PRIVACY POLICY

1. Introduction

Welcome to GCC Gaming PC ("we," "us," or "our"). We are committed to protecting your privacy and personal data in accordance with the UAE Federal Decree Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL") and other applicable data protection laws in the UAE and Gulf countries.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, make purchases, or interact with our services.

2. Information We Collect

We collect various types of information to provide you with our products and services:

2.1 Personal Information You Provide

When you create an account, place an order, or contact us, we collect:

• Contact Information: Full name, email address, phone number, billing address, shipping address
• Account Information: Username, password, account preferences
• Google Sign-In Data: When you sign in with Google, we receive your name, email address, profile picture, and a unique Google identifier from your Google account
• Payment Information: Credit/debit card details (processed securely through Stripe), billing address
• Order Information: Products purchased, order history, transaction details
• Communication Data: Messages, inquiries, customer service interactions, product reviews
• Identity Verification: Government-issued ID, passport information (when required for high-value transactions or verification purposes)

2.2 Information Collected Automatically

When you visit our website or use our services, we automatically collect:

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, referral URLs
• Location Data: General location based on IP address
• Transaction Data: Payment method used, purchase amount, delivery status

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience:

• Essential Cookies: Required for website functionality, shopping cart, checkout process
• Analytics Cookies: Help us understand how visitors use our website (Google Analytics)
• Marketing Cookies: Used for targeted advertising and retargeting campaigns
• Preference Cookies: Remember your settings and preferences

You can control cookie preferences through your browser settings. However, disabling certain cookies may affect website functionality.

2.4 AI Builder Data

When you use our AI PC Builder, we collect:

• Conversation Data: Messages you send to our AI assistant, including your preferences, budget, use case, and component requirements
• Build Selections: Components you select, compatibility checks performed, and build configurations
• Local Storage Data: Your chat history and build progress are stored locally in your browser (localStorage) and are not transmitted to or stored on our servers

Your AI Builder conversations are processed in real-time and are not permanently stored on our servers. You can clear your local build data at any time by resetting your build session.

2.5 Advertising and Marketing Technologies

We use advertising technologies to measure and optimize our marketing efforts:

Meta Pixel (Facebook Pixel):

A tracking code from Meta Platforms Ireland Limited that collects data about your website interactions for advertising purposes

• Data collected includes: pages visited, products viewed, items added to cart, purchases made, search queries, and interaction events
• Purpose: Measure ad effectiveness, deliver targeted advertising, retarget interested users, and analyze website traffic
• Pixel ID: 1404094501758286
• Data is shared with Meta Platforms for advertising and analytics purposes in accordance with their privacy policy
• You can opt out of Meta Pixel tracking through your Facebook Ad Preferences or by adjusting your cookie settings

Recommendation Engine:

Gorse recommendation engine tracks your browsing behavior, product views, and purchase history to provide personalized product recommendations

• Tracks: Products viewed, items clicked, purchase transactions, and session behavior patterns

3. How We Use Your Information

We process your personal data for the following purposes:

4. Legal Basis for Processing

Under the UAE PDPL, we process your personal data based on the following legal grounds:

• Consent: You have given explicit consent for specific processing activities (e.g., marketing communications)
• Contract Performance: Processing is necessary to fulfill our contractual obligations to you (e.g., order fulfillment)
• Legal Obligation: Processing is required to comply with UAE laws and regulations
• Legitimate Interest: Processing is necessary for our legitimate business interests (e.g., fraud prevention, business analytics) while respecting your rights

5. How We Share Your Information

We do not sell your personal information to third parties. We share your data only in the following circumstances:

5.1 Service Providers

We share information with trusted third-party service providers who assist us in:

• Payment Processing: Stripe (for secure payment transactions)
• Shipping and Logistics: Courier companies and delivery partners
• Cloud Services: Hosting providers for website and database management
• Analytics: Google Analytics and similar tools
• Marketing: Email service providers, advertising platforms
• Customer Support: Help desk and CRM software providers
• AI Services: Google Gemini (for AI-powered PC building recommendations, product content generation, and translation services)
• Recommendation Services: Gorse (for personalized product recommendations based on browsing and purchase history)
• Advertising Platforms: Meta Pixel by Meta Platforms Ireland Limited (for Facebook/Instagram advertising, retargeting, and analytics)
• Authentication Services: Google Sign-In (for secure third-party authentication using your Google account)

All service providers are contractually required to protect your data and use it only for the specified purposes.

