Privacy Policy
Transparent, lawful, and secure personal data handling aligned with the Saudi Personal Data Protection Law (PDPL) and ISO/IEC 27001 standards.
Our Commitment to Privacy
PolicySecOps provides cybersecurity engineering and technical advisory services. We respect individual privacy and are committed to handling personal information transparently, lawfully, and securely.
Because we advise organisations on data protection frameworks, including the Saudi Personal Data Protection Law (PDPL) and ISO/IEC 27001, we apply the same rigorous data protection principles to our own operations: purpose limitation, data minimization, strict storage security, and zero unnecessary tracking.
1. Zero Tracking Cookies
We believe that professional technical websites should not track their visitors.
- No advertising cookies: We do not use advertising networks, behavioral retargeting scripts, or third-party tracking pixels.
- No invasive analytics: We do not collect personal identifiers, device fingerprints, or cross-site browsing histories. Any high-level web traffic telemetry used to monitor site performance operates without cookies and does not record personally identifiable information.
- No cookie banner required: Because policysecops.com does not set non-essential tracking cookies on your device, we do not present intrusive cookie consent banners.
2. Information We Collect
We only collect personal information that you choose to provide to us directly through our proposal request form or via email. This information includes:
- Contact details: Your full name and corporate work email address.
- Organizational context: Your organisation name, country of operation, approximate user count, and existing infrastructure model (cloud-only or hybrid).
- Project scope: The outcome areas or regulatory frameworks you select, and any operational details or project timelines you include in your message.
We ask that you do not submit sensitive personal information—such as national identifiers, payment details, passwords, or personal health records—through our contact form.
3. Purpose and Legal Basis for Processing
We process the information you submit strictly for legitimate business purposes:
- To review your project requirements and evaluate technical feasibility.
- To contact you via email to arrange an introductory technical discovery conversation.
- To prepare and deliver a scoped engineering proposal tailored to your organisation.
- To maintain records of our professional communications.
We process this information based on your voluntary consent when submitting the inquiry form and our legitimate business necessity to respond to prospective client requests. We collect only the minimum amount of data required to evaluate your project.
4. How Your Data Is Stored and Protected
Personal information submitted through our website is handled with disciplined security controls:
- Encrypted transmission: All form submissions and web sessions are encrypted in transit using Transport Layer Security (TLS 1.3/1.2).
- Secure message processing: Inquiry details are transmitted securely to our enterprise Zoho Mail workspace (
mail.zoho.com). - Access control: Access to incoming inquiries is restricted strictly to senior technical personnel who require the information to review and respond to your request. Access requires phishing-resistant multi-factor authentication.
- No third-party sharing: We do not sell, rent, commercialize, or share your contact details with third-party software vendors, marketing agencies, or licensing brokers.
5. Data Retention
We retain inquiry information only for as long as necessary to fulfill the purpose for which it was collected:
- Active engagements: Inquiries that lead to an active engineering engagement are retained as part of the operational project record for the duration of the client relationship and applicable statutory record-keeping periods.
- Non-proceeding inquiries: Inquiries that do not proceed to an active engagement are periodically reviewed and securely purged within twelve months of our last communication.
6. Your Rights as a Data Subject
Under the Saudi Personal Data Protection Law (PDPL) and international data protection standards, you have defined statutory rights regarding your personal information:
Right to be Informed
You have the right to understand how your personal data is collected, processed, and safeguarded.
Right of Access
You have the right to request confirmation of whether we hold personal information about you and to obtain a clear copy.
Right to Rectification
You have the right to request the correction, completion, or updating of inaccurate or incomplete personal information.
Right to Destruction
You have the right to request permanent erasure of your personal data when no longer needed or if consent is withdrawn.
We will never discriminate or penalize any individual for exercising their data subject rights.
7. Exercising Your Rights
To exercise any of your data protection rights, or if you have questions regarding our data practices, please contact our privacy desk:
Email: contact@policysecops.com
Subject line: Personal Data Request
Please include your full name and the email address used during your initial inquiry so that we can verify your identity. We process and respond to verified data subject requests promptly and free of charge within thirty calendar days.
8. Updates to This Policy
We may periodically revise this Privacy Policy to reflect technical updates, operational changes, or amendments to applicable data protection regulations. Any revisions will be published on this page with an updated effective date.