Privacy Policy

Important Notice: This Privacy Policy is a draft prepared for compliance readiness and is subject to change based on final legal counsel approval. GearBeat V2 is in its invite-only GCC pilot phase.

1. Data Collection & Sensitive Data Blocklist

We collect only necessary information to process manual reservations and platform onboarding (e.g., name, corporate email, mobile number, and city). Under our strict compliance guidelines, GearBeat does not collect, process, or upload sensitive partner documents (such as Commercial Registrations, VAT certificates, national IDs, or bank screenshots) through public web flows until fully localized KSA storage nodes are verified.

2. Data Residency & Sovereignty

In compliance with the Saudi Personal Data Protection Law (PDPL), all personal identifying information (PII) of Saudi Arabian citizens and residents is designated to be stored locally within the geographical boundaries of the Kingdom of Saudi Arabia. Core staging elements reside temporarily on secure isolated nodes, and any international data transfers are strictly prohibited unless certified under local SDAIA regulatory exemptions.

3. User Rights Under KSA PDPL

Every registered user on GearBeat holds the following legal rights regarding their personal datasets under the PDPL:

• Right to Know: Access details on our exact processing methods and database storage locations.
• Right of Access: Request a full digital copy of all personal datasets registered on our servers.
• Right of Correction: Instantly request amendments or updates to outdated or incorrect profile entries.
• Right of Destruction: Request permanent erasure of all stored personal records from our databases.
• Right to Withdraw Consent: Instantly withdraw previously granted data-processing consents at any time.

4. Payment Gateway & SAMA Readiness

GearBeat does not process raw credit card or automated online transaction credentials directly. All live payment gateway integrations remain subject to SAMA provider licensing, complete regulatory audits, and final operational authorization. Currently, only manual bank-ledger transfer verification options are supported during our GCC pilot rollout.

5. Data Protection Office & Contact

For any privacy inquiries, consent withdrawals, or user rights execution, please contact our designated Data Protection team at: privacy@gearbeat.com