Effective Date: 27-06-2026

GTCKSA (Global Trading Company for Office and School Supplies) is committed to protecting your privacy and handling your personal data in a safe, lawful, and responsible manner. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our website https://gtcksa.com and our mobile application “GTC School & Office Supplies” (the “App”), available on the Apple App Store.

This Policy is issued in accordance with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations.

1. Who We Are (Data Controller)

GTCKSA is the data controller responsible for your personal data.

• Name: Global Trading Company for Office and School Supplies (GTCKSA)
• Country: Kingdom of Saudi Arabia
• Email: contactus@gtcksa.com
• Phone: +966112864606
• Website: https://gtcksa.com

2. Scope

This Policy applies to personal data we process through our website and our iOS App, including browsing, account registration, placing orders, customer support, marketing, and notifications.

3. Personal Data We Collect

3.1 Data you provide to us

• Full name
• Email address
• Mobile phone number (used for account sign-in and one-time password verification via SMS or WhatsApp)
• Billing and shipping address, including Saudi National Address details
• Order contents, preferences, and product reviews
• Communications you send us (support requests, enquiries)

3.2 Data collected automatically

• Device information (device model, operating system, app version)
• IP address and approximate location derived from it
• App and website usage events (screens viewed, products viewed, items added to cart, searches, checkout and purchase activity)
• A session identifier used to measure app and website performance
• Diagnostic and crash data to keep the App stable
• Cookies and similar technologies on the website (see Section 8)

3.3 Payment data

Card and payment details are entered and processed directly by our third-party payment provider (Tap Payments). We do not collect or store your full card number.

4. How We Use Your Data and Legal Basis

5. Mobile App, Notifications, and Analytics

• Analytics: The App uses Google Analytics to understand how the App is used and to improve it. When you are signed in, analytics events may be linked to your account so we can provide a consistent experience and accurate order measurement.
• Push notifications: If you grant permission, we send notifications for order updates, back-in-stock alerts, and offers. Order and service notifications are part of your purchase; marketing notifications are sent only with your consent and can be turned off at any time in the App or your device settings.
• Marketing platform: We use Klaviyo to manage email and push marketing. You can opt out at any time.
• No cross-app advertising tracking: We do not use your data to track you across other companies’ apps or websites for advertising, and we do not share your data with third-party advertising networks or data brokers for that purpose.

6. Sharing of Your Data

We do not sell or rent your personal data. We share it only with trusted service providers who process it on our behalf and under contract, including:

• Payment provider (Tap Payments)
• Shipping and logistics partners (including OTO for shipment tracking)
• Marketing and notification platforms (Klaviyo; SMS and WhatsApp message providers)
• Analytics provider (Google Analytics)
• Hosting, content-delivery, and security providers

We may also disclose data where required by law or a competent authority in the Kingdom of Saudi Arabia.

7. International Data Transfers

Some of our service providers process data outside the Kingdom of Saudi Arabia. Where this happens, we take the steps required by the PDPL to ensure your data receives an appropriate level of protection.

8. Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience, analyze traffic and performance, and remember your preferences. You can disable cookies through your browser settings, but some website features may not function properly. See our Cookie Policy for details.

9. Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes described in this Policy, including to meet legal, accounting, tax, and warranty obligations. When data is no longer needed, we securely delete or anonymize it.

10. Data Security

• Encryption in transit (SSL/TLS)
• Restricted access to sensitive information
• Continuous monitoring and updates

11. Your Rights Under the PDPL

Subject to the PDPL, you have the right to:

• Be informed about how your personal data is collected and used
• Access your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your data where there is no lawful basis to keep it
• Withdraw your consent to marketing or other consent-based processing
• Request a copy of your data in a readable format

To exercise any of these rights, contact us at contactus@gtcksa.com. You also have the right to lodge a complaint with the competent authority in the Kingdom of Saudi Arabia (the Saudi Data & Artificial Intelligence Authority, SDAIA).

You can delete your account and associated personal data at any time from within the App, or by contacting us at the email above.

12. Children’s Privacy

Our website and App are intended for adults and for business and institutional customers. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or your personal data:

• GTCKSA
• Email: contactus@gtcksa.com
• Phone: +966112864606
• Website: https://gtcksa.com