Privacy Policy

1. Scope & Commitment

AMNAISYS ("we", "us", or "our") respects the privacy and confidentiality of corporate partners, prospective clients, and website visitors. We are committed to safeguarding all data collected through our digital interfaces in full compliance with the statutory provisions of the Saudi Personal Data Protection Law (PDPL) enacted by Royal Decree No. M/19.

2. Information We Collect

We only collect personal information that is voluntarily provided through our business inquiry forms, consultations, or direct communication:

• Identity & Contact Details: Full name, professional job title, company name, corporate email address, and official telephone number.
• Technical Inquiry Specifications: Information relating to your enterprise technology requirements, automation scopes, or cybersecurity assessments.
• Digital Telemetry: Essential technical access logs, IP addresses, browser types, and timestamp metrics collected strictly for cybersecurity defense and uptime monitoring.

3. Purpose of Processing

All collected data is processed strictly for legitimate corporate purposes, including:

• Evaluating, scoping, and responding to commercial project inquiries and technical proposals.
• Fulfilling bilateral contractual obligations and enterprise service agreements.
• Ensuring website resilience, zero-trust perimeter defense, and regulatory reporting where required by Saudi law.

4. Sovereign Data Locality & Retention

In accordance with sovereign data residency mandates, all data collected by AMNAISYS is stored inside secure, encrypted infrastructure located within the Kingdom of Saudi Arabia. We do not transfer personal or operational data across international borders without formal compliance verifications. Data is retained only for the duration necessary to satisfy the commercial inquiry or legal obligations, after which it is securely expunged.

5. Security Safeguards

We employ defense-grade cryptographic protocols (TLS 1.3 in transit, AES-256 at rest), rigorous role-based access control (RBAC), and continuous monitoring aligned with National Cybersecurity Authority (NCA) frameworks to prevent unauthorized disclosure, leakage, or data tampering.

6. Your Statutory Rights Under the PDPL

As a data subject under Saudi law, you have the right to:

• Right to Know: Understand the purpose and legal basis for processing your data.
• Right of Access: Request a copy of your personal data stored within our systems.
• Right to Rectification: Request corrections, updates, or completions of your records.
• Right to Destruction: Request the deletion of data that is no longer required for its original purpose.

7. Contact for Privacy Inquiries

To exercise your statutory data rights or request clarification regarding our compliance practices, please contact our Data Governance Officer: