Privacy Policy

Data we collect

Account and organisation data, plus operational telemetry from protected endpoints including connection status, configuration assessment results and alerts.

Purpose of processing

Delivering the protection service, computing compliance scores, invoicing, and technical support.

Lawful basis

Performance of the contract and legitimate interest in securing the service, in line with the Personal Data Protection Law (PDPL).

Retention

Data is retained for the subscription term and any statutory period thereafter, then destroyed or anonymised.

Data subject rights

Rights to be informed, to access, to rectify and to erase, as provided by law, via the data protection officer.

Data transfer

Data is processed within the Kingdom and is not transferred abroad except as permitted by law.