Privacy Policy

Effective Date: October 1, 2025
Last Updated: October 1, 2025

1. Introduction

Dialectic Security (“we,” “our,” or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website (dialecticsecurity.com), use our services, or interact with us.

We are committed to compliance with the Personal Data Protection Law (PDPL) in the Kingdom of Saudi Arabia and other applicable data protection regulations.

2. Information We Collect

2.1 Personal Information You Provide

We may collect the following personal information that you voluntarily provide to us:

  • Contact Information: Name, email address, phone number, company name, job title
  • Account Information: Username, password, and account preferences
  • Communication Data: Information contained in correspondence with us, including emails, contact form submissions, and support tickets
  • Assessment Information: Details you provide during security assessments or compliance consultations
  • Payment Information: Billing address and payment details (processed securely through third-party payment processors)

2.2 Information Automatically Collected

When you visit our website, we may automatically collect:

  • Technical Data: IP address, browser type, operating system, device information
  • Usage Data: Pages visited, time spent on pages, links clicked, referral sources
  • Cookies and Similar Technologies: See Section 6 for details

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Delivery

  • To administer your account and provide the cybersecurity services you requested
  • To conduct security assessments, audits, and compliance reviews
  • To deliver PDPL and ECC compliance solutions
  • To provide incident response and technical support

3.2 Communication

  • To respond to your inquiries and requests
  • To send administrative information about your account or services
  • To provide important updates about our services

3.3 Marketing (With Your Consent)

From time to time, we would like to contact you about:

  • Our cybersecurity products and services
  • PDPL and ECC compliance updates
  • Security insights and best practices
  • Industry news and educational content
  • Webinars, events, and training opportunities

We will only send you marketing communications if you have consented to receive them. You can withdraw your consent at any time by clicking the “unsubscribe” link in our emails or contacting us directly.

3.4 Business Operations

  • To improve our website and services
  • To analyze usage trends and optimize user experience
  • To detect and prevent fraud or security incidents
  • To comply with legal obligations

4. Legal Basis for Processing (PDPL Compliance)

Under the PDPL, we process your personal information based on:

  • Consent: When you have given explicit consent for specific purposes (e.g., marketing communications)
  • Contract Performance: When processing is necessary to fulfill our contractual obligations to you
  • Legal Obligation: When we must process data to comply with Saudi Arabian laws and regulations
  • Legitimate Interests: When processing is necessary for our legitimate business interests, provided your rights are not overridden

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

  • Website hosting and maintenance
  • Payment processing
  • Email delivery services
  • Analytics and performance monitoring

These providers are contractually obligated to protect your information and use it only for the specified purposes.

5.2 Legal Requirements

We may disclose your information if required to:

  • Comply with applicable laws, regulations, or legal processes
  • Respond to government requests or court orders
  • Protect our rights, property, or safety, or that of others
  • Detect, prevent, or address fraud or security issues

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience. Cookies are small text files stored on your device that help us:

  • Remember your preferences and settings
  • Analyze website traffic and usage patterns
  • Improve website functionality and performance

You can control cookie settings through your browser preferences. However, disabling cookies may limit certain website features.

7. Your Rights Under PDPL

Under the Personal Data Protection Law (PDPL), you have the following rights:

  • Right to Access: Request a copy of the personal information we hold about you
  • Right to Correction: Request correction of inaccurate or incomplete information
  • Right to Deletion: Request deletion of your personal information (subject to legal obligations)
  • Right to Object: Object to processing of your personal information for certain purposes
  • Right to Data Portability: Request transfer of your data to another service provider
  • Right to Withdraw Consent: Withdraw consent for marketing communications or other processing activities at any time

To exercise these rights, please contact us using the information in Section 11.

8. Communication Preferences

How Would You Like Us to Contact You?

If you consent to receiving marketing communications, please indicate your preferences:

☐ Email – Receive updates, insights, and offers via email
☐ Phone – Receive calls about our services and solutions
☐ SMS/WhatsApp – Receive text messages about important updates

You can update your communication preferences or unsubscribe at any time by:

  • Clicking the “unsubscribe” link in our emails
  • Replying “STOP” to text messages
  • Contacting us directly at privacy@dialecticsecurity.com
  • Updating your account preferences on our website

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against:

  • Unauthorized access, disclosure, or destruction
  • Accidental loss or alteration
  • Unlawful processing

These measures include:

  • Encryption of data in transit and at rest
  • Access controls and authentication mechanisms
  • Regular security assessments and monitoring
  • Employee training on data protection practices
  • Secure backup and disaster recovery procedures

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

10. Data Retention

We retain your personal information only for as long as necessary to:

  • Fulfill the purposes described in this Privacy Policy
  • Comply with legal, accounting, or regulatory requirements
  • Resolve disputes and enforce our agreements

When information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies and PDPL requirements.

11. International Data Transfers

Your personal information is primarily processed and stored within the Kingdom of Saudi Arabia. If we transfer data outside Saudi Arabia, we ensure appropriate safeguards are in place to protect your information in accordance with PDPL requirements.

12. Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

  • Posting the updated policy on our website with a new “Last Updated” date
  • Sending an email notification (if you have provided your email address)
  • Displaying a prominent notice on our website

Your continued use of our services after changes are posted constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Dialectic Security
Email: privacy@dialecticsecurity.com
Website: https://dialecticsecurity.com

For PDPL-related inquiries or to exercise your data rights:
Email: privacy@dialecticsecurity.com
Subject Line: “PDPL Data Rights Request”

We will respond to your inquiry within 30 days as required by PDPL regulations.

16. Complaints

If you believe we have not handled your personal information properly, you have the right to file a complaint with:

Saudi Data & Artificial Intelligence Authority (SDAIA)
The regulatory authority responsible for PDPL enforcement in Saudi Arabia

Your Privacy Matters

At Dialectic Security, protecting your privacy is not just a legal obligation—it’s fundamental to our mission. As cybersecurity experts, we understand the importance of data protection and apply the same rigorous standards to our own practices that we recommend to our clients.

If you have any questions or need clarification about how we handle your information, please don’t hesitate to reach out. We’re here to help.

This Privacy Policy demonstrates our commitment to transparency and compliance with the Personal Data Protection Law (PDPL) in the Kingdom of Saudi Arabia.