Privacy Policy

Fortis Privacy Notice

Last Updated:  January 2026

1. Introduction

This Privacy Policy and Notice explains how Fortis MENADigital Solutions LLC and its affiliated companies operating within the United Arab Emirates (together "Fortis", "we", "us","our") collect, use, share, and protect your Personal Data when you visit our website www.fortis.world (the"Website").

We are committed to protecting your privacy and handling your Personal Data in accordance with applicable data protection laws, including the UAE Federal Decree-Law No. 45/2021 concerning the Protection ofPersonal Data ("PDPL").

This Notice applies to the processing of Personal Data collected through this Website, including data collected in connection with our customer loyalty program (the "Loyalty Program"). Our specific products and services may be subject to separate privacy policies or notices.

2. Data Controller Details

Fortis MENA Digital Solutions LLC is the primary data controller responsible for the Personal Data collected via this Website. Our registered office is at:

The Offices 5, Level 5,TO5-FLR05-05.01.08,  One Central, 452404,Dubai, United Arab Emirates

For any questions regarding this Privacy Notice, please contact our Data Protection Office at: privacy@fortis.world

3. What Personal Data We Collect

"Personal Data" is any data relating to an identified or identifiable natural person. We collect Personal Data in the following ways:

• 3.1.     Information Collected Automatically: When you visit our Website, we may automatically collect technical and usage information using cookies and similar technologies, such as your IP address, browser type, and pages visited. This helps us operate and improve the Website. For more details, please see our Cookie Policy.
• 3.2.     Information You Provide Voluntarily: We collect information you provide through contact forms (e.g., name, company, email) , direct communications, or when you subscribe to our marketing communications.
• 3.3.     Information for the Loyalty Program: If you join our Loyalty Program, administered by a third-party provider, we and our provider collect data to manage your account. This includes:
   
  • Account Registration Data: Your name, email, phone number, and a password.
   
  • Transaction Information: Details of your purchases linked to your loyalty account.
   
  • Program Activity Data: Information on rewards earned and redeemed.
• 3.4. Sensitive Personal Data: We do not intentionally collect sensitive Personal Data (e.g., health data, religious beliefs) through this Website and request that you do not provide it.

4. How We Use Your Personal Data

We use your Personal Data for the following purposes:

• Website Operation and Improvement: To enable core functionality, manage security, and analyze usage to improve performance.
• Communication and Business Development: To respond to your inquiries and provide information about our solutions.
• Loyalty Program Administration: To create and manage your membership, track points, process rewards, and communicate with you about your account.
• Processing Requests: To manage and respond to your data protection rights requests.
• Marketing Communications: To send you marketing information where we have your explicit consent or as permitted by law for existing clients.

‍

5. Legal Basis for Processing

We process your Personal Data based on the following legal grounds under the UAE PDPL:

• Consent: For non-essential cookies and for sending direct marketing. You can withdraw your consent at any time.
• Contractual  Necessity: To take steps at your request before entering a contract (e.g., responding to a service inquiry) and to perform our contract with     you when you join the Loyalty Program.
• Legal Obligation: To comply with our legal duties, such as responding to your data rights requests.
• Legitimate Interests: For essential website security, analysing usage trends, and communicating with existing clients about similar services.

‍

6. Data Sharing and Disclosure

We do not sell your Personal Data. We may share it in these limited circumstances:

• Third-Party Service Providers: With trusted partners who provide services on our behalf, such as website hosting and analytics.
   
  • Loyalty Program Provider: We may share your personal information with trusted third-party providers, who administers our Loyalty Program on our behalf.      They are contractually obligated to protect your data and use it only for this purpose‍
  • Affiliated Companies: Within the Fortis group of companies in the UAE for administrative purposes
  • Legal Requirements: If required by law, regulation, or a court order.‍
  • Business Transfers: In the event of a merger or acquisition, your data may be transferred as part of the transaction.

We will not share your Personal Data with external third parties for their own direct marketing without your explicit consent.

7. International Data Transfers

Your Personal Data may be processed by us or our service providers in locations outside the UAE , which may not have equivalent data protection laws. This includes data processed by third-party Loyalty Program providers.  Where such transfers occur, we ensure appropriate safeguards are in place as required by the UAE PDPL, suchas using Standard Contractual Clauses or transferring to countries deemed adequate by the UAE Data Office.

8. Data Security

We implement appropriate technical and organizational measures, such as access controls and encryption, to protect your Personal Data against unauthorized access or loss. However, no internet transmission is 100%secure.

9. Data Retention

We retain your Personal Data only as long as necessary for the purposes it was collected.

• Contact/Query Data: Retained for the duration of the interaction and potentially longer if it leads to a contract.
• Cookie Data: Retention periods are detailed in our Cookie Policy.
• Loyalty Program Data: Retained as long as you are an active member. If you close your account, your data will be deleted or anonymized unless required for legal compliance.
• Marketing Consent Data: Retained until you withdraw consent.

10. Your Data Protection Rights

Under the UAE PDPL, you have the right to access, rectify, erase, and restrict the processing of your Personal Data. You also have the right to data portability, to object to processing, and to withdraw consent at any time. You have the right to lodge a complaint with the UAE Data Office if you believe your rights have been infringed.

11. How to Exercise Your Rights

To exercise any of your rights, please contact us at privacy@fortis.world  We will respond within the timeframes required by law, which is typically 30 days.

12. Updates to this Privacy Notice

We may update this Privacy Notice periodically. We will post the updated version on our website and indicate the "Last Updated"date. We encourage you to review this notice regularly