1. Introduction and Data Controller

This Privacy Policy (the “Policy”) sets out the basis on which GT&C Group (FZE) (referred to herein as “GT&C Group,” “We,” “Us,” or “Our”), operating the service brand GTC Digital, collects, processes, and protects the personal data of users (“You” or “Your”) accessing our website [www.gtc-digital.com]

By using our services, you consent to the collection and processing of your personal data as described in this Policy.

Data Controller:

Entity Name: GT&C Group (FZE)

Address: Block B-B31-084, Sharjah Research Technology and Innovation Park (SRTIP Free Zone), Sharjah, UAE

License No. 6134

Contact for Data Privacy: office@gtc-digital.com

2. Legal Framework and Governing Law

This Policy is primarily governed by the laws of the United Arab Emirates (UAE), including the Federal Decree-Law No. 45/2021 on Personal Data Protection (PDPL).

3. Personal Data Collection

We collect the following categories of personal data:

Data You Provide Directly (Contact Data): Information submitted via our contact form to request information or services, including Name, Email Address, and details about Your inquiry.

Usage Data (Technical Data / Server Logs): Information automatically collected by our web server to ensure the service stability, including IP Address, browser type, and time of access.

Purpose of Processing,Legal Basis (General International Standard),Retention Period

Contract Initiation/Inquiry (Responding to inquiries),Necessary for responding to your request prior to entering into a contract.,6 months after the last inquiry if no contract is signed.

Site Security and Maintenance (Ensuring accessibility),Our legitimate interest in maintaining a secure and functional website.,Up to 30 days for temporary server logs.

4. Purpose of Processing and Retention

We process Your data for the following specific, legitimate purposes:

| Purpose of Processing | Legal Basis (General International Standard) | Retention Period 

| Contract Initiation/Inquiry (Responding to inquiries) | Necessary for responding to your request prior to entering into a contract. | 6 months after the last inquiry if no contract is signed. |

| Site Security and Maintenance (Ensuring accessibility) | Our legitimate interest in maintaining a secure and functional website. | Up to 30 days for temporary server logs. |

5. Disclosure of Data to Third Parties

We do not share your personal data with third parties unless required to do so by law. We may share data with our *Web Hosting Provider* solely for the purpose of maintaining website operation and security.

6. International Data Transfer

Your data will be stored and processed within the United Arab Emirates. By submitting Your data, You acknowledge and consent to this transfer. We commit to implementing security measures to ensure that Your data is processed securely in accordance with this Policy and the PDPL.

7. Your Data Protection Rights (PDPL and General International Standards)

Under the PDPL and general international data protection principles, You have the right to:

Right to Obtain Information: Request information regarding the processing of Your personal data.

Right to Request Correction: Request correction of inaccurate or incomplete data.

Right to Withdraw Consent: Withdraw any consent previously given for processing.

Right to Deletion: Request the deletion of Your personal data in certain circumstances.

To exercise any of these rights, please contact us at office@gtc-digital.com.

8. Cookies and Tracking Technologies

We use Strictly Necessary Cookies that are essential for the basic function of the website (e.g., handling the contact form submission). We do not use third-party tracking or analytical cookies. You can manage cookies through Your browser settings.

9. Changes to this Policy

We may update this Policy periodically. Any changes will be posted on this page with an updated “Effective Date.”