Privacy Policy

Overview: What data is being collected and processed?

Like all companies, we collect and hold data provided to us in exchange for services. "Services" means paid-for services or products, sending requested information (such as a quote or a download resource), or responding to contact form submissions. You can opt out and withdraw consent, or ask to be forgotten, at any time.

In order to enter into an agreement with TGP Catering & Hospitality, we will collect, store and use elements of your personal data. The processing of this personal data is a contractual requirement and is necessary for us to administer your account and to provide the products and services you have requested from us.

When you approach TGP Catering & Hospitality to engage in our services we will process your personal data on the applicable lawful basis, which may include taking steps to enter into or performing a contract with you, compliance with applicable legal obligations, legitimate interests where permitted by applicable law, and consent where consent is required. Where certain personal data is necessary to enter into or perform a contract, failure to provide such data may prevent us from providing the relevant products or services.

When engaging TGP Catering & Hospitality online, you will usually need to disclose to us some or all of the following:

• Name
• Email address
• Place of work or company name
• Location
• Reasonable contextual information to assist with providing relevant information

We will also monitor, record, store and use any telephone, email or other electronic communications with you for training purposes, so that we can check any instructions given to us and improve the quality of our customer service.

Any personal data we collect from you may be processed or stored using third-party service providers (including cloud and CRM platforms such as HubSpot Inc.), and may be transferred between our UAE and KSA operations, or to service providers located outside these jurisdictions. Where personal data is transferred internationally,such transfers will be carried out in accordance with applicable data protection laws, including the UAE PDPL and KSA PDPL, and subject to any required safeguards, assessments, approvals or other lawful transfer mechanisms.

Specifics

Website Cookies

These help improve your experience on our website and help us share communications with you that are more relevant. Our website holds cookies in order to ensure the best browsing experience and help us make sure we share relevant marketing information.

Direct Marketing Communications

We strive to make sure we provide only interesting and relevant marketing communications, and you can opt out at any time.

If you have chosen to opt in to our direct marketing communications, we will use your information to tell you about products and services available from us which may be of interest to you. We may also use your information to tell you about products and services which we can introduce from selected businesses, where permitted by applicable law and, where required, with your prior consent.

To help make our emails more interesting and relevant, we often receive a confirmation when you open an email from TGP Catering & Hospitality, if your device supports such capabilities.

You have a right to opt out of our direct marketing communications at any time. You can opt out by following the unsubscribe instructions at the bottom of the communication, or by emailing catering@tgpevents.com.

Legal basis for processing personal information

Our legal basis for collecting and using personal information will depend on the personal information concerned and the specific context in which we collect it. We will normally collect personal information only where we have your consent to do so, or where processing is permitted on the basis of our legitimate interests under applicable law. In some cases, we may also have a legal obligation to collect personal information from you.

If we collect and use your personal information in reliance on legitimate interests, it would be for these reasons:

• As a customer, we process your data to keep you up to date with our products, services and related information
• As someone in the sales process (for example, requesting a quotation), we process your data to keep you up to date with the sales process and our services
• As someone who has shown interest in our services by taking an action such as downloading a resource, we process your data to keep you up to date with related information
• As a prospect we genuinely believe would be interested in our services, we may process your data for marketing purposes only where permitted by applicable law and, where required, after obtaining your consent.

You may withdraw your consent by: (1) using the "unsubscribe" link attached to our communications; (2) calling us on +971 58 557 7879; or (3) emailing catering@tgpevents.com.

Links to websites of other providers/third parties

We don't control websites which aren't our own, but we may link out to them, so please check their privacy policies before providing them any information.

This privacy notice applies only to TGP Catering & Hospitality, and we are not responsible for, and have no control over, information submitted to or collected by third parties linked from our site. Where TGP Catering & Hospitality operates under specific client contractual data protection terms, those terms take priority over this website privacy policy.

How long will the data be stored for?

We retain personal data only for as long as necessary for the purposes for which it was collected, including as necessary to comply with applicable legal, regulatory, accounting, tax and contractual requirements and to establish, exercise or defend legal claims.

Where possible, TGP Catering & Hospitality will take steps to erase personal data that is no longer necessary for the purposes for which it was collected where you have validly exercised a right to deletion under applicable law, subject to any applicable legal or regulatory retention requirements.

