Gulf Business Solutions Saudi Arabia (hereinafter the “Company”) operates and maintains the website at https://www.gbs-saudi.com (the “Website”). The Company is committed to protecting the personal data and privacy of all users (“Data Subject” or “User”) who access or interact with the Website.
This Privacy Policy is issued in compliance with the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL), issued pursuant to Royal Decree No. M/19 dated 16 September 2021 and amended by Royal Decree No. M/148 dated 27 March 2023, along with the Implementing Regulations issued by the Saudi Data and Artificial Intelligence Authority (SDAIA). The PDPL has been fully enforceable since 14 September 2024.
By accessing the Website, the User acknowledges and agrees to the practices described in this Privacy Policy. This Policy is available in English; an Arabic version is available upon request.
The Company collects personal data only to the extent necessary for the purposes described herein. The following categories of data may be collected:
Sensitive personal data (as defined under PDPL) is not collected through this Website. Where such data is required in the context of a service engagement, it will be collected separately with explicit consent and under a specific data processing framework.
The Company processes User personal data for the following purposes:
Personal data is processed on the basis of the User’s consent or where processing is otherwise permitted under the PDPL (e.g., for contractual necessity or compliance with a legal obligation). Where consent is the basis for processing, the User has the right to withdraw consent at any time.
The Company does not use sensitive personal data for marketing purposes.
Under the PDPL, Data Subjects have the following rights with respect to their personal data:
To exercise any of the above rights, or to submit a complaint, contact the Company using the details in Section 11. The Company will respond within 30 days of receiving the request, as required under the PDPL Implementing Regulations.
If the User is not satisfied with the Company’s response, they may lodge a complaint directly with SDAIA.
The Website uses cookies and similar technologies to improve user experience and gather usage analytics. By continuing to use the Website, the User consents to the placement of cookies as described herein.
Categories of cookies in use:
Users may manage or disable cookies through browser settings. Disabling non-essential cookies does not affect access to the Website’s core functionality.
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Saudi law. When data is no longer required for the original purpose, it is securely destroyed or anonymised. Specific retention periods depend on the nature of the data and applicable legal requirements.
The Company maintains appropriate technical, administrative, and organisational measures to ensure the security and confidentiality of personal data. These measures include:
In the event of a personal data breach that may harm Data Subjects or conflict with their rights, the Company will notify SDAIA within 72 hours of becoming aware of the breach, as required by the Implementing Regulations.
The Company does not sell, lease, or distribute User personal data to third parties without consent, except as permitted or required by applicable law. Data may be shared with:
Any third-party data processors are required to maintain confidentiality and process data only in accordance with the Company’s instructions and applicable Saudi law.
Personal data may be transferred to, stored, or processed outside the Kingdom of Saudi Arabia, including in the United Arab Emirates where Ghobash Group’s parent operations are based. Such transfers are conducted in compliance with the PDPL Data Transfer Regulation and are subject to appropriate safeguards, including SDAIA-approved standard contractual clauses (SCCs) or equivalent mechanisms, to ensure that the level of protection afforded under PDPL is maintained.
The Company ensures that cross-border transfers do not conflict with Saudi Arabia’s national interests and do not compromise Data Subject rights.
The Website may contain links to third-party websites. The Company is not responsible for the privacy practices or content of those websites. Users should review the privacy policies of any external websites they visit.
For questions, to exercise Data Subject rights, or to submit complaints regarding this Privacy Policy, Users may contact:
The Company will acknowledge and respond to all requests within 30 days.
The Company may update this Privacy Policy from time to time to reflect changes in law or business practices. Updates will be posted on the Website with a revised effective date. Continued use of the Website following the posting of changes constitutes acceptance of the updated Policy.
This Privacy Policy is governed by the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and its Implementing Regulations. Regulatory oversight is vested in the Saudi Data and Artificial Intelligence Authority (SDAIA). Any disputes arising from this Policy shall be subject to the jurisdiction of the competent courts in the Kingdom of Saudi Arabia.
Gulf Business Solutions (GBS) (hereinafter the “Company”) which operates and maintains website (https://gbs-saudi.com) is committed to preserving and protecting the personal data of its Customer (collectively referred to as the “User”) while the User is browsing the Company’s website.
When the User visits the website, the Company may collect the following data:
The Company are collecting User’s data for several reasons:
The Company will contact the User by the method they have consented to receive such communication and/or the User may restrict the use of the data collected by the Company as provided for in this Policy.
Obtaining consent from the User to collect and use its personal data by the Company may be made either: a) electronic mail (e-mail); or b) filling up the consent form or answering relevant questions that the User gives its consent to the use and collection of the personal data on the Company website.
If the User does not want the Company to use the User’s data in this way, please either a) tick the relevant box situated on the form on which the Company collects the User’s data; b) unsubscribe from the Company’s electronic communications using the method indicated in the relevant communication; or c) inform the Company at any time by contacting the Company on the details set out below.
Once the User agrees to allow the Company’s website to use cookies, the User also agrees to the Company using the data it collects regarding their online behavior (analyze web traffic, web pages the User spends the most time on, and websites the User visits).
The data collected by the Company using cookies is used to customize the Company’s website to the User’s needs. After the Company uses the data for statistical analysis, the data is completely removed from the Company’s systems.
Please note that cookies don’t allow the Company to gain control of the User’s computer in any way. They are strictly used to monitor which pages the User find useful and which pages they do not, so that the Company can provide a better experience for the User.
If the User wants to disable cookies, they may do so by accessing the settings of their internet browser. Alternatively, the User can set an opt-out-cookie to disable Google Analytics tracking in their browser. This cookie will only block analytics in the browser that the User activates it in and will only work for the Company’s website. If the User deletes cookies in their browser, the User will need to set it again.
The Company takes the security of the User’s data seriously and User’s privacy is a high priority. The Company has internal policies and controls in place to ensure that the User’s data is not lost, accidentally destroyed, misused, or disclosed, and is not accessed except by the Company’s employees in the proper performance of their duties.
The Company is committed to securing User’s data and keeping it confidential and has done everything in its power to prevent data theft, unauthorized access, and disclosure by implementing the relevant technologies and software, which help the Company safeguard all the information that has been collected online.
The Company will not lease, sell, or distribute the User’s personal information to any third parties unless the Company has the User’s permission or has previously informed the User through disclosures or agreements or is legally obligated to do so.
This Policy may be updated from time to time. Any changes will be posted here, so be sure to visit the policy periodically.
If any provision of the Policy is held to be invalid, void, or unenforceable, the remaining provisions shall nevertheless continue in full force and effect.
The laws of the Kingdom of Saudi Arabia shall govern this, Policy. All disputes arising in connection therewith shall be heard only by a court of competent jurisdiction in Riyadh, Kingdom of Saudi Arabia.
Users are requested to contact the Company for any questions, comments, or concerns regarding the Company’s Privacy Policy at +966114199700 and info@gbs-saudi.com
