Privacy Notice
Gulf Pacific Investment Limited (GPIL)
Effective Date: January 2025
Jurisdiction: Kingdom of Bahrain
1. Introduction
Gulf Pacific Investment Limited (“GPIL”, “we”, “our”, or “us”) is committed to safeguarding the confidentiality, integrity, and privacy of your personal information. This Privacy Notice outlines how we collect, process, share, retain, and protect your data — in compliance with Bahrain’s Personal Data Protection Law (PDPL) and international best practices.
2. Data Controller
Gulf Pacific Investment Limited is the data controller responsible for all personal data processed under this policy.
Registered Office: Flat 23, Building 188, Road 1703, Block 317, Manama/Diplomatic Area, Bahrain
3. Who This Notice Applies To
• Clients and prospective clients (including UHNWI, family offices, institutions)
• Representatives of institutional clients
• Website visitors and event attendees
• Any individual whose personal data is provided in the course of our relationship
4. Categories of Personal Data Collected
We collect only what is essential to deliver our services:
- Identity & Contact: Name, date of birth, nationality, ID/passport, photo, address, phone, email
- Financial & Investment: Bank details, portfolio data, tax IDs, statements
- Business & Legal: Company affiliations, trust instruments, legal documentation
- Compliance: KYC/AML data, sanctions checks, regulatory disclosures
- Technical: IP address, device/browser metadata, non-marketing cookies
5. How and Why We Use Your Data
| Purpose | Data Type | Legal Basis |
|---|---|---|
| Client onboarding & KYC/AML | Identity, Compliance | Legal compliance, consent |
| Wealth & advisory services | Financial, legal, correspondence | Contractual necessity, legitimate interest |
| Client reporting & secure messaging | Contact, transactions | Contractual necessity, legitimate interest |
| Risk management & compliance | Financial, legal, audit logs | Legal compliance, legitimate interest |
| Improving service delivery | Usage analytics | Legitimate interest |
| Marketing (with consent) | Contact details | Consent |
6. Who We Share Data With
We may share your data with:
- Bahraini regulators (e.g., CBB, Tax Authority)
- Professional advisors (legal, audit, tax)
- Custodian banks and investment partners
- Technology providers supporting data infrastructure
- Joint-venture partners under strict confidentiality terms
7. Transfers Outside Bahrain
When data is transferred abroad:
- We use Standard Contractual Clauses (SCCs) or equivalent safeguards
- Transfers comply with PDPL and global privacy standards
- All transfers are encrypted and monitored
8. Data Retention
Data is retained only as necessary:
- For the duration of our services or relationship
- For legal obligations (e.g., audit or tax records)
- Data is securely deleted or anonymized once no longer required
9. Security Measures
We protect your data through:
- Bank-grade encryption (in transit and at rest)
- Role-based access controls and multi-factor authentication
- Regular cybersecurity assessments and employee training
- Physical security for office and data infrastructure
10. Your Rights Under Bahraini PDPL
You may request to:
- Access and obtain your personal data
- Rectify incorrect or incomplete data
- Request erasure (if not legally retained)
- Object to or restrict processing
- Withdraw consent
- Request data portability
- File a complaint or seek compensation
11. Cookies & Website Tracking
Our website uses cookies for functional and analytical purposes. We do not use advertising cookies. You may manage cookie settings via your browser, which may affect usability.
12. Third-Party Links
Our website and social platforms may link to third-party services, governed by their own privacy policies. Please refer to their disclosures before interacting.
13. Contact & Data Requests
Data Protection Officer
Gulf Pacific Investment Limited
Flat 23, Building 188, Road 1703, Block 317,Manama/Diplomatic Area, Bahrain
Email: [email protected]
Phone: +973 3320 5416
14. Policy Updates
This notice may be updated from time to time. Any significant changes will be published on our website or communicated directly. Please review this page for the most recent version.
At GPIL, data protection is not only a regulatory requirement — it is a cornerstone of the trust we share with our clients.