Privacy Policy

Intello Cyber Technologies ("we," "our," or "us") is committed to protecting your privacy and personal data. As a cybersecurity consultancy, we understand the critical importance of data protection and apply the highest standards to our own practices.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us. Please read this policy carefully to understand our views and practices regarding your personal data.

Information You Provide Directly:

• Contact Information: Name, email address, phone number, company name
• Professional Information: Job title, company size, industry sector
• Service Inquiries: Details about your cybersecurity needs and requirements
• Assessment Requests: Information about your current security posture and compliance needs
• Communication Records: Messages, emails, and other communications with us

Information Collected Automatically:

• Website Usage: Pages visited, time spent, click patterns, referral sources
• Technical Data: IP address, browser type, device information, operating system
• Performance Data: Page load times, error reports, website performance metrics
• Location Data: General geographic location based on IP address

We use your personal information for the following purposes:

Service Delivery:

• Responding to your inquiries and providing cybersecurity consultation
• Conducting security assessments and compliance evaluations
• Delivering our cybersecurity and GRC services
• Providing technical support and customer service

Communication:

• Sending service-related notifications and updates
• Sharing cybersecurity insights and industry best practices
• Following up on assessment requests and proposals
• Providing educational content about cybersecurity trends

Business Operations:

• Improving our website functionality and user experience
• Analyzing service usage to enhance our offerings
• Ensuring website security and preventing fraud
• Complying with legal and regulatory requirements

Under GDPR and UAE PDPL, we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for marketing communications
• Contract Performance: To deliver the cybersecurity services you have requested
• Legitimate Interests: For business operations, security, and service improvement
• Legal Compliance: To meet regulatory and legal obligations

We do not sell, trade, or rent your personal information. We may share your data only in the following circumstances:

• Service Providers: Trusted third-party vendors who assist in service delivery
• Legal Requirements: When required by law, regulation, or legal process
• Business Protection: To protect our rights, property, or safety
• Business Transfers: In connection with mergers, acquisitions, or asset sales

All third-party service providers are carefully vetted and required to maintain appropriate security measures.

As a cybersecurity consultancy, we implement enterprise-grade security measures:

• Encryption: All data is encrypted in transit and at rest using industry-standard protocols
• Access Controls: Role-based access with multi-factor authentication
• Security Monitoring: 24/7 monitoring for suspicious activities and threats
• Regular Audits: Periodic security assessments and penetration testing
• Staff Training: Regular cybersecurity awareness training for all personnel
• Incident Response: Comprehensive incident response and breach notification procedures

Under GDPR and UAE PDPL, you have the following rights regarding your personal data:

• Right of Access: Request information about personal data we hold about you
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another organization
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing communications

To exercise any of these rights, please contact us using the information provided below.

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Contact Inquiries: 3 years from last contact
• Service Records: 7 years for business and compliance purposes
• Marketing Data: Until consent is withdrawn or 2 years of inactivity
• Website Analytics: 26 months in accordance with standard practices

Your personal data may be transferred to and processed in countries outside the UAE. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by relevant data protection authorities
• Standard contractual clauses approved by regulators
• Binding corporate rules for international transfers
• Certification schemes and codes of conduct

Our website uses cookies and similar technologies to improve your browsing experience. For detailed information about our use of cookies, please refer to our Cookie Policy.

You can manage your cookie preferences through our cookie consent banner or your browser settings.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us:

Data Protection Officer: If you have specific concerns about data protection, you may also contact our Data Protection Officer at info@intellome.com