Privacy Policy

Introduction

Gulf Tech Corporation for Communications and Information Technology Establishment ("Gulf Tech", "we", "us", or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, store, share and protect personal data when you visit our website, use our services, or interact with us in any capacity.

This policy applies to all visitors, users and customers of Gulf Tech's website (gulftech.sa) and all related services, products, mobile applications and platforms operated by Gulf Tech.

Information We Collect

We collect personal information that you voluntarily provide to us, as well as information automatically gathered through your interaction with our services.

Information You Provide Directly

• Contact Information: name, email address, phone number, company name, mailing address and job title
• Account Information: username, password, profile picture and account preferences
• Payment Information: billing address, payment method details and transaction history (processed through PCI-DSS compliant gateways)
• Communication Records: emails, support tickets, chat messages and any correspondence you send to us
• Project Information: any business or technical information you share when requesting a quote or engaging us for a project

Information We Collect Automatically

• Device & Browser Data: IP address, browser type, device type, operating system and language settings
• Usage Data: pages visited, time spent, click paths, referring URLs, search terms and navigation behavior
• Cookies & Tracking: session cookies, preference cookies, analytics cookies (see our Cookie section below)
• Location Data: approximate location derived from your IP address (city/country level only)

How We Use Your Information

We use your personal information for the following legitimate business purposes:

• Service Delivery: to provide, operate and maintain our services, fulfill contracts and deliver products you've purchased
• Customer Support: to respond to inquiries, resolve issues, provide technical support and process refund requests
• Communication: to send service announcements, billing notices, security alerts and important updates
• Marketing (with consent): to send newsletters, promotional offers and product updates — you can unsubscribe at any time
• Improvement: to analyze usage patterns, conduct research and improve our services, website and user experience
• Security: to detect, prevent and respond to fraud, abuse, security incidents and other harmful activity
• Legal Compliance: to comply with applicable laws, regulations, court orders and lawful government requests

Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze traffic and personalize content. Cookies are small data files placed on your device when you visit a website.

Types of Cookies We Use

• Essential Cookies: required for the website to function — these cannot be disabled
• Performance Cookies: help us understand how visitors use our site (Google Analytics, etc.)
• Functional Cookies: remember your preferences and personalize content
• Marketing Cookies: used for advertising and remarketing campaigns (only with your consent)

You can control cookies through your browser settings. However, disabling certain cookies may affect website functionality.

How We Share Your Information

We do not sell, rent or trade your personal information to third parties for marketing purposes. We may share your information only in the following limited circumstances:

• Service Providers: trusted vendors who help us operate our business (hosting, email, payment processing, analytics) — all bound by confidentiality agreements
• Authorized Partners: Microsoft, Google, Kaspersky and other partners when you specifically request services involving their platforms
• Legal Requirements: when required by law, court order, government request or to protect our legal rights
• Business Transfers: in connection with a merger, acquisition or sale of assets (with prior notice to you)
• With Your Consent: any other sharing will be done only with your explicit permission

Data Security

We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure or destruction. These include:

• SSL/TLS encryption for data in transit
• Encrypted database storage for sensitive data at rest
• Regular security audits and vulnerability assessments
• Strict access controls — only authorized personnel can access personal data on a need-to-know basis
• Employee training on data protection and confidentiality
• Incident response procedures for any suspected breach

Your Rights

You have the following rights regarding your personal information, in accordance with Saudi Arabia's Personal Data Protection Law (PDPL) and applicable international regulations:

• Right to Access: request a copy of the personal data we hold about you
• Right to Correction: request that we correct any inaccurate or incomplete information
• Right to Deletion: request deletion of your personal data (subject to legal retention requirements)
• Right to Object: object to processing of your data for marketing purposes
• Right to Data Portability: receive your data in a structured, machine-readable format
• Right to Withdraw Consent: withdraw consent for processing at any time (where applicable)
• Right to Complain: file a complaint with the relevant data protection authority

To exercise any of these rights, please contact us at info@gulftech.sa. We will respond within 30 days.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, including legal, accounting and regulatory obligations:

• Account Data: retained while your account is active and for 2 years after closure
• Transaction Records: retained for 7 years to comply with Saudi tax and accounting laws
• Marketing Lists: retained until you unsubscribe or request deletion
• Website Analytics: aggregated/anonymized data retained indefinitely; personal identifiers retained for 26 months maximum
• Support Records: retained for 3 years for quality and reference purposes

After the applicable retention period, your data will be securely deleted or anonymized.

Children's Privacy

Our services are not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will promptly delete it.

If you believe a child has provided us with personal information, please contact us immediately at info@gulftech.sa.

International Data Transfers

Gulf Tech is based in Saudi Arabia and primarily processes data within the Kingdom. However, some of our service providers and partners may be located in other countries. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities
• Vendor compliance with international standards (ISO 27001, SOC 2)
• Encryption and pseudonymization of data during transfer

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Post a prominent notice on our website
• Email registered users about significant changes
• Obtain renewed consent where legally required

We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or our data practices, please contact our Data Protection team:

• Email: info@gulftech.sa
• Phone: +966 57 086 3778
• WhatsApp: +966 57 086 3778
• Address: Gulf Tech Corporation, Abu Hadriyah 5063, Southern Khobar District, Al Khobar 34622, Eastern Province, Kingdom of Saudi Arabia