This Privacy Policy describes how Gulf Circle Trading Company (referred to herein as the "Company," "we," "us," or "our") collects, uses, processes, stores, and protects the personal data of individuals who visit or use our website, https://www.gulfcircle.net (the "Website").

We are committed to protecting your privacy in compliance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia.

1. The Data Controller

The Data Controller responsible for the processing of your personal data is:

• Company Name: Gulf Circle Trading Company
• Website: https://www.gulfcircle.net
• Contact for Privacy Matters: [Insert Dedicated Privacy Email, e.g., privacy@gulfcircle.net]
• Address: [Insert Full Company Address in Riyadh, Jeddah, or Khobar]

2. Personal Data We Collect

We collect only the minimum necessary personal data required to achieve the purposes outlined below.

Category of Data	Examples of Data Collected	Method of Collection
Contact Data	Name, email address, phone number, company name.	Direct interaction (Contact Forms, Inquiry Forms).
Correspondence Data	Content of emails, chat transcripts, or other communications.	Direct interaction (Email, Live Chat).
Technical & Usage Data	IP address, browser type, operating system, pages viewed, time spent on the site, referral source.	Indirect/Automatic (Server Logs, Cookies, Analytics Tools).
Commercial Inquiry Data	Products of interest (e.g., FIRE RESISTANT PLYWOOD), project details, quantity required, location (Riyadh, Jeddah, Khobar).	Direct interaction (Quotation Request Forms).

We **do not** intentionally collect Sensitive Data (as defined by PDPL, such as health, genetic, or religious data) through our public Website.

3. Purpose and Legal Basis for Processing

We process your personal data based on the legal grounds permitted under KSA PDPL, primarily Consent and the fulfillment of Contractual and Legal Obligations.

Purpose of Processing	Legal Basis (PDPL)	Personal Data Category Used
Responding to Inquiries	Consent (via form submission).	Contact Data, Correspondence Data, Commercial Inquiry Data.
Providing Quotations/Services	Contractual necessity or Pre-contractual steps.	Contact Data, Commercial Inquiry Data.
Website Operation & Security	Legitimate Interest / Legal Obligation (Security).	Technical & Usage Data.
Analytics & Improvement	Consent (via Cookie banner acceptance).	Technical & Usage Data.
Direct Marketing	Explicit Consent (if you sign up for a newsletter).	Contact Data (Email).

4. How We Collect Data

1. Directly from You: When you fill out a contact form, request a quote, send us an email, or communicate with us directly.
2. Automatically: As you navigate the Website, Technical Data is collected through server logs and technologies like cookies.

5. Cookies and Tracking Technologies

The Website uses "cookies" to enhance your experience. These are small data files placed on your device. We use them for:

• Strictly Necessary: To enable basic website functions.
• Performance/Analytics: To analyze Website usage and improve its structure and content.

By using the Website, you consent to the use of cookies. You can manage your cookie preferences through your browser settings, but disabling essential cookies may impact Website functionality.

6. Disclosure and Transfer of Personal Data

We will **not** sell, rent, or trade your personal data to third parties. We may disclose your data only in the following, limited circumstances:

• To Service Providers: To third parties who perform services on our behalf, such as website hosting, IT support, or analytics providers, strictly for the purposes described above. These parties are contractually obligated to adhere to PDPL-compliant security standards.
• Legal Requirements: If required by law, court order, or governmental authorities in the Kingdom of Saudi Arabia, in compliance with PDPL.
• Business Transfer: In the event of a merger, acquisition, or asset sale, your personal data may be transferred to the new entity.

🌍 Cross-Border Data Transfer

As a general principle, we aim to store and process your data within the Kingdom of Saudi Arabia. If, in limited and necessary circumstances, your personal data must be transferred outside the KSA (e.g., for cloud-based service hosting), we will only do so in strict compliance with the PDPL Data Transfer Regulations and with the necessary approvals from the competent authority (SDAIA).

7. Data Security and Retention

• Security: We implement appropriate technical, organizational, and administrative measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction, in accordance with the PDPL's requirement for adequate security controls.
• Retention: We retain personal data only for as long as necessary to fulfill the purpose for which it was collected, to meet legal or accounting obligations, or as required by KSA law. Once the purpose is fulfilled, the data will be securely destroyed.

8. Your Rights Under the PDPL

Under the Saudi PDPL, individuals have the following rights regarding their personal data held by the Company:

1. Right to be Informed: The right to know the legal basis and purpose for the collection of your data.
2. Right to Access: The right to request a copy of your personal data in a clear and readable format.
3. Right to Correction: The right to request the correction, completion, or updating of your inaccurate or incomplete personal data.
4. Right to Request Destruction: The right to request the destruction of your personal data when it is no longer necessary for the purpose for which it was collected.
5. Right to Withdraw Consent: The right to withdraw your consent to the processing of your personal data at any time, unless required by legal obligation.

9. Exercising Your Rights

To exercise any of the rights listed above, please submit a request to our dedicated privacy contact channel:

• Email: [Insert Dedicated Privacy Email, e.g., privacy@gulfcircle.net]
• Postal Mail: Gulf Circle Trading Company, [Insert Address]

We will verify your identity and respond to all legitimate requests within the timeframe mandated by the PDPL.

10. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal obligations. We will notify you of any material changes by posting the new policy on this page and updating the "Effective Date."