PRIVACY POLICY

1. Introduction

Welcome to GCC Gaming PC ("we," "us," or "our"). We are committed to protecting your privacy and personal data in accordance with the UAE Federal Decree Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL") and other applicable data protection laws in the UAE and Gulf countries.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, make purchases, or interact with our services.

2. Information We Collect

We collect various types of information to provide you with our products and services:

2.1 Personal Information You Provide

When you create an account, place an order, or contact us, we collect:

• Contact Information: Full name, email address, phone number, billing address, shipping address
• Account Information: Username, password, account preferences
• Payment Information: Credit/debit card details (processed securely through Stripe), billing address
• Order Information: Products purchased, order history, transaction details
• Communication Data: Messages, inquiries, customer service interactions, product reviews
• Identity Verification: Government-issued ID, passport information (when required for high-value transactions or verification purposes)

2.2 Information Collected Automatically

When you visit our website or use our services, we automatically collect:

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, referral URLs
• Location Data: General location based on IP address
• Transaction Data: Payment method used, purchase amount, delivery status

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience:

• Essential Cookies: Required for website functionality, shopping cart, checkout process
• Analytics Cookies: Help us understand how visitors use our website (Google Analytics)
• Marketing Cookies: Used for targeted advertising and retargeting campaigns
• Preference Cookies: Remember your settings and preferences

You can control cookie preferences through your browser settings. However, disabling certain cookies may affect website functionality.

2.4 AI Builder Data

When you use our AI PC Builder, we collect:

• Conversation Data: Messages you send to our AI assistant, including your preferences, budget, use case, and component requirements
• Build Selections: Components you select, compatibility checks performed, and build configurations
• Local Storage Data: Your chat history and build progress are stored locally in your browser (localStorage) and are not transmitted to or stored on our servers

Your AI Builder conversations are processed in real-time and are not permanently stored on our servers. You can clear your local build data at any time by resetting your build session.

3. How We Use Your Information

We process your personal data for the following purposes:

4. Legal Basis for Processing

Under the UAE PDPL, we process your personal data based on the following legal grounds:

• Consent: You have given explicit consent for specific processing activities (e.g., marketing communications)
• Contract Performance: Processing is necessary to fulfill our contractual obligations to you (e.g., order fulfillment)
• Legal Obligation: Processing is required to comply with UAE laws and regulations
• Legitimate Interest: Processing is necessary for our legitimate business interests (e.g., fraud prevention, business analytics) while respecting your rights

5. How We Share Your Information

We do not sell your personal information to third parties. We share your data only in the following circumstances:

5.1 Service Providers

We share information with trusted third-party service providers who assist us in:

• Payment Processing: Stripe (for secure payment transactions)
• Shipping and Logistics: Courier companies and delivery partners
• Cloud Services: Hosting providers for website and database management
• Analytics: Google Analytics and similar tools
• Marketing: Email service providers, advertising platforms
• Customer Support: Help desk and CRM software providers
• AI Services: Google Gemini (for AI-powered PC building recommendations, product content generation, and translation services)

All service providers are contractually required to protect your data and use it only for the specified purposes.

5.2 Legal Requirements

We may disclose your information when required by law:

• To comply with court orders, subpoenas, or legal processes
• To respond to requests from UAE government authorities or regulatory bodies
• To protect our rights, property, and safety, or that of others
• To prevent or investigate fraud, security issues, or illegal activities

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you of any such change and ensure continued protection of your data.

5.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the UAE, including:

• United States: For payment processing through Stripe
• European Union: For cloud hosting and analytics services
• Other jurisdictions: Where our service providers are located

When transferring data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by UAE authorities
• Data processing agreements with service providers
• Compliance with cross-border data transfer requirements under UAE PDPL

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

7.1 Security Measures

• Encryption: SSL/TLS encryption for data transmission
• Secure Payment Processing: PCI-DSS compliant payment systems
• Access Controls: Restricted access to personal data on a need-to-know basis
• Regular Security Audits: Periodic assessments and vulnerability testing
• Employee Training: Staff training on data protection and security practices

7.2 Data Breach Notification

In the event of a data breach that may affect your privacy, we will:

• Notify the UAE Data Office immediately as required by law
• Inform affected individuals without undue delay
• Take immediate corrective measures to contain the breach
• Provide information on steps you can take to protect yourself

8. Your Rights Under UAE PDPL

You have the following rights regarding your personal data:

9. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Account Data: Retained for the duration of your active account and 5 years after account closure (as required by UAE financial regulations)
• Transaction Records: Retained for 5 years from the transaction date for accounting and legal compliance purposes
• Marketing Data: Retained until you unsubscribe or withdraw consent
• Support Communications: Retained for 3 years for quality assurance and dispute resolution

After the retention period, we will securely delete or anonymize your data.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will delete such information.

