How We Protect Your Data

Full transparency in how we collect, use, and protect your personal data on Global Sounds.

Last updated: 2026-05-05

Our commitment to you

Your data is yours. We collect only what's needed to provide the service, encrypt everything, and never sell your data to third parties. We comply with Saudi PDPL.

Table of Contents

1.Data We Collect
2.How We Use Your Data
3.Who We Share Your Data With
4.How We Protect Your Data
5.Your Rights Under PDPL
6.Data Retention Period
7.Children's Data
8.Policy Updates
9.Contact Us

1.Data We Collect

1.1Basic data: name, phone, email, national ID (for verification only).
1.2Transaction data: order history, purchased products, amounts paid, payment methods.
1.3Technical data: IP address, browser type, OS, visited pages, session time (for security and analytics).
1.4Location data: city, region (for relevant search and nearby installation services).
1.5Communication data: copies of in-platform chats (for fraud protection and dispute resolution).
1.6Optional data: profile picture, user preferences, ratings.

2.How We Use Your Data

2.1Providing core service: account creation, executing transactions, buyer-seller communication.
2.2Identity verification: protecting the platform and users from fraud.
2.3Service improvement: analyzing usage to develop new features (aggregated and anonymized).
2.4Communicating with you: order notifications, service updates, support messages.
2.5Marketing (opt-in only): if you agree, we send offers and updates. Unsubscribe anytime.
2.6Legal compliance: responding to authorities' requests per Saudi laws.

3.Who We Share Your Data With

3.1Buyers and sellers: only essential contact info to complete deals (first name + city, no phone or ID).
3.2Payment providers: for secure processing (Mada, Visa, Apple Pay) — only transaction data, not your full profile.
3.3Shipping providers: address and name to deliver the order — no additional data shared.
3.4Approved tech services: hosting (Saudi Cloud), analytics (Plausible), messaging (Twilio) — all PDPL-compliant.
3.5Legal authorities: upon binding official request from competent Saudi entities.
3.6Never: we don't sell your data. We don't share with ad companies. We don't allow other users to access your private data.

4.How We Protect Your Data

4.1TLS 1.3 encryption for all data in transit between your device and the platform.
4.2AES-256 encryption for sensitive data (ID, payment) at rest.
4.3Data stored on servers inside Saudi Arabia (Saudi Cloud).
4.4Access to sensitive data is restricted to specific team members and fully logged.
4.5Daily encrypted backups with monthly restoration testing.
4.6Regular penetration testing by independent parties.

5.Your Rights Under PDPL

5.1Right to access: request a full copy of your stored data anytime.
5.2Right to rectification: correct any inaccurate information.
5.3Right to deletion: delete your account and all data (except legally required, like invoices).
5.4Right to object: refuse use of your data for marketing or analytics.
5.5Right to portability: receive your data in a transferable format.
5.6To exercise any right: email privacy@gsoundsa.com — we respond within 14 days max.

6.Data Retention Period

6.1Active account data: kept while you use the platform.
6.2Deleted account data: removed within 90 days, except legally required.
6.3Transaction records and invoices: kept for 5 years per ZATCA regulations.
6.4Login and security logs: kept for one year for security and audit.
6.5Marketing data: deleted immediately upon unsubscription.

7.Children's Data

7.1The platform is for adults (18+) and we don't intentionally collect children's data.
7.2If we discover an underage user, we immediately delete the account and all data.
7.3Parents/guardians who discover their child used the platform can contact us for immediate deletion.

8.Policy Updates

8.1We may update this policy from time to time to reflect changes in our services or applicable laws.
8.2Material updates notified via email + in-app notification 30 days before applying.
8.3Minor updates published directly on this page with last updated date.
8.4Continued use after updates means acceptance.

9.Contact Us

9.1Data Protection Officer (DPO): privacy@gsoundsa.com
9.2General inquiries: /contact
9.3To request data copy or deletion: privacy@gsoundsa.com
9.4Phone: 920000000 (8 AM - 10 PM)

Other Policies

Seller Policy Buyer Policy Prohibited Disputes

1.Data We Collect

1.1Basic data: name, phone, email, national ID (for verification only).

1.2Transaction data: order history, purchased products, amounts paid, payment methods.

1.3Technical data: IP address, browser type, OS, visited pages, session time (for security and analytics).

1.4Location data: city, region (for relevant search and nearby installation services).

1.5Communication data: copies of in-platform chats (for fraud protection and dispute resolution).

1.6Optional data: profile picture, user preferences, ratings.

2.How We Use Your Data

2.1Providing core service: account creation, executing transactions, buyer-seller communication.

2.2Identity verification: protecting the platform and users from fraud.

2.3Service improvement: analyzing usage to develop new features (aggregated and anonymized).

2.4Communicating with you: order notifications, service updates, support messages.

2.5Marketing (opt-in only): if you agree, we send offers and updates. Unsubscribe anytime.

2.6Legal compliance: responding to authorities' requests per Saudi laws.

3.Who We Share Your Data With

3.1Buyers and sellers: only essential contact info to complete deals (first name + city, no phone or ID).

3.2Payment providers: for secure processing (Mada, Visa, Apple Pay) — only transaction data, not your full profile.

3.3Shipping providers: address and name to deliver the order — no additional data shared.

3.4Approved tech services: hosting (Saudi Cloud), analytics (Plausible), messaging (Twilio) — all PDPL-compliant.

3.5Legal authorities: upon binding official request from competent Saudi entities.

3.6Never: we don't sell your data. We don't share with ad companies. We don't allow other users to access your private data.

4.How We Protect Your Data

4.1TLS 1.3 encryption for all data in transit between your device and the platform.

4.2AES-256 encryption for sensitive data (ID, payment) at rest.

4.3Data stored on servers inside Saudi Arabia (Saudi Cloud).

4.4Access to sensitive data is restricted to specific team members and fully logged.

4.5Daily encrypted backups with monthly restoration testing.

4.6Regular penetration testing by independent parties.

5.Your Rights Under PDPL

5.1Right to access: request a full copy of your stored data anytime.

5.2Right to rectification: correct any inaccurate information.

5.3Right to deletion: delete your account and all data (except legally required, like invoices).

5.4Right to object: refuse use of your data for marketing or analytics.

5.5Right to portability: receive your data in a transferable format.

5.6To exercise any right: email privacy@gsoundsa.com — we respond within 14 days max.

6.Data Retention Period

6.1Active account data: kept while you use the platform.

6.2Deleted account data: removed within 90 days, except legally required.

6.3Transaction records and invoices: kept for 5 years per ZATCA regulations.

6.4Login and security logs: kept for one year for security and audit.

6.5Marketing data: deleted immediately upon unsubscription.

8.Policy Updates

8.1We may update this policy from time to time to reflect changes in our services or applicable laws.

8.2Material updates notified via email + in-app notification 30 days before applying.

8.3Minor updates published directly on this page with last updated date.

8.4Continued use after updates means acceptance.