Privacy Policy

1. Who we are

Creative Foods Company is a subsidiary of Gulaid Holding Group and drives elite Saudi F&B growth through innovative brands and scale. Our CFC office is in Riyadh, Kingdom of Saudi Arabia. For the personal data described in this policy, CFC is the controller.

• Registered entity: Creative Foods Company, Commercial Registration No. 7054677898.
• Address: Al Olaya 7334, Al Sahafah District 2563, Riyadh, Saudi Arabia
• Email: info@creativefoods.com.sa
• Phone: +966122886669

2. Scope of this policy

This policy covers personal data processed through the Website, including our contact and inquiry forms, job applications made through the Website, and emails or calls you make using contact details published on it.

It does not cover:

• Personal data we process when delivering services to clients under contract, which is governed by those contracts and related notices; or
• Data about our employees, which is covered by internal HR policies.

3. Personal data we collect

Information you give us

• Inquiries: when you use our Inquiry form, we collect your first and last name, email address, phone number, company, the service you are interested in, and the content of your message.
• Job applications: when you apply for a role or send us your CV, we collect the information you choose to provide, such as your contact details, CV, work history, qualifications, and any cover letter or supporting documents.
• Direct correspondence: if you email or call us, we keep a record of that communication and the contact details you use.

Please do not send us sensitive personal data (for example, health information, religious beliefs or national ID numbers) through the Website unless we specifically ask for it.

Information collected automatically

When you visit the Website, our hosting provider and any analytics tools we use may automatically collect technical information such as your IP address, browser type and version, device type, operating system, the pages you view, the site that referred you, and the date and time of your visit. Some of this is collected through cookies (see section 5).

Information from others

We may receive information about you from recruitment agencies or job platforms (such as LinkedIn) if you apply through them, and from colleagues at your organisation who share your business contact details with us.

4. How and why we use your personal data

We use your personal data only where we have a lawful basis to do so under the Saudi Personal Data Protection Law (PDPL) and, where they apply to you, other data protection laws such as the UK GDPR.

We do not sell your personal data, and we do not use it for automated decision-making that has legal or similarly significant effects on you.

5. Cookies

Cookies are small files stored on your device. We use cookies that are strictly necessary for the Website to function and, where applicable, analytics cookies that help us understand how visitors use the Website. Where the law requires it, we will ask for your consent before setting non-essential cookies. You can also block or delete cookies through your browser settings, although parts of the Website may then not work properly.

6. Who we share your personal data with

We share personal data only where necessary, and only with:

• CFC and Gulaid Holding Group in Saudi Arabia, where needed to handle your inquiry or application;
• Service providers who act on our instructions, such as our website hosting and form provider (Webflow), email and IT service providers, and recruitment tools. They may use your data only to provide services to us;
• Professional advisers such as lawyers, auditors and insurers, under duties of confidentiality;
• Public authorities, courts and regulators where we are required to by law or to protect our legal rights; and
• A buyer or successor if all or part of our business is reorganised, merged or sold, subject to equivalent protections.

7. International transfers

Your personal data may be transferred to and stored outside the country in which you are located, including outside the Kingdom of Saudi Arabia. When we transfer personal data, we do so in accordance with the PDPL and its Regulation on Personal Data Transfer Outside the Kingdom, using appropriate safeguards such as adequacy decisions or standard contractual clauses. You can contact us for more information about these safeguards.

8. How long we keep your personal data

• Inquiries and correspondence: up to 24 months after our last contact with you, unless a business relationship follows, in which case we keep it for the duration of that relationship and any period required by law.
• Unsuccessful job applications: up to 12 months after the recruitment process closes, or longer if you agree that we may consider you for future roles. Successful applicants’ data becomes part of their employee record.
• Technical and usage data: for no longer than needed for security and analytics purposes, typically no more than 26 months.

We may keep data longer where required by law or to resolve disputes. When data is no longer needed, we securely delete or anonymise it.

9. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration, including encrypted connections (HTTPS), access controls and confidentiality obligations for staff and service providers. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security, but we will notify you and the relevant authorities of a data breach where the law requires us to.

10. Your rights

Depending on where you live, you may have some or all of the following rights over your personal data:

• To be informed about how your data is collected and used (this policy);
• To access your personal data and obtain a copy of it in a readable format;
• To correct data that is inaccurate, incomplete or out of date;
• To request destruction or deletion of data we no longer need;
• To withdraw consent at any time, where we rely on your consent;
• To object to or restrict certain processing, and to data portability (SA and other jurisdictions where these rights apply).

To exercise any of these rights, email info@creativefoods.com.sa. We may need to verify your identity before responding, and we will respond within the time required by applicable law.

You also have the right to complain to a data protection authority. In Saudi Arabia this is the Saudi Data & AI Authority (SDAIA). We would appreciate the chance to address your concerns first, so please contact us before going to a regulator.

11. Children

The Website is intended for businesses and job seekers and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Third-party links

The Website links to third-party sites and services, including LinkedIn, Instagram, YouTube and Google Maps. Those services have their own privacy policies, and we are not responsible for how they handle your data. Please review their policies before sharing information with them.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last changed. If we make significant changes, we will highlight them on the Website.