11. Marketing Communications

11.1 Opt-In

We will send you marketing communications only if you have:

• Opted in to receive promotional emails during registration
• Subscribed to our newsletter
• Provided explicit consent for marketing purposes

11.2 Opt-Out

You can unsubscribe from marketing communications at any time by:

• Clicking the "Unsubscribe" link in any promotional email
• Updating your communication preferences in your account settings
• Contacting us directly at hello@gccgingpc.com

Even if you opt out of marketing, we will still send transactional emails (order confirmations, shipping updates, account notifications).

12. Third-Party Links

Our website may contain links to third-party websites, including:

• Payment processors (Stripe)
• Social media platforms
• Partner websites
• Product manufacturers

We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing any personal information.

13. Stripe Payment Processing

We use Stripe to process credit and debit card payments securely. When you make a purchase:

• Payment information is transmitted directly to Stripe
• We do not store complete credit card numbers on our servers
• Stripe's privacy policy governs their collection and use of your payment data
• Stripe may collect additional information for fraud prevention and compliance purposes

For more information, please review Stripe's Privacy Policy at: https://stripe.com/privacy

14. Cookies Policy

14.1 What Are Cookies

Cookies are small text files stored on your device that help us improve your experience and analyze website usage.

14.2 Types of Cookies We Use

• Strictly Necessary Cookies: Enable core functionality (shopping cart, checkout)
• Performance Cookies: Collect anonymous data on website usage
• Functionality Cookies: Remember your preferences and settings
• Targeting Cookies: Display relevant advertisements based on your interests

14.3 Managing Cookies

You can control cookies through your browser settings:

• Google Chrome: Settings > Privacy and Security > Cookies
• Safari: Preferences > Privacy > Cookies and Website Data
• Firefox: Options > Privacy & Security > Cookies
• Microsoft Edge: Settings > Privacy > Cookies

Note: Blocking all cookies may affect website functionality.

15. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our business practices
• Legal or regulatory requirements
• New features or services

When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email (for material changes)
• Display a prominent notice on our website

Your continued use of our services after changes constitutes acceptance of the updated policy.

16. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee compliance with data protection laws:

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• GCC Gaming PC
• Email: hello@gccgamingpc.com
• Phone: +971 54 214 2506
• Address: Dubai, United Arab Emirates
• Website: https://gccgamingpc.com

18. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with:

We encourage you to contact us first so we can address your concerns directly.

19. AI-Powered PC Builder

Our website features an AI-powered PC Builder that uses artificial intelligence to help you select and configure gaming PC components. Please be aware of the following:

19.1 Third-Party AI Processing

Our AI PC Builder is powered by Google Gemini. When you use this feature:

• Your messages, component preferences, and build state are sent to Google's AI services for processing
• Google processes this data in accordance with their own privacy policies and data handling practices
• We do not use your AI Builder conversations to train AI models
• For more information, please review Google's Privacy Policy at: https://policies.google.com/privacy

19.2 AI Accuracy Disclaimer

While we strive to provide helpful and accurate recommendations, please note:

• AI-generated recommendations are provided for informational and guidance purposes only and may contain errors or inaccuracies
• Component compatibility suggestions, pricing, specifications, and performance estimates should be independently verified before purchase
• We do not guarantee the accuracy, completeness, or suitability of AI-generated recommendations for your specific needs
• AI recommendations do not constitute professional technical advice
• GCC Gaming PC is not liable for purchasing decisions made solely based on AI-generated suggestions
• Our team manually curates product listings and compatibility data, but the AI's interpretation of this data may occasionally be imprecise

19.3 AI Data Handling

Regarding your data in the AI PC Builder:

• Chat history and build selections are stored locally in your browser and can be cleared at any time
• Conversations are not linked to your user account unless you explicitly save a build
• We do not retain AI conversation logs on our servers beyond the duration of your active session
• You have the right to request deletion of any saved build data associated with your account