Privacy notice

G.TECH Company Ltd. is headquartered in Riyadh, Saudi Arabia. We are the controller of the personal data described in this notice, which means we decide why and how it is processed.

Inquiry form. Your first and last name, email address, area of interest and message. You may also choose to give your organization, phone number and job title.

Application form. Your first and last name, email address, phone number, practice area, experience level and CV. You may also choose to add a LinkedIn profile and a message. Your CV may contain further personal data, such as your education and employment history.

With each submission we also record your consent, the language and page from which you submitted the form, and the time you started it. We use this information to route your submission and to help detect automated abuse.

Please do not include sensitive personal data, such as health information or religious or political beliefs, in your message or CV. We do not need it to respond to an inquiry or to assess an application.

We use inquiry data to understand your request, respond to it and arrange any follow-up conversations.

We use application data to assess your suitability for roles at GTech, contact you about your application and manage the recruitment process.

We also use submission data to keep a record of our correspondence, to protect our forms against spam and misuse, and to meet our legal obligations. We do not sell personal data, and we do not use it for purposes unrelated to those described in this notice.

We process form data on the basis of your consent, which you give by checking the consent box when you submit a form. Where the PDPL allows personal data to be processed without consent, for example to meet a legal obligation or to serve our legitimate interests, we may also rely on that basis.

You may withdraw your consent at any time by contacting us as described below. Withdrawal does not affect processing carried out before it, and we will stop processing your data for the purpose concerned unless another legal basis applies.

Submissions are received by a form service that runs within GTech’s Google Workspace account. Inquiries and applications are recorded in a Google Sheet, CVs are stored in a Google Drive folder, and an internal GTech mailbox receives a notification of each submission. Access is limited to the GTech staff who handle inquiries and recruitment.

Google acts as our service provider for Google Workspace and processes this data on our behalf under its contractual terms for Workspace customers. We do not disclose your submission to any other party unless the law or a competent authority requires it.

Google Workspace is a global cloud service, so data held in it may be stored or processed on servers located outside Saudi Arabia. The same may apply to the technical data handled by our hosting provider and by Google Fonts, described below. Where personal data is transferred or processed outside the Kingdom, we do so in line with the conditions and safeguards that the PDPL and its regulations set for such transfers.

We keep inquiries for as long as we need them to respond and to follow up on the matter you raised, and then for a limited period as a record of our correspondence.

We keep applications for the duration of the recruitment process. If you are not hired, we may keep your application for a limited period afterward to consider you for other suitable roles, unless you ask us to delete it sooner. If you join GTech, your application becomes part of your employment record.

When data is no longer needed, we delete or anonymize it, unless the law requires us to keep it longer.

Data travels from your browser to our form service over encrypted connections. Within Google Workspace, access is restricted to authorized GTech accounts, and the form service limits repeated submissions to deter automated abuse.

No method of transmission or storage is completely secure, but we apply technical and organizational measures appropriate to the nature of the data. If a breach affects your personal data, we will notify the competent authority and you where the law requires.

Under the PDPL, you have the right to be informed about how your personal data is collected and used; to access the personal data we hold about you; to obtain a copy of it in a clear and readable format; to ask us to correct, complete or update it; and to ask us to destroy it when it is no longer needed. You may also withdraw your consent at any time.

To exercise any of these rights, contact us as described below. We may need to verify your identity before acting on a request, and we will respond within the period the law sets.

If you believe your personal data has been handled unlawfully, you may file a complaint with the competent authority, the Saudi Data and Artificial Intelligence Authority (SDAIA).

This site does not set cookies. It stores a single item in your browser’s local storage: your choice of light or dark theme, so the site remembers it on your next visit. The setting stays on your device, is not sent to us, and can be cleared at any time through your browser settings.

Our hosting provider processes technical information, such as your IP address and browser type, to deliver pages and to protect the site against abuse.

The site loads its typefaces from Google Fonts. When a page loads, your browser connects to Google’s servers to retrieve them, and Google receives your IP address as part of that request.

The site does not embed social media widgets, share buttons or tracking pixels, and it sends nothing to social networks.

Questions about this notice and requests about your personal data can be sent through the inquiry form on our contact page. Select “Other” as your area of interest and mention privacy in your message so it reaches the right person.

We may update this notice as our website, our systems or the law changes. Any update will be published on this page, and the date at the top shows when the notice was last revised.