As a general rule, if you enter into or take steps to enter into a contract with us, we will store the data for the period required under applicable record-keeping, tax and other legal requirements

Under UAE PDPL and, where applicable, KSA PDPL, you may have the right to request the deletion, destruction or erasure of your personal data, subject to the conditions, limitations and exceptions prescribed by applicable law. Circumstances in which you can request deletion include:

• Where the personal data is no longer necessary for the purposes for which it was collected
• Where you withdraw consent
• Where you object to the processing and there is no overriding legitimate interest
• Where the personal data was unlawfully processed
• Where erasure is required to comply with a legal obligation

Where deletion is not possible due to legal, statutory or contractual retention periods, or would require disproportionate effort or prejudice legitimate interests, the data will be restricted rather than deleted.

Sharing of data with other data controllers & processors

We may disclose personal data to third parties where necessary for the purposes described in this Privacy Policy and where permitted or required by applicable law.

We take your privacy seriously, and the information we hold about you is confidential. We will only disclose it outside TGP Catering & Hospitality when:

• You have given us your consent to do so
• It is necessary for the performance of a contract or to provide the products or services requested by you;
• It is required to obtain professional advice (e.g. legal advice)
• We or others need to investigate or prevent crime
• The law permits or requires it
• A regulatory or governmental body requests or requires it
• There is a duty to the public to reveal the information

To administer your contract, we may need to share personal information with other data controllers and processors, including:

• Relevant UAE regulatory and licensing authorities (e.g. Expo City Authority, Federal Tax Authority)
• Claims handling and fraud prevention agencies
• Third parties whose software we use to process invoices, payroll or tax filings

Fraud Prevention

If you give us false or inaccurate information and fraud in any form is identified, details will be passed to the relevant authorities. We and other organisations may share, access and use this information to prevent fraud and money laundering, including when managing accounts, recovering debt, or checking details provided during business engagement. Law enforcement agencies may also access and use this information.

Protecting your privacy

To protect personal data collected from you against accidental or deliberate manipulation, loss, destruction or unauthorised access, technical and organisational security measures are constantly reviewed and improved. Our employees, subcontractors and support staff are obligated to observe confidentiality and data privacy.

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Such measures may include encryption, access controls and other appropriate information security safeguards.

While we aim to keep our website secure and reliable, your use of the internet is at your own risk, and we have no responsibility for the security of information transmitted online.

All passwords and usernames allocated to you must be kept secret and not disclosed without our prior written authorisation. You must not use a false identity in communications with us, or attempt unauthorised access to another user's account or system.

Breaches

If we become aware that your data has been compromised, or that a breach of our systems has occurred affecting the security of your data, we will assess the incident and, where required by applicable data protection law, notify the competent UAE and/or KSA authority and/or affected data subjects within the applicable statutory timeframe.

Subject Access Requests

You can request a copy of the data we hold on you at any time, we will respond to your request within the timeframe prescribed by applicable data protection law.

Any fees or limitations applicable to a request will be determined in accordance with applicable data protection law.

We will provide this information in a structured, commonly used, machine-readable form where required by applicable law and reasonably practicable.

To submit a request, please contact:

We will respond within the timeframe prescribed by applicable data protection law.

Rectifying or Updating Personal Data

You can ask us to update or correct information you suspect is wrong, at any time. Where possible, we will inform any third parties to whom we've disclosed the data so they can rectify their records.

We will respond within the timeframe prescribed by applicable data protection law.

Withdrawing Consent

If we process your data using consent as the lawful basis, you may withdraw that consent at any time by writing to our Compliance Officer at the address above.

Please note that withdrawing consent will not affect processing carried out on another lawful basis. Where the relevant processing is necessary to provide a particular service and no other lawful basis applies, withdrawal of consent may affect our ability to provide that service. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Your Data Protection Rights

Subject to the applicable UAE PDPL or KSA PDPL and any applicable conditions, limitations or exceptions, you may have rights in relation to your personal data, including rights to obtain information regarding its processing, access your personal data, request correction or updating of inaccurate data, request deletion or destruction of personal data, withdraw consent where processing is based on consent, and exercise any other rights available under applicable data protection law.