Privacy notice
How we handle your personal data
This notice explains what personal data the CYBRT website collects, why, who processes it and the rights you have under the Saudi Personal Data Protection Law (PDPL).
Who we are
CYBRT is a cybersecurity company headquartered in Riyadh, Saudi Arabia. We are responsible for the personal data collected through this website. You can reach us at info@cybrt.sa or +966 55 492 4900.
What we collect
We do not use analytics, advertising or tracking cookies, and the website does not set cookies.
- Contact form
- Your name, organisation, email address, phone number if you give it, the topic you choose and your message.
- Maturity assessment
- Your organisation, sector, name, email address, phone number, organisation size, your answers to the 20 questions and the resulting score.
- Technical data
- Our hosting provider processes your IP address, browser details and the pages you request, in server logs, to deliver and protect the website.
How we use it
We do not sell your personal data, and we do not use it for unrelated marketing without your consent.
- To reply to your enquiry and arrange a call if you ask for one
- To discuss your assessment results and prepare a proposal
- To keep a record of our correspondence with you
Legal basis
We process the data you submit on the basis of the consent you give when you send a form, and our legitimate interest in responding to business enquiries, in line with the PDPL.
Who processes it for us
Some of these providers process data outside Saudi Arabia. We use them only for the purposes above and in line with the PDPL’s rules on transfers outside the Kingdom.
- Web3Forms
- Delivers form submissions to our email inbox.
- Vercel
- Hosts the website and processes the technical data described above.
- Google Fonts
- Serves the website’s fonts. Your browser connects to Google’s servers, which receive your IP address.
How long we keep it
We keep enquiry and assessment data only for as long as we need it for the purposes above, or for longer where the law requires it, and then delete it.
Your rights
Under the PDPL you have the right to be informed about how your data is used, to access it and receive a copy, to have it corrected, to ask for it to be deleted, and to withdraw your consent at any time. To use any of these rights, email info@cybrt.sa. If you are not satisfied with our response, you can complain to the Saudi Data and AI Authority (SDAIA).
Security
The website is served only over encrypted HTTPS connections, and form submissions travel over HTTPS to our inbox.
Changes to this notice
We will update this page if the way we handle personal data changes. The date at the top shows when it last changed.