Privacy Policy & Personal Data Notice
Gastrona Company is the controller of the information you provide through this website. CR National Number: 7052676694. For personal-data enquiries, contact sales@gastrona.sa or +966 57 005 0025.
Information and purposes
The quotation form collects your name, mobile number, email, request type, title and details. Company or hotel name and attachments are optional. We collect only data necessary for the relevant purpose. We use RFQ and contact data only to handle your enquiry, prepare a quotation, manage the resulting commercial relationship and meet applicable legal obligations. Do not include banking details, identity documents or unnecessary personal data about other people.
For accounts and purchases, account and order details and billing and delivery addresses are processed to provide the requested service, fulfil the transaction and meet associated legal obligations. Required fields are marked; without them, the requested service may not be completed.
Consent and communications
Submitting an RFQ or contact form, creating an account or placing an order does not subscribe you to marketing. Newsletter or promotional subscriptions require separate voluntary consent. You can withdraw consent-based processing through the email above. This does not stop necessary communications about your request or processing required by law.
Your rights and privacy requests
Subject to the Saudi Personal Data Protection Law and applicable exceptions, you may request information about processing, access to your data, a clear copy, correction or completion, and destruction. Send your request with the subject “Privacy request”. Proportionate identity verification may be needed to protect your information.
You may complain about personal-data processing to the Saudi Data and Artificial Intelligence Authority through the National Data Governance Platform.
Retention and protection
We retain personal data only while necessary for the stated purpose or an applicable legal or record-retention requirement. When retention is no longer justified, we securely destroy or appropriately anonymize the data. We do not apply an unsupported fixed retention period. GASTRONA management is accountable for privacy requests submitted to sales@gastrona.sa. An HTTPS connection does not mean all security controls have been independently certified or audited.
Hosting and processing outside Saudi Arabia
We use Odoo.sh. The project region is Middle East; Odoo identifies its location as Dammam on Google Cloud. Odoo discloses backups for this region in France, the Netherlands and Canada using Google and OVH, and possible staff access from other countries. Processing is therefore not limited to Saudi Arabia. See Odoo’s processing and service-provider details.
Cookies and external services
The website uses Odoo functions for accounts, sessions, cart and language. The official verification seal displays content from the Saudi Business Center. These providers have their own relevant privacy and service terms. Visiting the website does not constitute marketing consent.