Privacy Policy

Overview: What data is being collected and processed?

Like all companies, we collect and hold data provided to us in exchange for services. "Services" means paid-for services or products, sending requested information (such as a quote or a download resource), or responding to contact form submissions. You can opt out and withdraw consent, or ask to be forgotten, at any time.

In order to enter into an agreement with TGP Catering & Hospitality, we will collect, store and use elements of your personal data. The processing of this personal data is a contractual requirement and is necessary for us to administer your account and to provide the products and services you have requested from us.

When you approach TGP Catering & Hospitality to engage in our services, we will ask your consent to collect and process your personal data. Failure to provide this consent and/or personal data may mean we will be unable to execute the contract and will result in termination of our services.

When engaging TGP Catering & Hospitality online, you will usually need to disclose to us some or all of the following:

• Name
• Email address
• Place of work or company name
• Location
• Reasonable contextual information to assist with providing relevant information

We will also monitor, record, store and use any telephone, email or other electronic communications with you for training purposes, so that we can check any instructions given to us and improve the quality of our customer service.

Any personal data we collect from you may be processed or stored using third-party service providers (including cloud and CRM platforms such as HubSpot Inc.), and may be transferred between our UAE and KSA operations, or to service providers located outside these jurisdictions. Where personal data is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place in line with UAE PDPL and KSA PDPL requirements.

Specifics

Website Cookies

These help improve your experience on our website and help us share communications with you that are more relevant. Our website holds cookies in order to ensure the best browsing experience and help us make sure we share relevant marketing information.

Direct Marketing Communications

We strive to make sure we provide only interesting and relevant marketing communications, and you can opt out at any time.

If you have chosen to opt in to our direct marketing communications, we will use your information to tell you about products and services available from us which may be of interest to you. We may also use your information to tell you about products and services which we can introduce from selected businesses.

To help make our emails more interesting and relevant, we often receive a confirmation when you open an email from TGP Catering & Hospitality, if your device supports such capabilities.

You have a right to opt out of our direct marketing communications at any time. You can opt out by following the unsubscribe instructions at the bottom of the communication, or by emailing catering@tgpevents.com.

Legal basis for processing personal information

Our legal basis for collecting and using personal information will depend on the personal information concerned and the specific context in which we collect it. We will normally collect personal information only where we have your consent to do so, where we need it to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal information from you.

If we collect and use your personal information in reliance on legitimate interests, it would be for these reasons:

• As a customer, we process your data to keep you up to date with our products, services and related information
• As someone in the sales process (for example, requesting a quotation), we process your data to keep you up to date with the sales process and our services
• As someone who has shown interest in our services by taking an action such as downloading a resource, we process your data to keep you up to date with related information
• As a prospect we genuinely believe would be interested in our services, we process your data to keep you up to date accordingly

You may withdraw your consent by: (1) using the "unsubscribe" link attached to our communications; (2) calling us on +971 58 557 7879; or (3) emailing catering@tgpevents.com.

Links to websites of other providers/third parties

We don't control websites which aren't our own, but we may link out to them, so please check their privacy policies before providing them any information.

This privacy notice applies only to TGP Catering & Hospitality, and we are not responsible for, and have no control over, information submitted to or collected by third parties linked from our site. Where TGP Catering & Hospitality operates under specific client contractual data protection terms, those terms take priority over this website privacy policy.

How long will the data be stored for?

We only hold your data for as long as we think is fair, and you can ask us to delete your data at any time.

Where possible, TGP Catering & Hospitality will take steps to erase personal data that is no longer necessary for the purposes for which it was collected, or if you have withdrawn consent for its processing and retention.

As a general rule, if you enter into or take steps to enter into a contract with us, we will store the data for a period consistent with UAE record-keeping and tax obligations (currently up to 5 years under UAE VAT/tax law) and for the exercise or defence of any legal claims.

Under UAE PDPL and, where applicable, KSA PDPL, you have the right to request the deletion or removal of personal data to prevent further processing ("the right to be forgotten"). Circumstances in which you can request deletion include:

• Where the personal data is no longer necessary for the purposes for which it was collected
• Where you withdraw consent
• Where you object to the processing and there is no overriding legitimate interest
• Where the personal data was unlawfully processed
• Where erasure is required to comply with a legal obligation

Where deletion is not possible due to legal, statutory or contractual retention periods, or would require disproportionate effort or prejudice legitimate interests, the data will be restricted rather than deleted.

Sharing of data with other data controllers & processors

In short, we don't, unless we are legally required to (e.g. fraud prevention).

We take your privacy seriously, and the information we hold about you is confidential. We will only disclose it outside TGP Catering & Hospitality when:

• You have given us your consent to do so
• It is necessary for the performance of a contract you will be made aware of
• It is required to obtain professional advice (e.g. legal advice)
• We or others need to investigate or prevent crime
• The law permits or requires it
• A regulatory or governmental body requests or requires it
• There is a duty to the public to reveal the information

To administer your contract, we may need to share personal information with other data controllers and processors, including:

• Relevant UAE regulatory and licensing authorities (e.g. Expo City Authority, Federal Tax Authority)
• Claims handling and fraud prevention agencies
• Third parties whose software we use to process invoices, payroll or tax filings

Fraud Prevention

If you give us false or inaccurate information and fraud in any form is identified, details will be passed to the relevant authorities. We and other organisations may share, access and use this information to prevent fraud and money laundering, including when managing accounts, recovering debt, or checking details provided during business engagement. Law enforcement agencies may also access and use this information.

Protecting your privacy

To protect personal data collected from you against accidental or deliberate manipulation, loss, destruction or unauthorised access, technical and organisational security measures are constantly reviewed and improved. Our employees, subcontractors and support staff are obligated to observe confidentiality and data privacy.

Access to data stored by us only takes place through an encrypted connection. Our website and internal systems use SSL/TLS encryption, an industry standard used to protect online transactions.

While we aim to keep our website secure and reliable, your use of the internet is at your own risk, and we have no responsibility for the security of information transmitted online.

All passwords and usernames allocated to you must be kept secret and not disclosed without our prior written authorisation. You must not use a false identity in communications with us, or attempt unauthorised access to another user's account or system.

Breaches

If we become aware that your data has been compromised, or that a breach of our systems has occurred affecting the security of your data, we will notify the relevant UAE and/or KSA data protection authority, as applicable, and you, without undue delay, in accordance with UAE PDPL and KSA PDPL requirements.

Subject Access Requests

You can request a copy of the data we hold on you at any time, and we will provide it within a reasonable period, and no later than one month of receiving your request in writing.

This information is provided free of charge, though we may charge a reasonable administrative fee where a request is manifestly unfounded, excessive or repetitive.

We will provide this information in a structured, commonly used, machine-readable form (such as CSV or PDF) where possible.

To submit a request, please contact:

We will respond without delay, and at the latest within one month of receipt.

Rectifying or Updating Personal Data

You can ask us to update or correct information you suspect is wrong, at any time. Where possible, we will inform any third parties to whom we've disclosed the data so they can rectify their records.

We will typically respond within one month, extendable by up to two months for complex requests.

Withdrawing Consent

If we process your data using consent as the lawful basis, you may withdraw that consent at any time by writing to our Compliance Officer at the address above.

Please note that withdrawing consent may mean we are unable to execute a contract you have entered with us, which could result in termination of our services. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.