5.2 Legal Requirements

We may disclose your information when required by law:

• To comply with court orders, subpoenas, or legal processes
• To respond to requests from UAE government authorities or regulatory bodies
• To protect our rights, property, and safety, or that of others
• To prevent or investigate fraud, security issues, or illegal activities

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you of any such change and ensure continued protection of your data.

5.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the UAE, including:

• United States: For payment processing through Stripe
• European Union: For cloud hosting and analytics services
• Other jurisdictions: Where our service providers are located

When transferring data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by UAE authorities
• Data processing agreements with service providers
• Compliance with cross-border data transfer requirements under UAE PDPL

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

7.1 Security Measures

• Encryption: SSL/TLS encryption for data transmission
• Secure Payment Processing: PCI-DSS compliant payment systems
• Access Controls: Restricted access to personal data on a need-to-know basis
• Regular Security Audits: Periodic assessments and vulnerability testing
• Employee Training: Staff training on data protection and security practices

7.2 Data Breach Notification

In the event of a data breach that may affect your privacy, we will:

• Notify the UAE Data Office immediately as required by law
• Inform affected individuals without undue delay
• Take immediate corrective measures to contain the breach
• Provide information on steps you can take to protect yourself

8. Your Rights Under UAE PDPL

You have the following rights regarding your personal data:

9. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Account Data: Retained for the duration of your active account and 5 years after account closure (as required by UAE financial regulations)
• Transaction Records: Retained for 5 years from the transaction date for accounting and legal compliance purposes
• Marketing Data: Retained until you unsubscribe or withdraw consent
• Support Communications: Retained for 3 years for quality assurance and dispute resolution

After the retention period, we will securely delete or anonymize your data.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will delete such information.

11. Marketing Communications

11.1 Opt-In

We will send you marketing communications only if you have:

• Opted in to receive promotional emails during registration
• Subscribed to our newsletter via the website footer or other sign-up forms
• Provided explicit consent for marketing purposes

11.2 Opt-Out

You can unsubscribe from marketing communications at any time by:

• Clicking the "Unsubscribe" link in any promotional email
• Updating your communication preferences in your account settings
• Contacting us directly at hello@gccgingpc.com

Even if you opt out of marketing, we will still send transactional emails (order confirmations, shipping updates, account notifications).

12. Third-Party Links

Our website may contain links to third-party websites, including:

• Payment processors (Stripe)
• Social media platforms
• Partner websites
• Product manufacturers

We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing any personal information.

13. Stripe Payment Processing

We use Stripe to process credit and debit card payments securely. When you make a purchase:

• Payment information is transmitted directly to Stripe
• We do not store complete credit card numbers on our servers
• Stripe's privacy policy governs their collection and use of your payment data
• Stripe may collect additional information for fraud prevention and compliance purposes

For more information, please review Stripe's Privacy Policy at: https://stripe.com/privacy

13.5 Meta Pixel (Facebook Pixel)

Our website uses Meta Pixel, a web analytics service provided by Meta Platforms Ireland Limited. Through Meta Pixel, we may collect:

• Browser information (type, version, language)
• Device information (device model, operating system)
• Interaction data (pages visited, time spent, links clicked, products viewed, cart additions, purchases)
• Referral URL and exit pages

policy.section13_5.optIn.title

• Adjusting your cookie settings in your browser to block third-party cookies
• Using the Facebook Ad Preferences page: https://www.facebook.com/ads/preferences/
• Disabling custom audiences in your Facebook account settings

For more information about Meta's data practices, please review their Privacy Policy: https://www.facebook.com/privacy/policy

Note: If you disable Meta Pixel, you will still see advertisements, but they may be less relevant to your interests.

14. Cookies and Similar Technologies

14.1 What Are Cookies

Cookies are small text files stored on your device that help us improve your experience and analyze website usage. We also use similar technologies like pixels, web beacons, and local storage.

14.2 Types of Cookies We Use

• Strictly Necessary Cookies: Enable core functionality (shopping cart, checkout)
• Performance Cookies: Collect anonymous data on website usage
• Functionality Cookies: Remember your preferences and settings
• Targeting/Advertising Cookies: Display relevant advertisements based on your interests (includes Meta Pixel for Facebook/Instagram advertising)
• Guest Session Identifiers: Store anonymous session IDs in localStorage to enable guest checkout and track guest user interactions

14.3 Managing Cookies

You can control cookies through your browser settings:

• Google Chrome: Settings > Privacy and Security > Cookies
• Safari: Preferences > Privacy > Cookies and Website Data
• Firefox: Options > Privacy & Security > Cookies
• Microsoft Edge: Settings > Privacy > Cookies

Note: Blocking all cookies may affect website functionality.

15. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our business practices
• Legal or regulatory requirements
• New features or services

When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email (for material changes)
• Display a prominent notice on our website

Your continued use of our services after changes constitutes acceptance of the updated policy.

16. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee compliance with data protection laws:

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• GCC Gaming PC
• Email: hello@gccgamingpc.com
• Phone: +971 54 214 2506
• Address: IFZA Business Park, DDP
  Premises Number 37897 - 001
  Dubai Silicon Oasis
  Dubai, United Arab Emirates
• Website: https://gccgamingpc.com

18. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with:

We encourage you to contact us first so we can address your concerns directly.

19. AI-Powered Services

Our website features AI-powered tools to enhance your shopping experience and our content quality:

19.1 Third-Party AI Processing

We use Google Gemini AI services for multiple purposes:

• AI PC Builder: Your messages, component preferences, and build state are sent to Google's AI services for processing to provide personalized PC recommendations
• Content Generation: Product specifications, brand information, and business details are sent to Google Gemini to generate SEO-optimized product descriptions, FAQs, and marketing content
• Translation Services: Website content and product information may be translated using Google Gemini AI
• We do not use your AI Builder conversations to train AI models
• For more information, please review Google's Privacy Policy at: https://policies.google.com/privacy

19.2 AI Accuracy Disclaimer

While we strive to provide helpful and accurate recommendations, please note:

• AI-generated recommendations are provided for informational and guidance purposes only and may contain errors or inaccuracies
• Component compatibility suggestions, pricing, specifications, and performance estimates should be independently verified before purchase
• We do not guarantee the accuracy, completeness, or suitability of AI-generated recommendations for your specific needs
• AI recommendations do not constitute professional technical advice
• GCC Gaming PC is not liable for purchasing decisions made solely based on AI-generated suggestions
• Our team manually curates product listings and compatibility data, but the AI's interpretation of this data may occasionally be imprecise

19.3 AI Data Handling

Regarding your data in our AI services:

• Chat history and build selections are stored locally in your browser and can be cleared at any time
• Conversations are not linked to your user account unless you explicitly save a build
• We do not retain AI conversation logs on our servers beyond the duration of your active session
• Product and business information sent for content generation is processed in real-time and not stored by Google for training purposes

20. Guest Session Tracking

When you browse our website without logging in or create a guest account for checkout:

• We assign a unique guest session identifier stored in your browser's localStorage
• This session ID is included with every API request to associate your activities (cart items, orders, product views)
• Guest sessions allow you to use features like shopping cart and checkout without creating a full account
• The session ID is anonymous and cannot be used to identify you personally unless you provide personal information during checkout
• You can clear the guest session by clearing your browser's localStorage data

Guest session tracking enables us to provide seamless shopping experiences while respecting your choice to remain anonymous.

21. Google Sign-In Authentication

We offer Google Sign-In as a convenient way to create an account or log in to our website. When you use Google Sign-In:

21.1 Data Collected from Google

When you authenticate using Google Sign-In, we receive the following information from your Google account:

• Your full name (first name and last name)
• Your email address associated with your Google account
• Your Google profile picture URL
• A unique Google identifier (Google ID) used to link your Google account to your account on our platform

We do not receive or store your Google account password. Authentication is handled securely by Google's OAuth 2.0 infrastructure.

21.2 How We Use Google Sign-In Data

• Create your account automatically using your Google profile information
• Log you in securely without requiring a separate password
• Link your Google account to an existing account if you previously registered with the same email address
• Display your name and profile picture within your account on our website
• Verify your email address (Google-authenticated emails are considered verified)

21.3 Account Linking

If you sign in with Google using an email address that is already registered on our platform, we will automatically link your Google account to your existing account. This means:

• Your existing order history, saved addresses, and preferences will be preserved
• You can log in using either Google Sign-In or your original password (if one was set)
• Your Google profile picture will be added to your account if you did not already have one

21.4 Data Sharing with Google

When using Google Sign-In:

• Your authentication request is processed by Google's servers
• Google may collect information about the sign-in event in accordance with their privacy policy
• We do not share your purchase history, browsing data, or other platform activity with Google through Sign-In

For more information about Google's data practices, please review Google's Privacy Policy at: https://policies.google.com/privacy

21.5 Your Control Over Google Sign-In

• You can revoke our access to your Google account at any time through your Google Account settings (Security > Third-party apps with account access)
• Revoking access will not delete your account on our platform, but you will need to set a password to continue logging in
• You can request deletion of your Google ID from our records by contacting us at hello@gccgamingpc.com
• You can choose to create a traditional account with email and password instead of using Google Sign-In