Privacy Policy
Last Updated: 21 January 2026
Global Business Solutions Co. Ltd. (“GBS”, “we”, “us”, or “our”) respects your privacy and is committed to protecting personal data in accordance with the Saudi Arabian Personal Data Protection Law (PDPL) and its implementing regulations.
This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you visit www.gbs.com.sa (the “Website”) or engage with our services.
For the purposes of applicable data protection laws in the Kingdom of Saudi Arabia, GBS is the Data Controller.
1. Personal Data We Collect
Personal Data You Provide Voluntarily
We may collect personal data that you voluntarily provide, including:
- Full name
- Business email address
- Phone number
- Company name
- Job title or designation
- Information submitted through contact forms, emails, inquiries, or service requests
- Automatically collected data
When you access the website, we may automatically collect:
- IP address
- Browser type, operating system, and device information
- Pages visited, referring URLs, and usage behavior
- Date and time of access
- Sensitive personal data
GBS does not intentionally collect or Process Sensitive Personal Data (as defined under the PDPL), including biometric data, health data, financial information, or national identification numbers, through this website.
If such data is inadvertently received, it will be handled in accordance with applicable legal requirements and securely deleted where appropriate.
2. Purposes of Processing
Personal data is processed for the following lawful purposes:
- Responding to inquiries and communications
- Providing IT, cloud, cybersecurity, SOC, and managed services
- Managing client, partner, and business relationships
- Improving website functionality, performance, and security
- Sending marketing or informational communications where explicit consent has been obtained
- Complying with legal, regulatory, contractual, and governance obligations
3. Legal Basis for Processing
In accordance with the PDPL, GBS processes personal data based on one or more of the following legal grounds:
- Explicit consent provided by the data subject
- Performance of a contract or pre-contractual obligations
- Compliance with legal or regulatory requirements
- Legitimate purposes permitted under the PDPL and its implementing regulations, provided such processing does not conflict with the rights and interests of the data subject
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to such withdrawal.
4. Cookies and Tracking Technologies
The website uses cookies and similar technologies to ensure proper functionality, analyze usage, and enhance user experience.
Non-essential cookies are used only after obtaining user consent through the website’s cookie consent banner, where required by applicable law.
You may manage or disable cookies through your browser settings; however, disabling cookies may affect certain website features.
5. Data Sharing and Disclosure
GBS does not sell or rent personal data.
Personal data may be disclosed only to:
- Authorized GBS personnel on a strict need-to-know basis
- Trusted third-party service providers (e.g., hosting, analytics, CRM, IT support), subject to contractual confidentiality and security obligations
- Governmental or regulatory authorities where required by applicable law
All third parties are contractually bound to process personal data solely for specified purposes and in compliance with applicable data protection laws.
6. Cross-Border Data Transfers
Personal data is primarily processed and stored within the Kingdom of Saudi Arabia.
Where transfer outside the Kingdom is necessary, GBS ensures that:
- Transfers comply with PDPL requirements
- Appropriate safeguards are implemented
- Required approvals are obtained from relevant authorities, where applicable
7. Data Storage and Retention
Personal data is stored using appropriate technical and organizational safeguards.
We retain personal data only for the period necessary to:
- Fulfill the purposes outlined in this Privacy Policy
- Comply with legal, regulatory, or contractual obligations
Once no longer required, personal data is securely deleted or anonymized.
8. Data Subject Rights
Subject to applicable law, you have the right to:
- Be informed about the collection and processing of your personal data
- Access and obtain a copy of your personal data
- Request correction or updating of inaccurate or incomplete data
- Request deletion of personal data, where legally permissible
- Withdraw consent at any time
- Lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA)
To exercise your rights, please contact:
Email: privacy@gbs.com.sa
9. Automated Processing
GBS does not use personal data collected through this website for automated decision-making or profiling that produces legal or significant effects on individuals.
10. Data Security and Breach Notification
GBS implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
In the event of a personal data breach, GBS will take prompt remedial action and notify affected individuals and relevant authorities in accordance with applicable law.
11. Children’s Personal Data
GBS does not knowingly collect or process personal data relating to individuals under the age of 18. Any such data identified will be deleted promptly.
12. Marketing Communications
Marketing communications are sent only where explicit consent has been obtained. You may opt out at any time using the unsubscribe option or by contacting us directly.
13. Policy Updates
This Privacy Policy may be updated periodically. Any changes will be posted on this page with a revised “Last Updated” date.