Last Revised: December 15, 2024

Privacy Policy

Effective Date: 12/07/2026

 

Welcome to GulfPack. We are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, disclose, and store your data when you interact with our website www.gulfpack.com.sa.

By accessing or using our Site, you consent to the terms outlined in this Privacy Policy. If you do not agree with these terms, please refrain from using the Site.

 

1. Introduction

At GulfPack, we prioritize your privacy and are committed to being transparent about how your Personal Data is managed. This Privacy Policy reflects our commitment to complying with the Saudi Personal Data Protection Law (PDPL), its Implementing Regulations, and applicable international data protection laws, including the General Data Protection Regulation (GDPR), where applicable.

This Privacy Policy explains:

  1. What Personal Data we collect.
  2. How and why we process your Personal Data.
  3. The legal bases for processing your Personal Data.
  4. Your rights regarding your Personal Data.
  5. How cookies and tracking technologies are used on our Site.

 

2. Scope of the Policy

This Privacy Policy applies to:

  1. Visitors to our Site.
  2. Individuals who interact with us through online forms, email inquiries, or other communication channels.

This Privacy Policy does not apply to third-party websites or services linked to our Site. Please review the respective privacy policies of those third parties for information about their privacy practices.

 

3. Information We Collect

We collect the following types of Personal Data, depending on how you interact with our Site.

3.1 Personal Data You Provide

You may voluntarily provide Personal Data, including but not limited to:

  1. Full name
  2. Email address
  3. Phone number
  4. Job title or role
  5. Company or organization
  6. Information provided through contact forms, feedback, or inquiries

3.2 Automatically Collected Data

When you access our Site, we automatically collect technical and usage information, such as:

  1. IP address
  2. Browser type and version
  3. Operating system
  4. Referring URLs
  5. Time zone settings and language preferences
  6. Pages viewed and time spent on the Site

3.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to collect information about your interactions with our Site. These include:

  1. Browser cookies
  2. Web beacons
  3. Session and persistent cookies

For a detailed explanation, please refer to Section 8: Cookie Policy.

 

4. Legal Basis for Data Processing

For Users in Saudi Arabia

We collect and use your Personal Data in accordance with the Personal Data Protection Law (PDPL), its Implementing Regulations, and any subsequent rules or regulations issued by the Saudi Data & AI Authority (SDAIA) or any other competent authority.

Depending on the purpose of the processing activity (see Section 5 below), the legal basis for processing your Personal Data may include:

  1. Consent – Your explicit approval for the collection and processing of your Personal Data.
  2. Legitimate Interest – Processing necessary to improve our Site and services.

For Users in the European Economic Area (EEA)

Where the GDPR applies, we process your Personal Data based on one or more of the following legal bases:

  1. Consent – When you voluntarily provide your Personal Data or accept cookies.
  2. Performance of a Contract – Where processing is necessary to fulfil your requests.
  3. Legitimate Interest – For analytics, security, and operational efficiency.
  4. Legal Obligation – To comply with applicable legal requirements.

 

5. Purpose of Data Collection

We use the collected Personal Data for the following purposes:

5.1 Service Delivery

  • Responding to your inquiries and requests.
  • Providing access to Site features.

5.2 Website Optimization

  • Monitoring and analysing Site performance.
  • Personalizing your user experience.

5.3 Compliance and Security

  • Ensuring compliance with applicable laws and regulations.
  • Detecting and preventing fraud or unauthorized access.

5.4 Communication

  • Sending updates about Site improvements or changes to this Privacy Policy.
  • Responding to feedback and improving user satisfaction.
6. Data sharing

We do not sell or rent your Personal Data. However, we may share your Personal Data with our holding company, subsidiaries, and affiliated companies where necessary to provide our products or services. These entities may also process your Personal Data on behalf of GulfPack. We may also share your Personal Data in the following circumstances:

6.1 Service Providers

We partner with trusted third-party service providers for:

  1. Website hosting and maintenance.
  2. Analytics services (e.g., Analytics service providers.).

6.2 Legal and Regulatory Requirements

We may disclose your Personal Data where required to comply with legal obligations or respond to valid requests from governmental authorities.

6.3 Business Transactions

In the event of a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred to the relevant successor entity.

 

7. International Data Transfers

Your Personal Data may be transferred to and processed in countries outside your country of residence where necessary to provide our services or operate our business.

Where Personal Data is transferred outside the Kingdom of Saudi Arabia, GulfPack will ensure that such transfers comply with the PDPL and its Implementing Regulations, including the implementation of appropriate safeguards where required.

Where the GDPR applies, transfers outside the European Economic Area (EEA) will be protected through:

  • European Commission adequacy decisions; or
  • Standard Contractual Clauses (SCCs) or other approved transfer mechanisms.
8. Cookie Policy

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help us provide a better user experience by:

  1. Storing user preferences (such as language settings).
  2. Analysing user behaviour to improve Site functionality.

8.2 Types of Cookies We Use

Essential Cookies

  1. Necessary for the operation of our Site.
  2. Example: Session cookies for login authentication.

Performance Cookies

  1. Collect anonymized data for Site optimization.
  2. Examples: Page load times and traffic sources.

Functional Cookies

  1. Remember your preferences to enhance your user experience.
  2. Examples: Language selection and region settings.

Analytics and Tracking Cookies

  1. Track user behaviour to measure Site performance.
  2. Example: Google Analytics cookies.

8.3 How to Manage Cookies

Where required by applicable law, we will obtain your consent before placing non-essential cookies on your device.

You may also manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Site.

 

9. Data Retention

We retain Personal Data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy.

Retention Periods:

  1. Contact form submissions: Retained for two years.
  2. Analytics data: Retained for 26 months.
  3. Server logs: Retained for 12 months.

After the applicable retention period, Personal Data is securely deleted or anonymized.


10. Data Security

We implement appropriate technical and organizational measures to protect your Personal Data, including:

  • Encryption of sensitive information where appropriate.
  • Secure servers and network firewalls.
  • Access controls and role-based permissions.
  • Regular security assessments and vulnerability testing.
  • Employee awareness training and confidentiality measures.

While we take reasonable steps to protect your Personal Data, no method of transmission over the internet or electronic storage is completely secure.


11. Your Privacy Rights

Depending on your location, you may have specific rights regarding your Personal Data.

For Users in Saudi Arabia (PDPL):

  • Access your Personal Data.
  • Request correction of inaccurate or incomplete Personal Data.
  • Request restriction of processing under certain conditions.
  • Request the destruction of your Personal Data, unless statutory or judicial requirements require otherwise.
  • Withdraw your consent where GulfPack relies on your consent as the legal basis for processing, without affecting the lawfulness of processing carried out before the withdrawal.

For Users in the European Union (GDPR):

  • Access your Personal Data.
  • Request rectification of inaccurate Personal Data.
  • Request erasure of your Personal Data (“right to be forgotten”).
  • Request data portability.
  • Object to certain types of processing, including direct marketing.

 

12. Managing Your Preferences

12.1 Communication Preferences

You may opt out of receiving marketing communications by using the “unsubscribe” link included in our emails or by contacting us directly.

12.2 Cookie Preferences

You can update your cookie preferences through your browser settings.

 

13. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the content or privacy practices of those websites. Please review their privacy policies before providing any Personal Data.

 

14. Children’s Privacy

Our Site is intended for business users and is not directed toward children. We do not knowingly collect Personal Data from children. If we become aware that we have collected Personal Data relating to a child without appropriate authorization, we will take reasonable steps to delete such information.

15. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any updates will be published on this page with a revised Effective Date.

 

16. Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us at:

GulfPack

Email: enquiry@gulfpack.com.sa

 

Last Updated:12/07/2026

 

AR