Gulf Sweet ("we") protects your personal data in line with the Saudi Personal Data Protection Law (PDPL). This policy explains what we collect, why, and how it is protected.
What we collect
Shop details (name, VAT number, National Address, region), contact details (mobile, email), verification documents (CR certificate, VAT certificate, National Address), and order/payment records. We never store card data — payments are processed by a licensed payment provider.
Why we collect it
To verify shops and open accounts, fulfil orders and invoice through our Odoo ERP in line with ZATCA e-invoicing requirements, and for operational communication (verification codes, order status).
How it is protected
Sensitive fields are encrypted at rest, verification documents are restricted to authorised staff, and all traffic is encrypted in transit.
Your rights
You may access, correct, or request deletion of your data (subject to statutory retention of tax records). Contact: support@gulfsweets.sa
Retention
We keep data for the duration of the business relationship and as required by law; transient operational data (such as verification codes) is purged routinely.