Privacy Policy

Effective Date: January 1, 2026 | Last Updated: September 2026

1. Information We Collect

In the course of delivering enterprise IT consulting, cloud infrastructure, AI automation, cybersecurity, and digital transformation services, we may collect the following categories of data:

• Contact and Identity Information: Full name, corporate email address, business telephone number, job title, and organization name.
• Commercial Consultation Data: Inquiries submitted via consultation forms, WhatsApp chats, RFP documents, and service scoping notes.
• Technical & Browsing Data: IP address, device telemetry, browser type, operating system, and usage logs collected through secure essential analytics.

2. Legal Basis and Purpose of Processing (KSA PDPL)

Under the Saudi PDPL, we collect and process your personal data under the following lawful bases:

• Performance of a Contract: Initiating, executing, and fulfilling commercial contracts, SLAs, and IT support agreements.
• Explicit Consent: Where you provide consent by submitting an inquiry, scheduling a solution assessment, or subscribing to industry briefs.
• Legal and Regulatory Compliance: Satisfying statutory requirements under Saudi Arabian commercial, tax (ZATCA), and cybersecurity (NCA) frameworks.
• Legitimate Interests: Securing our digital assets, preventing malicious intrusion, and improving enterprise service delivery.

3. Data Residency & Sovereignty

All enterprise and personal data handled by Ibtikar Al-Mutlaq is hosted and maintained in verified Tier-3 and Tier-4 data centers located within the Kingdom of Saudi Arabia. We maintain strict compliance with the National Data Management Office (NDMO) standards and Saudi data sovereignty regulations.

4. Your Rights Under Saudi PDPL

As a data subject under Saudi Arabian law, you are entitled to exercise the following rights:

• Right to be Informed: You have the right to know how your data is collected and processed.
• Right of Access: You may request a copy of your personal data held by us.
• Right to Rectification: You may request the correction, completion, or updating of incomplete or inaccurate data.
• Right to Erasure / Destruction: You may request the deletion of your personal data when it is no longer required for the purposes for which it was collected.
• Right to Withdraw Consent: You may withdraw processing consent at any time without retroactive impact.

5. Security Safeguards

We implement enterprise-grade technical and organizational security controls, including AES-256 encryption in transit and at rest, role-based access control (RBAC), multi-factor authentication, and vulnerability penetration testing (VAPT) aligned with National Cybersecurity Authority (NCA) frameworks.

6. Contact Our Data Protection Officer

If you have any questions, requests, or concerns regarding your personal data or this policy, please contact our data governance team: