Privacy policy

Who is responsible

European Gulf Company, registered with the Chamber of Commerce (KvK) under number 88166651, is the controller for the processing described here. Contact: [email protected], +31 6 8729 9400.

What data we collect

When you send a quote request: company name and address, country, registration and VAT numbers if provided, your name, job title, business email and phone number, business type, requested products and quantities, delivery details, notes you add, your language, the date and time of the request and whether you opted in to updates. For security we also store a one-way hashed version of your IP address and your browser type. We do not ask for passports or identity documents.

Why we use it and on what legal basis

• To answer your quote request and prepare a quotation – steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• To protect the website against spam and abuse through rate limits – our legitimate interest in security (Art. 6(1)(f) GDPR).
• To keep business records required by applicable tax law when a quotation leads to a transaction (Art. 6(1)(c) GDPR).
• To send occasional product updates only if you ticked the separate opt-in box – your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Who receives your data

Your request is stored in the website's database and read by authorised European Gulf Company staff. Our hosting provider and our email service provider process data on our behalf under a data processing agreement. When a quotation requires it, relevant details are shared with suppliers, transport companies or authorities involved in your shipment. We do not sell your data.

International transfers

If your shipment goes abroad, details needed for that shipment are shared with parties in that country. This transfer is necessary to take the steps you requested (Art. 49(1)(b) GDPR).

How long we keep data

Quote requests that do not lead to business are deleted 24 months after the last contact. Records of transactions are kept for 7 years as required by applicable tax law. Hashed IP data used for rate limiting is deleted after 24 hours. Marketing consent is kept until you withdraw it.

Cookies and browser storage

We use one strictly necessary session cookie to protect the quote form against forged submissions, and your browser's local storage to remember the products you add to your quote list. Neither is used for tracking. We do not use analytics or advertising cookies; if this changes, this policy will be updated and your consent asked where required.

Your rights

You may request access to, correction or deletion of your data, restriction of processing, data portability, and object to processing based on legitimate interest. Email [email protected]. You also have the right to lodge a complaint with the data protection authority (Autoriteit Persoonsgegevens) or the authority in your country.

Security

The website uses HTTPS encryption. Quote data is accessible only through a password-protected administration area, and passwords are stored in hashed form.