Cyberia Data Privacy Policy

Last Updated: March 06, 2025

1. Scope of This Policy

This policy applies to all personal data processed by Cyberia, including data collected from customers, website visitors, and other individuals in Saudi Arabia. Personal data refers to any information that can identify you, such as your name, contact details, or account information.

2. How We Collect Your Data

We collect personal data in the following ways:

• Directly from You: When you register for our services, submit inquiries, or provide information through our website or customer support channels.
• Automatically: Through cookies and similar technologies when you visit our website, such as your IP address, browser type, and usage data.
• From Third Parties: When permitted by law, we may receive data from partners or service providers to fulfill our services.

We only collect data necessary for the purposes outlined above.

3. Purposes of Processing Your Data

We process your personal data for the following legitimate purposes:

• To provide, maintain, and improve our telecommunications and internet services.
• To process payments and manage your account.
• To respond to your inquiries or support requests.
• To ensure the security of our systems and prevent fraud.
• To comply with legal obligations under Saudi law.
• With your consent, to send you marketing communications about our services or promotions.

We will not use your data for purposes beyond what is specified here without your prior consent.

4. Legal Basis for Processing

We process your data based on:

• Your explicit consent, where required (e.g., for marketing).
• The necessity to fulfill our contractual obligations to you (e.g., providing services).
• Compliance with legal requirements in Saudi Arabia.
• Our legitimate interest in operating and securing our business, provided it does not override your rights.

5. How We Protect Your Data

We implement appropriate technical and organizational measures to safeguard your personal data against unauthorized access, loss, or disclosure. These measures include encryption, access controls, and regular security reviews. In the event of a data breach, we will notify you and the relevant authorities within 72 hours, as required by the PDPL.

6. Sharing Your Data

We may share your personal data only in these cases:

• With service providers acting on our behalf, under strict confidentiality agreements.
• With regulatory authorities when required by Saudi law.
• With your consent, for specific purposes such as marketing partnerships.

We do not sell or disclose your data to third parties for their own use.

7. Cross-Border Data Transfers

If your data is transferred outside Saudi Arabia, we ensure compliance with PDPL requirements by:

• Transferring data only to countries deemed to have adequate protection by the Saudi Data & Artificial Intelligence Authority (SDAIA).
• Using safeguards such as Standard Contractual Clauses (SCCs) or Binding Corporate Rules (BCRs) when necessary.

8. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations. Once no longer needed, we securely destroy or anonymize your data in accordance with PDPL guidelines.

9. Your Rights Under PDPL

As a data subject, you have the following rights:

• Right to be Informed: Know how your data is processed.
• Right to Access: Request a copy of your personal data.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data when no longer needed.
• Right to Restrict Processing: Limit how we use your data in certain cases.
• Right to Withdraw Consent: Opt out of data processing based on consent (e.g., marketing).

To exercise these rights, contact us at privacy@cyberia.net.sa. We will respond within 30 days, as required by the PDPL.

10. Third-party websites

‍This Privacy Policy applies to this website only, which may include links to other websites. We are not responsible for the privacy practices of any third parties, including those that operate websites to which this website links.

‍

11. Web Analytics

‍‍Our website uses third-party Google Analytics services that may set cookies in your browser, in order to help us understand how visitors engage with our website. Google analytics collects data about the traffic, anonymously analyzes your use of the website, compiles reports on your website activity and provides other services related to your website activity. Google may transfer this information to third parties where required to do so by law or where those third parties process the information on Google's behalf. To learn more about Google analytics practices, please visit https://policies.google.com/privacy?hl=en_US

‍

12. Cookies

‍‍Our website employs third-party solutions that uses cookies and technologies to enable certain features and functionality and to collect additional information that helps us to improve this website and our services. We use third-party tools to track unique visitors to web pages. We do not control such third parties or their privacy practices. Depending on personal preference, you can limit or delete cookies. This preference can be implemented within your web browsers and gives you the ability to manage cookies to suit your requirements.

‍

13. Updates to This Policy

We may update this policy to reflect changes in our practices or legal requirements. We will notify you of significant updates via email or our website. The latest version will always be available here.

14. Contact Us

If you have questions, concerns, or requests regarding your personal data, please reach out to our Data Protection Officer (DPO) at:

Email: privacy@cyberia.net.sa
Phone: 800 124 8124
Address: Middle East Internet Co.
1st floor, Aba Elkheil Bldg
King Fahed Road
Riyadh, Saudi Arabia

We are committed to addressing your inquiries promptly and transparently.