(Internal Commitment Statement – Published Publicly for Transparency)

Last Updated: 28 September 2025

At Gulf Mountain, we are committed to protecting the privacy, integrity, and confidentiality of personal data entrusted to us by our clients, partners, and employees. This Personal Data Protection Policy outlines the principles and practices we follow in handling personal information.

1. Scope

This policy applies to all personal data processed by Gulf Mountain in any format (digital or physical) across all operations.

2. Core Principles

We adhere to the following data protection principles:

  • Lawfulness, fairness, and transparency – data is processed legally, fairly, and openly.
  • Purpose limitation – data is collected for specified purposes only.
  • Data minimization – only necessary data is collected and retained.
  • Accuracy – we ensure data is accurate and up to date.
  • Storage limitation – personal data is not retained longer than necessary.
  • Integrity and confidentiality – data is protected against unauthorized access, loss, or misuse.

3. Data Collection & Use

Personal data is collected only for legitimate business purposes and processed with appropriate consent or legal basis.

4. Data Security Measures

We maintain robust security measures, including but not limited to:

  • Encrypted storage and secure transmission of data.
  • Access controls and role-based permissions.
  • Regular system monitoring and audits.
  • Employee awareness and training programs.

5. Employee Responsibilities

All employees handling personal data must:

  • Follow company procedures on data handling.
  • Report any suspected data breach immediately.
  • Maintain confidentiality at all times.

6. Third-Party Processors

Where third-party vendors process data on our behalf, we ensure they comply with equivalent data protection standards through contracts and due diligence.

7. Data Breach Response

In the event of a personal data breach, Gulf Mountain will:

  • Take immediate steps to contain and assess the breach.
  • Notify relevant authorities and affected individuals when required by law.
  • Document and review the incident to prevent recurrence.

8. Rights of Data Subjects

We respect and facilitate the rights of individuals regarding their personal data, as provided under applicable laws.

9. Compliance & Monitoring

We continuously monitor compliance with this policy and update it as necessary to reflect changes in legal or business requirements.

10. Contact

For any concerns related to personal data protection, please contact:
Email: info@gulfmountain.com.sa
Address: Office# 602, 6th Floor, Twin Towers (B) – Bandariyah – Al Khobar – Saudi Arabia