We only hold what you send us in a form.

Who we are

Cyber Correlate is a cybersecurity firm registered and operating in Jordan, with its office at Building 162, Al Madina Al Monawwara Street, Amman. For anything in this policy, we are the controller of the personal data described below.

This policy covers this website only. Data we process while delivering a service to a client organisation is governed by the contract and any data processing agreement signed with that client, not by this page.

What we collect, and only when you send it

We do not collect personal data from visitors who simply read this website. Personal data reaches us in exactly two ways:

We do not ask for and do not want national identifiers, financial details, health information or any other sensitive category of data through this website. Please do not include them in a form.

What we do not do

To be specific, because most privacy policies are not:

Why we hold it, and on what basis

We use what you submit to answer your enquiry, to prepare a proposal if you have asked for one, or to assess an application for a role. That is the whole purpose.

Our lawful basis is your consent, given by choosing to submit the form, together with our legitimate interest in responding to a business enquiry addressed to us. For a job application, the basis is the steps taken at your request prior to any employment relationship.

You can withdraw consent at any time by emailing us. Withdrawing it means we stop processing and delete what we hold, although it does not undo work already done at your request.

Who else touches it

We keep the chain deliberately short. Your form submission passes through the following service providers, each acting on our behalf:

These providers may process data outside Jordan. We use them because they are established and appropriate for the purpose, and we do not authorise them to use your data for their own ends. Beyond them, nobody sees your enquiry except the Cyber Correlate staff who need to answer it.

How long we keep it

Enquiries are kept while the conversation is live and for as long as we may reasonably need the context of it afterwards, typically no more than twenty four months. Applications for a role are kept for up to twelve months so we can consider you for something else, unless you ask us not to.

Where we are required to retain records for tax, contractual or regulatory reasons, we keep only what that requirement covers, for the period it covers.

How we protect it

We are a security firm and we hold ourselves to the practices we sell: access to the mailbox holding enquiries is restricted and authenticated with multi-factor authentication, endpoints are managed and monitored, and access is granted on a least-privilege basis.

No transmission over the internet is completely secure. If you have something genuinely sensitive to send us, contact us first and we will agree a secure channel rather than a web form.

Your rights

Under Jordan’s Personal Data Protection Law and, where it applies to you, other applicable data protection law, you may:

Email us and we will respond within thirty days. We will not charge you for a reasonable request and we will not make you explain why you are asking.

Children

This website is aimed at organisations and their staff. We do not knowingly collect personal data from anyone under eighteen. If you believe a child has sent us something, tell us and we will delete it.

Changes to this policy

If our practices change: for example if we ever introduce analytics, which we would rather not, we will update this page and change the date at the top before the change takes effect. Material changes will be stated plainly rather than buried.