Site information
Privacy notice
How we collect, use and protect the personal data you send us through this website.
Last updated: 9 October 2026 · Version 1.2
1. Who we are
This website is operated by Global Oil Center, part of the Khorsheed Energy Group (“GOC”, “we”, “us”). GOC is the data controller for personal data collected through this site.
Head office: Al-Salmiya, Salem Al-Mubarak St., Orient Tower, 5th floor, Office 13, Kuwait. Email: privacy@goc.com.kw. Telephone: +965 2575 6500.
For visitors in the European Economic Area, our EU representative under Article 27 GDPR is our office in the Netherlands: WTC The Hague Business Center, Prinses Margrietplantsoen 33, 2595 AM The Hague.
2. The data we collect
We only collect what you choose to send us, plus limited technical data needed to run the site.
| Source | Data | Required? |
|---|---|---|
| Opportunity platform | Entry path, full name, organisation, corporate email, phone, region, country, sector, opportunity type, estimated scale, description, NDA request, consent and any attachment you add (PDF or DOCX, up to 10 MB) | Entry path, name, organisation, email, phone, region, sector, opportunity type, description and consent |
| Contact form | Full name, email, enquiry type, region, message | All fields |
| Emails you send us | Whatever you include in your message | — |
| Technical | IP address, browser type and pages requested, held in server logs | Automatic |
Please do not send special-category data (health, religion, political views and similar) through our forms. We do not knowingly collect data from anyone under 16.
3. Why we use it, and our legal basis
- Answering your enquiry and routing it to the right division or regional office. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR), or our legitimate interest in responding to business enquiries (Art. 6(1)(f)).
- Managing business relationships with investors, partners, suppliers and customers who contact us. Legal basis: legitimate interest (Art. 6(1)(f)).
- Keeping the site secure and working, including detecting abuse. Legal basis: legitimate interest (Art. 6(1)(f)).
- Meeting legal obligations, such as record-keeping and responding to lawful requests from authorities. Legal basis: legal obligation (Art. 6(1)(c)).
We do not use your data for automated decision-making or profiling, and we do not sell it. We will only send you marketing if you have separately agreed to it, and you can withdraw that consent at any time.
4. Who we share it with
- GOC group offices: the Kuwait Head Office and the regional office responsible for your enquiry.
- Service providers acting on our instructions under written contracts, such as website hosting, email and form-processing providers.
- Professional advisers and authorities where required by law or to protect our legal rights.
We do not share your data with third parties for their own marketing.
5. International transfers
Our Head Office is in Kuwait, which the European Commission has not recognised as providing adequate protection. When we transfer personal data from the EEA or UK to Kuwait or other offices outside the EEA, we use the European Commission’s Standard Contractual Clauses (or the UK equivalent) and appropriate security measures. You can request a copy of these safeguards using the contact details in section 11.
6. How long we keep it
- Enquiries that do not lead to a business relationship: 24 months from our last contact.
- Enquiries that lead to a contract: for the life of the relationship plus the period required by applicable commercial and tax law.
- Server logs: 90 days, unless needed to investigate a security incident.
7. Security
The site is served over HTTPS. Access to enquiry data is limited to staff who need it to respond. We apply technical and organisational measures appropriate to the risk, and will notify you and the relevant authority of a data breach where the law requires it.
8. Cookies and local storage
Strictly necessary. When you use a form, the server sets one session cookie, goc_cf, to protect the form against forgery. It contains no personal data and expires when you close your browser. Your cookie choice is remembered in your browser’s local storage under goc-consent-v1.
Analytics, only with your consent. If you select Accept, we use Google Analytics 4 (Google Ireland Limited) to understand which pages are visited and how the site is used. It sets the cookies _ga and _ga_* for up to 13 months. IP addresses are anonymised, Google signals and advertising features are switched off, and we do not use the data to identify you. If you select Decline, no analytics script is loaded and no analytics cookies are set.
You can change your choice at any time with Cookie settings at the bottom of every page. We do not use advertising cookies. Fonts are served from our own server.
9. Your rights
If you are in the EEA or UK, you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased
- restrict how we use it
- object to processing based on legitimate interest
- receive your data in a portable format
- withdraw consent at any time, where we rely on it
- complain to your local data protection authority
To exercise any of these rights, email privacy@goc.com.kw. We will respond within one month. In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens; you may also contact the authority in the EU country where you live or work.
10. Changes to this policy
We may update this policy when our practices or the law change. The date at the top shows when it was last revised. Material changes will be highlighted on this page.
11. Contact us about privacy
Email privacy@goc.com.kw, or write to the Privacy Officer, Global Oil Center, Orient Tower, 5th floor, Office 13, Salem Al-Mubarak St., Al-Salmiya, Kuwait.