When GSL accesses or processes personal data - such as customer databases, CRM contacts, email lists, website-form submissions, advertising audiences or analytics data - a Data Processing Addendum (DPA) applies.
The DPA addresses the processing purpose, personal-data categories, duration, breach notification and subcontractors, in line with Canadian privacy guidance and the Saudi PDPL regulations.