PRIVACY POLICY

1. Introduction

Welcome to GCC Gaming PC ("we," "us," or "our"). We are committed to protecting your privacy and personal data in accordance with the UAE Federal Decree Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL") and other applicable data protection laws in the UAE and Gulf countries.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, make purchases, or interact with our services.

2. Information We Collect

We collect various types of information to provide you with our products and services:

2.1 Personal Information You Provide

When you create an account, place an order, or contact us, we collect:

• Contact Information: Full name, email address, phone number, billing address, shipping address
• Account Information: Username, password, account preferences
• Payment Information: Credit/debit card details (processed securely through Stripe), billing address
• Order Information: Products purchased, order history, transaction details
• Communication Data: Messages, inquiries, customer service interactions, product reviews
• Identity Verification: Government-issued ID, passport information (when required for high-value transactions or verification purposes)

2.2 Information Collected Automatically

When you visit our website or use our services, we automatically collect:

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, referral URLs
• Location Data: General location based on IP address
• Transaction Data: Payment method used, purchase amount, delivery status

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience:

• Essential Cookies: Required for website functionality, shopping cart, checkout process
• Analytics Cookies: Help us understand how visitors use our website (Google Analytics)
• Marketing Cookies: Used for targeted advertising and retargeting campaigns
• Preference Cookies: Remember your settings and preferences

You can control cookie preferences through your browser settings. However, disabling certain cookies may affect website functionality.

3. How We Use Your Information

We process your personal data for the following purposes:

4. Legal Basis for Processing

Under the UAE PDPL, we process your personal data based on the following legal grounds:

• Consent: You have given explicit consent for specific processing activities (e.g., marketing communications)
• Contract Performance: Processing is necessary to fulfill our contractual obligations to you (e.g., order fulfillment)
• Legal Obligation: Processing is required to comply with UAE laws and regulations
• Legitimate Interest: Processing is necessary for our legitimate business interests (e.g., fraud prevention, business analytics) while respecting your rights

5. How We Share Your Information

We do not sell your personal information to third parties. We share your data only in the following circumstances:

5.1 Service Providers

We share information with trusted third-party service providers who assist us in:

• Payment Processing: Stripe (for secure payment transactions)
• Shipping and Logistics: Courier companies and delivery partners
• Cloud Services: Hosting providers for website and database management
• Analytics: Google Analytics and similar tools
• Marketing: Email service providers, advertising platforms
• Customer Support: Help desk and CRM software providers

All service providers are contractually required to protect your data and use it only for the specified purposes.

5.2 Legal Requirements

We may disclose your information when required by law:

• To comply with court orders, subpoenas, or legal processes
• To respond to requests from UAE government authorities or regulatory bodies
• To protect our rights, property, and safety, or that of others
• To prevent or investigate fraud, security issues, or illegal activities

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you of any such change and ensure continued protection of your data.

5.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the UAE, including:

• United States: For payment processing through Stripe
• European Union: For cloud hosting and analytics services
• Other jurisdictions: Where our service providers are located

When transferring data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by UAE authorities
• Data processing agreements with service providers
• Compliance with cross-border data transfer requirements under UAE PDPL

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

7.1 Security Measures

• Encryption: SSL/TLS encryption for data transmission
• Secure Payment Processing: PCI-DSS compliant payment systems
• Access Controls: Restricted access to personal data on a need-to-know basis
• Regular Security Audits: Periodic assessments and vulnerability testing
• Employee Training: Staff training on data protection and security practices

7.2 Data Breach Notification

In the event of a data breach that may affect your privacy, we will:

• Notify the UAE Data Office immediately as required by law
• Inform affected individuals without undue delay
• Take immediate corrective measures to contain the breach
• Provide information on steps you can take to protect yourself

8. Your Rights Under UAE PDPL

You have the following rights regarding your personal data:

9. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Account Data: Retained for the duration of your active account and 5 years after account closure (as required by UAE financial regulations)
• Transaction Records: Retained for 5 years from the transaction date for accounting and legal compliance purposes
• Marketing Data: Retained until you unsubscribe or withdraw consent
• Support Communications: Retained for 3 years for quality assurance and dispute resolution

After the retention period, we will securely delete or anonymize your data.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will delete such information.

11. Marketing Communications

11.1 Opt-In

We will send you marketing communications only if you have:

• Opted in to receive promotional emails during registration
• Subscribed to our newsletter
• Provided explicit consent for marketing purposes

11.2 Opt-Out

You can unsubscribe from marketing communications at any time by:

• Clicking the "Unsubscribe" link in any promotional email
• Updating your communication preferences in your account settings
• Contacting us directly at hello@gccgamingpc.com

Even if you opt out of marketing, we will still send transactional emails (order confirmations, shipping updates, account notifications).

12. Third-Party Links

Our website may contain links to third-party websites, including:

• Payment processors (Stripe)
• Social media platforms
• Partner websites
• Product manufacturers

We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing any personal information.

13. Stripe Payment Processing

We use Stripe to process credit and debit card payments securely. When you make a purchase:

• Payment information is transmitted directly to Stripe
• We do not store complete credit card numbers on our servers
• Stripe's privacy policy governs their collection and use of your payment data
• Stripe may collect additional information for fraud prevention and compliance purposes

For more information, please review Stripe's Privacy Policy at: https://stripe.com/privacy

14. Cookies Policy

14.1 What Are Cookies

Cookies are small text files stored on your device that help us improve your experience and analyze website usage.

14.2 Types of Cookies We Use

• Strictly Necessary Cookies: Enable core functionality (shopping cart, checkout)
• Performance Cookies: Collect anonymous data on website usage
• Functionality Cookies: Remember your preferences and settings
• Targeting Cookies: Display relevant advertisements based on your interests

14.3 Managing Cookies

You can control cookies through your browser settings:

• Google Chrome: Settings > Privacy and Security > Cookies
• Safari: Preferences > Privacy > Cookies and Website Data
• Firefox: Options > Privacy & Security > Cookies
• Microsoft Edge: Settings > Privacy > Cookies

Note: Blocking all cookies may affect website functionality.

15. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our business practices
• Legal or regulatory requirements
• New features or services

When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email (for material changes)
• Display a prominent notice on our website

Your continued use of our services after changes constitutes acceptance of the updated policy.

16. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee compliance with data protection laws:

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• GCC Gaming PC
• Email: hello@gccgamingpc.com
• Phone: +971 54 214 2506
• Address: Dubai, United Arab Emirates
• Website: https://gccgamingpc.com

18. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with:

We encourage you to contact us first so we can address your concerns directly.