguards are in place as required by the UAE PDPL, suchas using Standard Contractual Clauses or transferring to countries deemedadequate by the UAE Data Office.

8. Data Security

We implement appropriate technical and organizationalmeasures, such as access controls and encryption, to protect your Personal Dataagainst unauthorized access or loss. However, no internet transmission is 100%secure.

9. Data Retention

We retain your Personal Data only as long as necessary forthe purposes it was collected.

• Contact/Query     Data: Retained for the duration of the interaction and potentially     longer if it leads to a contract.
• Cookie     Data: Retention periods are detailed in our Cookie Policy.
• Loyalty     Program Data: Retained as long as you are an active member. If you     close your account, your data will be deleted or anonymized unless     required for legal compliance.
• Marketing     Consent Data: Retained until you withdraw consent.

10. Your Data Protection Rights

Under the UAE PDPL, you have the right to access, rectify,erase, and restrict the processing of your Personal Data. Youalso have the right to data portability, to object to processing,and to withdraw consent at any time. You have the right to lodge acomplaint with the UAE Data Office if you believe your rights have beeninfringed.

11. How to Exercise Your Rights

To exercise any of your rights, please contact us at privacy@fortis.world.We will respond within the timeframes required by law, which is typically 30days.

12. Updates to this Privacy Notice

We may update this Privacy Notice periodically. We will postthe updated version on our Website and indicate the "Last Updated"date. We encourage you to review this notice regularly

‍