Privacy Notice

Who is responsible

GMT-ERP, an independent Dynamics 365 consultancy based in Kuwait, is responsible for the personal data described here. Contact us at info@gmt-erp.com or +965 6039 3853 with any privacy question or request.

What we collect and why

When you use the contact form

We collect your name, email address, company name (optional) and your message. We use these solely to reply to your enquiry and, if it leads to work, to manage the engagement. The legal basis is our legitimate interest in responding to people who contact us, and, once you become a client, performance of our contract with you.

When you take out a support plan

We collect the billing details needed to raise an invoice — typically your company name, billing address, contact name and email. Payment is made by bank transfer, so this website never handles or stores card details. We use these details to invoice you, deliver the support you have paid for, keep proper business records, and meet tax and accounting obligations.

Our records about you

To run the business we keep a record of each client — company name, contact name, email, billing address, which plan you are on, the hours worked for you, and the invoices raised. This is ordinary business record-keeping: we need it to deliver the service, invoice correctly and meet tax and accounting obligations.

These records are held in a password-protected area of this site that only we can reach, hosted by Netlify. They are not published, not shared with anyone else, and not used for marketing.

When we deliver support

Delivering support means accessing your Dynamics 365 environment, which may contain personal data about your own staff and customers. For that data, you are the controller and we act as your processor: we access it only as necessary to perform the services and on your documented instructions. We do not copy, retain or transmit your production data beyond what the work requires, and we will delete or return it on your written request.

When you browse the site

We do not use analytics, advertising or tracking pixels on this website. Our host records standard server logs, including IP addresses, for security and reliability.

Cookies and browser storage

This website sets no tracking cookies. If you choose a light or dark theme, that single preference is saved in your browser under gmt-theme using local storage. It never leaves your device, is not sent to us, and is not used to identify you. Clearing your browser data removes it.

There is no card checkout on this site, so no payment provider scripts or cookies are loaded either.

Who we share data with

We keep this list short on purpose. These are the only third parties involved:

We do not sell personal data, and we do not share it for advertising. We may disclose data where we are legally required to.

International transfers

We are based in Kuwait and the services above operate internationally, so your data may be processed outside your country. Where the law requires it, those transfers rely on the providers standard contractual clauses or equivalent safeguards.

How long we keep it

• Enquiries that do not become work: up to 24 months, then deleted.
• Client and billing records: as long as required by tax and accounting law.
• Client system data: not retained after the engagement ends, beyond anything the law requires.

Your rights

Subject to your local law, you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything inaccurate.
• Delete your data, where we have no legal reason to keep it.
• Restrict or object to how we use it.
• Provide it in a portable format.

Email info@gmt-erp.com and we will respond within 30 days. There is no charge. If you are in a jurisdiction with a data protection authority and you are unhappy with our response, you may complain to it.

Security

The site is served over HTTPS. We use secured connections and least-privilege access when working in client systems, and we retain no client production data beyond what the work requires. We are happy to sign a non-disclosure agreement before any access is granted. No method of transmission or storage is completely secure, but we take these obligations seriously.

Children

This is a business-to-business service. It is not directed at children, and we do not knowingly collect data from anyone under 16.

Changes

We may update this notice. The date above reflects the current version, and material changes will be notified to active clients by email.

Contact

Any privacy question or request: info@gmt-erp.com.