Privacy Policy, Terms of Service, Cookie Policy, and Data Protection Information
Last Updated: 12 October 2026
These policies are governed by the laws of the United Arab Emirates and are maintained in alignment with UAE Federal Decree-Law No. 45 of 2021 (the UAE Personal Data Protection Law, "PDPL") and, where applicable, the EU/UK General Data Protection Regulation ("GDPR").
Last Updated: November 29, 2025
This Privacy Policy describes how Cyntara Security ("Cyntara," "we," "us," or "our") collects, processes, stores, and protects information in connection with the use of our website, services, platforms, and related offerings.
Cyntara provides cybersecurity, threat detection, compliance monitoring and reporting, advisory, and managed security services. Due to the nature of our work, we maintain strict security, confidentiality, and governance practices for all data entrusted to us.
Cyntara Security is established in the United Arab Emirates. For the purposes of the UAE Personal Data Protection Law and, where applicable, the GDPR, Cyntara acts as the data controller in respect of personal data collected through this website and in the course of its own business operations. Where Cyntara processes personal data on behalf of a client under a managed services agreement, Cyntara acts as a data processor and processes such data only on the client's documented instructions.
This policy applies to:
By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy.
We may collect:
Including but not limited to:
As part of delivering cybersecurity services, we may process:
This data is processed only for the purpose of delivering contracted services.
Cyntara employs commercially reasonable technical and organisational security controls designed to protect personal data, including but not limited to:
We may share information with trusted service providers solely for:
We do not sell or rent personal data.
Where cross-border data transfers are required, Cyntara uses:
We retain information only as long as necessary to:
Depending on your location, you may have rights to:
These rights are available under the UAE Personal Data Protection Law and, where applicable, under the GDPR. Exercising your rights is free of charge, and we will not discriminate against you for doing so.
Requests can be submitted to:
legal@cyntarasecurity.com
If you are not satisfied with our response, you may lodge a complaint with the UAE Data Office or, where applicable, with your local supervisory authority.
Cyntara maintains incident response procedures to detect, assess, and respond to personal data breaches. Where a breach is likely to result in a risk to the rights of data subjects, we will notify the relevant supervisory authority and, where required, affected individuals without undue delay and in accordance with applicable law.
Where Cyntara acts as a processor, we will notify the relevant controller without undue delay after becoming aware of a personal data breach.
This Privacy Policy is governed by the laws of the United Arab Emirates, including UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. Where GDPR or other applicable data protection laws provide a higher standard of protection, we apply those standards to the extent required.
We may modify this Privacy Policy at any time. Updates will be posted with a revised "Last Updated" date.
Last Updated: November 29, 2025
By accessing the Cyntara Security website or submitting information to us, you agree to these Terms of Service. Use of our managed cybersecurity services is governed by separate Master Service Agreements (MSAs), Statements of Work (SOWs), or subscription contracts.
Users agree to:
Cyntara reserves the right to restrict or terminate access for misuse.
All website content, branding, designs, text, imagery, code, and materials are owned by or licensed to Cyntara Security and are protected by applicable intellectual property laws. Certain third-party technologies, trademarks, and materials referenced or used on this website remain the property of their respective owners and are used under licence or applicable terms.
Users may not:
The website and its content are provided "as is" without warranties of any kind.
Cyntara does not guarantee:
This does not affect warranties provided under any paid service agreements.
To the maximum extent permitted by law, Cyntara is not liable for:
Users agree to indemnify Cyntara Security against claims arising from:
External links are provided for convenience. Cyntara does not endorse or control third-party sites, and is not responsible for their content or security practices.
Cyntara may update these Terms at any time. Continued website use constitutes acceptance of the updated Terms.
These Terms of Service and any dispute or claim arising out of or in connection with them are governed by and construed in accordance with the laws of the United Arab Emirates.
The parties agree to submit to the exclusive jurisdiction of the competent courts of the United Arab Emirates, save where mandatory local law provides otherwise. Where a separate signed agreement governs the provision of managed services, that agreement takes precedence over these website Terms in the event of conflict.
Last Updated: November 29, 2025
This Cookie Policy explains how Cyntara Security uses cookies and similar technologies to support website functionality, analytics, and performance. It should be read together with our Privacy Policy.
We do not use advertising cookies, retargeting, or cross-site behavioural tracking cookies.
Consent: Non-essential cookies and analytics are only set after you give consent through the cookie banner shown on your first visit. You can decline or withdraw consent at any time; essential cookies will continue to operate as necessary for the site to function.
Required for the website to function, including:
Cannot be disabled.
Used to understand how visitors interact with the site, such as page views, click paths, load times, and interaction patterns. These cookies are set only after consent and include:
Analytics data is used in aggregate to improve the site. Where IP anonymisation is available, it is enabled. Google may process this data in accordance with its own privacy terms.
Store choices such as:
Used to detect malicious activity and enhance protection.
Users can modify cookie settings via browser controls. Disabling essential cookies may limit functionality.
We may update this policy periodically. The latest version will always be available on this page.
General Data Protection Regulation
Cyntara Security is established in the United Arab Emirates and is committed to protecting personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "UAE PDPL"). Where we process personal data relating to individuals in the European Economic Area (EEA), the United Kingdom, or Switzerland, we additionally apply the standards of the General Data Protection Regulation (GDPR).
Our Privacy Policy outlines how we collect, process, and protect personal data in accordance with UAE PDPL and, where applicable, GDPR requirements.
Under the UAE PDPL and, where applicable, the GDPR, you have the following rights:
You can request a copy of the personal data we hold about you.
You can request correction of inaccurate or incomplete data.
You can request deletion of your personal data under certain conditions.
You can request limitation of how we process your data.
You can receive your data in a structured, commonly used format.
You can object to certain types of processing, including direct marketing.
You can withdraw consent for processing where consent was the legal basis.
You can file a complaint with your local data protection authority.
We process personal data under the following legal bases:
For data protection inquiries, or to exercise your rights under the UAE PDPL or GDPR, please contact our data protection point of contact:
Email:
legal@cyntarasecurity.com
Subject Line: Data Protection Request
We will respond to your request within the timeframe required by applicable law, including the UAE PDPL and, where applicable, the GDPR.
When transferring data outside the EEA, we ensure adequate protection through:
Our team is available to address any concerns regarding privacy, data protection, or compliance.
Contact UsVendor and Technology Disclosure
Certain Cyntara Security services incorporate third-party cybersecurity technologies as part of service delivery. These technologies are operated, managed, and monitored by Cyntara under commercial agreements and are not provided directly to customers.
Independent Commercial Operation: Cyntara Security operates as an independent commercial entity and is not affiliated with or endorsed by any government agency.