Privacy Policy

 

Welcome to the website of Gulf Foundation Laboratories (GFC Laboratories). We are committed to protecting the privacy of our website visitors and clients and to maintaining the confidentiality and security of their personal data. We process personal data in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law.

This Privacy Policy applies to personal data collected through our website, contact and inquiry forms, and other electronic channels associated with our services.

1. Personal Data We May Collect

We may collect certain personal data that users voluntarily provide to us, including:

• Name.

• Phone number.

• Email address.

• Company or organization name.

• Inquiry or service request details.

• Any other information that the user chooses to provide through our contact forms.

We may also automatically collect certain technical information when you visit our website, such as your IP address, device and browser type, operating system, pages visited, and the date and time of your visit, for website operation, security, and performance improvement purposes.

2. Purposes of Collecting and Using Personal Data

We may use the personal data collected for legitimate and necessary purposes, including:

• Responding to inquiries and contact requests.

• Providing information about our services.

• Communicating with customers and parties interested in our services.

• Preparing service quotations or proposals when required.

• Improving our website and user experience.

• Protecting our website and systems against unauthorized use and security risks.

• Complying with applicable legal and regulatory obligations where required.

We do not use personal data for purposes unrelated to the purpose for which it was collected except where permitted by applicable laws or where the necessary legal requirements have been fulfilled.

3. How We Collect Personal Data

Personal data may be collected through the methods available on our website, including contact and inquiry forms, or when users communicate with us directly.

Certain technical information may also be collected automatically through website technologies and cookies, depending on the user’s settings and the tools implemented on the website.

4. Cookies

Our website may use cookies and similar technologies to help operate the website, improve its performance, and understand how visitors use our website.

Users may control or disable cookies through their browser settings. However, disabling certain cookies may affect some website functionalities.

5. Sharing and Disclosure of Personal Data

We do not sell or rent users’ personal data.

We may share personal data, where necessary, with service providers or parties that assist us in operating our website or providing our services, limited to what is necessary to fulfill the purpose for which the data was collected and subject to applicable legal requirements.

We may also disclose personal data where required by law, pursuant to requests from competent authorities, or where necessary for legitimate legal or security purposes.

6. Data Security

We implement appropriate organizational, administrative, and technical measures designed to protect personal data against loss, unauthorized access, misuse, alteration, disclosure, or unlawful processing, taking into account the nature of the data and the risks associated with its processing.

However, no method of transmitting or storing information over the Internet can be guaranteed to be completely secure. Users are therefore encouraged to take appropriate measures to protect their information.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or for the period required by applicable laws, regulations, contractual obligations, or regulatory requirements.

When personal data is no longer required, it will be handled or securely disposed of in accordance with applicable legal and regulatory requirements.

8. Data Subject Rights

Under the applicable laws and regulations of the Kingdom of Saudi Arabia, data subjects may have certain rights, including:

• The right to be informed about the legal basis and purposes of collecting and processing their personal data.

• The right to access their personal data, subject to applicable legal requirements.

• The right to request correction, completion, or updating of their personal data.

• The right to request deletion of their personal data where permitted by law.

• Any other rights provided under the Personal Data Protection Law and its related regulations.

Data subjects may exercise their rights by contacting us through the contact details available on our website. Requests will be handled in accordance with applicable laws and procedures.

9. Required and Optional Data

Certain personal data may be necessary for us to respond to an inquiry or provide a particular service. Failure to provide the required information may prevent us from processing the request or communicating with the user.

Other information that is not necessary for the relevant purpose may be optional.

10. External Links

Our website may contain links to third-party websites or platforms. We are not responsible for the privacy practices or content of such third-party websites. We encourage users to review their privacy policies before providing personal data through those websites.

11. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, applicable legal requirements, or our privacy practices.

Any updates will be published on this page together with the applicable “Last Updated” date.

12. Contact Us

For questions or requests relating to this Privacy Policy or the processing of personal data, you may contact Gulf Foundation Laboratories (GFC Laboratories) through the contact channels available on the Contact Us page of our website.

Website: https://gfc-haf.com/

Company Location: Al-Hofuf, Al-Ahsa Governorate, Kingdom of Saudi Arabia.

We are committed to handling data subject requests in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia.