Privacy policy
How we handle personal data collected through this website, and how to exercise your rights over it.
Last updated .
It was prepared as a starting point and has not been reviewed by a qualified lawyer. Every field marked [ ] needs a real value, and the whole document needs review against how aiMS actually processes data before the site goes live. aiMS is responsible for the accuracy of what it publishes here.
1. Who we are
aiMS Innovation (“aiMS”, “we”, “us”) is the data controller for personal data collected through this website. We distribute cybersecurity platforms to organisations in Saudi Arabia and the wider GCC.
- Registered name: [full registered entity name]
- Commercial registration number: [CR number]
- Registered address: [street, city, postal code], Riyadh, Saudi Arabia
- Privacy contact: privacy@aims.tech
- Person responsible for personal data protection: [name or role]
2. What we collect
We collect only what we need to answer you. We do not buy contact lists, and we do not collect special categories of personal data through this site.
When you submit the briefing form
- Your name
- Your work email address
- Your organisation
- The platform or service you are interested in, if you select one
- The message you write describing your requirement
- A record that you ticked the consent box, and when
All of these are required except the interest field, which is optional. If you choose not to provide the required fields we cannot contact you or arrange a briefing, but nothing else is affected. There is no other consequence to declining.
When you contact us by email or WhatsApp
We receive whatever you choose to send, including your email address or phone number and the content of your message.
Automatically, when you visit
Our hosting provider records technical information needed to serve and secure the site, including your IP address, browser type, the pages requested and the time of the request. These records are held in server logs and are used for security and troubleshooting only.
3. Why we use it, and on what basis
| Purpose | Data used | Lawful basis |
|---|---|---|
| Replying to your enquiry and arranging a briefing | Form submission, email or message content | Your consent, and steps taken at your request before entering an agreement |
| Keeping a record of who we spoke to and about what | Name, organisation, enquiry summary | Our legitimate business interest in managing customer relationships |
| Keeping the site available and secure | Server logs, IP address | Our legitimate interest in protecting the service |
| Understanding how the site is used | Analytics cookies, if you accept them | Your consent, withdrawable at any time |
We do not use your details for marketing unless you separately ask us to, and we do not make automated decisions that produce legal effects concerning you.
4. Who else sees it
We share personal data only with service providers who help us run the site and respond to you, and only to the extent they need it:
- [hosting provider] - hosts this website and holds server logs
- [email or form provider] - delivers form submissions to our inbox
- [analytics provider, if used] - reports aggregate site usage
Where you ask about a specific vendor in our portfolio, we may share your enquiry with that vendor in order to answer it. We will tell you when we do. We do not sell personal data to anyone, ever.
We disclose personal data to authorities only where we are legally required to do so.
5. Transfers outside the Kingdom
Some of the providers above process data outside Saudi Arabia, in [list countries or regions]. Where personal data leaves the Kingdom we rely on the transfer conditions permitted under the PDPL and its implementing regulations, and we put appropriate contractual safeguards in place with each provider. You can ask us for details of the safeguards that apply to a specific transfer.
6. How long we keep it
- Enquiries that do not lead to a relationship: [e.g. 12 months] from your last contact with us, then deleted
- Enquiries that become customer or partner relationships: for the life of the relationship and [e.g. 5 years] afterwards, to meet commercial and tax record obligations
- Server logs: [e.g. 30 days]
- Cookie consent record: 12 months, after which we ask again
We delete personal data once the purpose it was collected for has been fulfilled, unless we are required to keep it longer by law.
7. Your rights
Under the Saudi Personal Data Protection Law you have the right to:
- Be informed about what we collect, why, and on what basis. This document is how we do that.
- Access your personal data and request a copy of it.
- Request correction of data that is incomplete, inaccurate or out of date.
- Request destruction of your personal data where it is no longer needed for the purpose it was collected, or where you withdraw consent.
- Request that we limit processing in the circumstances the law allows.
If you are in a jurisdiction covered by the GDPR you additionally have the right to object to processing based on legitimate interests, and the right to lodge a complaint with your local supervisory authority.
To exercise any of these, email privacy@aims.tech. We respond within 30 days. We may ask you to confirm your identity first, so that we do not disclose someone else’s data to the wrong person. Exercising your rights is free.
You can withdraw consent at any time. Withdrawing it does not affect anything we did lawfully before you withdrew.
8. Complaints
If you are unhappy with how we have handled your personal data, please tell us first at privacy@aims.tech so we can try to put it right. You also have the right to complain to the Saudi Data and Artificial Intelligence Authority (SDAIA), which supervises the PDPL.
9. Security
This site is served over HTTPS. Form submissions are transmitted encrypted. Access to enquiries is limited to aiMS staff who need it to respond to you. Where we become aware of a personal data breach that poses a risk, we notify the competent authority within 72 hours of becoming aware of it, and we notify affected individuals where the law requires.
10. Cookies
A cookie is a small file a site stores in your browser. This site keeps its cookie use deliberately minimal.
| Cookie | Purpose | Type | Expires |
|---|---|---|---|
aims_consent |
Remembers your cookie choice so we stop asking | Strictly necessary | 12 months |
| [analytics cookie names] | Measures which pages are read and how visitors arrive | Analytics, optional | [duration] |
Strictly necessary cookies are set without asking, because the site cannot work correctly without them and they do not track you. Analytics cookies are set only if you press Accept analytics. If you press Essential only, no analytics cookies are set and no analytics script is loaded at all. You can change your choice at any time using the Cookie preferences link in the footer, or by clearing cookies in your browser.
This site loads no third-party fonts, scripts, or embedded content, so no third party can observe your visit through this website.
11. Children
This is a business-to-business site and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Changes to this policy
If we change how we handle personal data we will update this page and change the date at the top. Where a change materially affects your rights we will take reasonable steps to tell you directly.
13. Contact
Questions about this policy or about how we handle your data: privacy@aims.tech, or write to us at [registered address], Riyadh, Saudi Arabia.