Privacy Policy

1. Who We Are

Gestiva is a Saudi company providing veterinary solutions and business development consulting with a broader healthcare outlook. For this website, Gestiva is the entity responsible for the personal data submitted through contact and quote request forms. You can contact us at: info@gestivamed.com.

2. Data We Collect

When you submit a form through the website, we may collect your first name, last name, email address, organisation name, selected subject or product, estimated quantity, message details, IP address, submission timestamp, and basic technical and security information needed to process the form and protect the website.

Please do not submit patient records, confidential clinical files, or any unnecessary health information through the website forms.

3. How We Use Your Data

• To respond to general enquiries and quote requests.
• To provide product, support, or consulting information.
• To send a confirmation email after form submission.
• To protect the website from spam, abuse, and unauthorised submissions.
• To keep basic business records where reasonably needed.

4. Legal Basis for Processing

We process personal data to the extent necessary to respond to your requests, take steps at your request before doing business with us, support legitimate business interests such as website protection and enquiry management, or comply with any legal obligations that apply to us.

5. Service Providers

We use Resend to deliver website enquiry emails. We may also use hosting and technical service providers to operate and secure the website. These providers process data only as needed to provide their services to us.

6. Processing or Storage Outside Saudi Arabia

Some technical service providers may process or store limited data outside the Kingdom of Saudi Arabia for website operation, email delivery, security, or support purposes. Where this happens, we aim to limit it to what is necessary for the service and apply appropriate safeguards to protect the data.

7. Retention

We normally keep enquiry and quote request records for up to 24 months after the last interaction, unless a longer period is reasonably required for business records, legal obligations, dispute handling, or ongoing customer relationship management. When personal data is no longer required, we securely delete or anonymise it from our active systems, subject to any applicable legal retention requirements.

8. Your Rights

You may contact us to request access to your personal data, obtain a copy of it in a clear and readable format where applicable, correct or update inaccurate data, request deletion, or withdraw consent where consent is the basis for processing. We may request reasonable information to verify your identity before fulfilling a request. We aim to respond to rights requests within 30 days. In limited cases, this period may be extended by up to a further 30 days, and we will notify you in advance with the reason for the extension. To make a request, email us at: info@gestivamed.com.

9. Complaints and Questions

If you have any question or complaint about how your personal data is processed, you may contact us at: info@gestivamed.com. If you are dissatisfied with our response, you may escalate your complaint to the competent Saudi authority through its official channels.

10. Security

We use reasonable technical and organisational measures to protect website submissions, including HTTPS, form validation, CSRF protection, rate limiting, and restricted access to received enquiries.

11. Updates

We may update this policy when our website, services, or legal obligations change. The latest version will always be published on this page.