Privacy and cookies

Gulf Cyber-Safe is a trading name of Eurologix Security Holding Group Ltd, registered in England and Wales, which is the controller for the personal data described here. Because the company is UK-established, the UK GDPR and the Data Protection Act 2018 govern this processing; where you are in the Gulf, your own state's data protection law may also give you rights, and we will honour whichever is more favourable to you rather than arguing about which applies.

Questions, requests and complaints all go to the same address: info@cyber-safe.ae. If you are not satisfied with our answer you can complain to the UK Information Commissioner's Office, and, depending on where you are, to your own national authority.

The form on the contact page asks for your name and work email, and optionally your organisation, where you operate, what prompted the enquiry and a free-text note. It posts to a script on this site's own server in Dubai. It does not go through a third-party form service, which is deliberate: routing a prospect's details through someone else's platform would be a strange thing to do on a site that advises on data residency.

That script turns the submission into an email to info@cyber-safe.ae and does nothing else with it. Nothing is written to a database or a file on the web server. The lawful basis is our legitimate interest in answering people who ask us to, and, where your message names something sensitive, your consent in sending it.

The resulting email lives in our mailbox. We keep enquiry correspondence for two years from the last message, then delete it, unless it became an engagement — in which case the engagement's own retention terms apply. Email to info@cyber-safe.ae reaches the same place and is treated the same way.

If you message us on WhatsApp, WhatsApp (operated by Meta) processes your message, phone number and profile under its own terms and privacy policy. We use what you send only to reply and to arrange a call, and we handle it in the same way as an enquiry email, described above. Please do not send personal data about other people, documents or security details by WhatsApp; we will move to a secure channel once we have spoken.

This site sets no cookies of its own. It has no login, no basket and no session.

If you accept the banner, Google Analytics 4 is loaded and sets its own cookies to count visits, measure which pages are read and see roughly where readers are. Until you accept, nothing is requested from Google at all — not a script, not a pixel, not a cookieless ping. Declining is a real decline, and the site is identical either way. Your choice is remembered in your browser's local storage under the key cs-consent; it is never sent anywhere, and you can change it from the link in the footer of any page.

Google Analytics is configured with advertising features, ad personalisation and Google signals off. Google processes the data as our processor and may do so outside the Gulf and the UK. If that is not acceptable to you, decline — it costs you nothing.

Like any web server, the host records a standard access log — the requesting IP address, the page, the time, the referring page and the browser string. This happens for every visitor, including those who decline analytics, because it is how a web server works and how abuse is investigated. The hosting is with Tasjeel in Dubai. We do not mine these logs for marketing and do not combine them with anything else.

The site’s fonts (IBM Plex, under the SIL Open Font License) are served from this site’s own server. No font, script or other file is requested from Google or any other third party when a page loads.

You can ask what we hold about you, ask for a copy, ask us to correct it, ask us to delete it, object to our processing it, or ask us to restrict it. There is no charge and no form. Write to info@cyber-safe.ae and say what you want; we answer within a month and usually within a few working days.

We do not make automated decisions about anyone, and we do not profile visitors.