Privacy Policy
1. Data controller identification
This Privacy Policy governs the processing of personal and corporate data collected by Beauty Roots Trading Company, LLC (Commercial Registration: Riyadh, Saudi Arabia), operating as the designated Data Controller.
2. B2B commercial & professional eligibility clause (mandatory)
ReMedium® medical aesthetic products and regulated medical devices are exclusively supplied and sold to authorized, SFDA-licensed healthcare facilities verified by Beauty Roots Trading Company. These products are not sold to individual consumers or unlicensed entities. Data collected via website quotation forms, inquiries, and professional verification gates is processed strictly to verify institutional eligibility, validate professional status, and fulfill commercial supply agreements. Beauty Roots reserves the absolute right to reject any inquiry, quotation, or procurement request that fails to fulfill regulatory and licensing prerequisites.
3. Categories of data collected
Institutional & contact data: representative full name, official corporate email, phone/WhatsApp number, healthcare facility name, licence category and city submitted via quote requests · Professional self-attestation: digital confirmation logs certifying healthcare-practitioner status prior to accessing gated clinical sections · Technical & analytics data: IP address, browser type, interaction telemetry, and standard essential/analytical cookies · Embedded map services: location interactions via embedded Google Maps for corporate address verification.
4. Legal basis & purpose of processing
To process B2B supply requests, price quotations, and contract negotiations · to authenticate commercial licences and SFDA compliance requirements · to optimize technical performance, secure digital assets, and protect confidential clinical media.
5. Data storage, security & retention
All collected records are stored on secured servers adhering to strict encryption protocols, never shared or sold to external parties, and retained only for the periods necessary to fulfill contractual obligations or statutory regulatory mandates within Saudi Arabia.
6. Data subject rights & inquiries
In accordance with the PDPL, users may request access, rectification, or erasure of their personal data by contacting the Data Compliance Desk at [email protected].
A first version per the site-structure document — finalised after legal review.