Last Updated: March 15, 2025

Introduction

Welcome to sabry (“we”, “our”, “us”). We respect your privacy and are committed to protecting your personal data. This privacy policy informs you about how we collect, process, store, and protect your personal data in accordance with the Saudi Arabia Personal Data Protection Law (PDPL) and, where applicable, the General Data Protection Regulation (GDPR).

1. Controller Information

Data Controller: sabry Cybersecurity Services
Address: 6550 Digital City, Riyadh Unit 8 12382-3711, Al Nakheel District, Kingdom of Saudi Arabia
Email: privacy@sabry.sa
Phone: +966 11 123 4567

2. Personal Data We Process

We may collect and process the following categories of personal data:

For Website Visitors:

  • Technical Data: IP address, browser type and version, time zone setting, operating system
  • Usage Data: Pages visited, time spent on pages, interaction with the website

For Clients and Prospective Clients:

  • Identity Data: Name, job title, employer
  • Contact Data: Email address, telephone number, business address
  • Account Data: Username, password (encrypted)
  • Transaction Data: Services purchased, billing information
  • Communications Data: Emails, calls, and other communications with us

For Phishing Simulation Participants:

  • Identity Data: Name, email address
  • Performance Data: Interaction with simulated phishing emails, training completion status

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

  • Contractual Necessity: To perform our contractual obligations to you
  • Legitimate Interests: For our legitimate business interests, such as improving our services
  • Legal Obligation: To comply with legal requirements
  • Consent: Where you have given us explicit consent to process your data for specific purposes

4. Purposes of Processing

We process your personal data for the following purposes:

  • To provide and maintain our services
  • To notify you about changes to our services
  • To allow you to participate in interactive features
  • To provide customer support
  • To gather analytics to improve our services
  • To monitor the usage of our services
  • To detect, prevent, and address technical issues
  • To comply with legal obligations

5. Data Storage and Retention

We store your personal data on secure servers located in the Kingdom of Saudi Arabia. We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including:

  • For the duration of our contractual relationship plus necessary archiving period
  • As required by applicable laws and regulations
  • For resolving disputes and enforcing our legal agreements

6. Data Sharing and Transfers

We may share your personal data with:

  • Service providers who perform services on our behalf
  • Professional advisers including lawyers, auditors, and insurers
  • Regulatory authorities, government agencies, and law enforcement bodies as required by law

When we transfer your data outside the Kingdom of Saudi Arabia, we ensure adequate safeguards are in place in compliance with PDPL and, where applicable, GDPR requirements. These may include:

  • Transfers to countries recognized as providing adequate protection
  • Standard contractual clauses approved by relevant authorities
  • Other legally approved transfer mechanisms

7. Your Data Protection Rights

Depending on applicable laws, you may have the following rights:

  • Access: The right to request copies of your personal data
  • Rectification: The right to request correction of inaccurate data
  • Erasure: The right to request deletion of your data in certain circumstances
  • Restriction: The right to request restriction of processing in certain circumstances
  • Objection: The right to object to processing in certain circumstances
  • Data Portability: The right to request transfer of your data to another controller
  • Withdraw Consent: The right to withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@sabry.sa.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

  • Encryption of personal data
  • Regular testing and evaluation of security measures
  • Access controls and authentication procedures
  • Regular backups and recovery procedures
  • Staff training on data protection and security

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies to enhance user experience and collect information about usage patterns. You can control cookies through your browser settings. For detailed information about the cookies we use, please see our Cookie Policy.

10. Children’s Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Privacy Policy Updates

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this privacy policy periodically.

12. Data Protection Officer

Our Data Protection Officer can be contacted at:

Email: dpo@sabry.sa
Address: 6550 Digital City, Riyadh Unit 8 12382-3711, Al Nakheel District, Kingdom of Saudi Arabia

13. Complaints

If you have concerns about our data processing activities, please contact us first. You also have the right to lodge a complaint with the Saudi Data & AI Authority (SDAIA) or, if applicable, your local data protection authority.

14. Contact Us

For any questions about this privacy policy or our data practices, please contact us at:

Email: privacy@sabry.sa
Phone: +966 11 123 4567
Mail: 6550 Digital City, Riyadh Unit 8 12382-3711, Al Nakheel District, Kingdom of Saudi Arabia

© 2025 sabry. All Rights Reserved.