Gray Hat Security (GHS) logo

Legal

Privacy Policy

Last updated: July 3, 2026

1. Introduction

Gray Hat Security ("GHS", "we", "us", "our") respects your privacy. This Privacy Policy explains what information we collect through ghs.sa, how we use it, and the choices you have. By using our website, you agree to the practices described here.

2. Information We Collect

We collect information in the following ways:

  • Information you provide: your name, company, email address, phone number, and any message details when you contact us, request an assessment, or book a consultation.
  • Booking data: when you use our online booking link to schedule a free assessment or demo, your name, email, and selected time slot are processed by Microsoft Bookings/Outlook, subject to Microsoft's own privacy terms.
  • Usage data: standard technical information such as IP address, browser type, device type, pages visited, and referring URLs, typically collected automatically via cookies or similar technologies.

3. How We Use Your Information

We use the information we collect to:

  • Respond to inquiries and schedule consultations or assessments;
  • Provide, maintain, and improve our website and services;
  • Send you information you have requested, such as follow-ups on a service inquiry;
  • Understand how visitors use our website so we can improve it;
  • Comply with legal obligations and protect the security of our systems.

We do not sell your personal information.

4. Cookies & Similar Technologies

Our website may use cookies or similar local storage technologies to remember preferences and understand site usage. You can control cookies through your browser settings; disabling them may affect some site functionality.

5. Sharing of Information

We do not sell or rent your personal information. We may share information with:

  • Trusted service providers who support our operations (for example, our website host or scheduling tools), bound by confidentiality obligations;
  • Authorities, where required by applicable law or to protect our legal rights.

6. Data Security

As a cybersecurity firm, we take data protection seriously. We use reasonable technical and organizational measures designed to protect the personal information we hold against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law and regulatory obligations relevant to our industry.

8. Your Rights

Depending on your jurisdiction, including under the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL), you may have the right to access, correct, delete, or restrict the processing of your personal information, and to object to certain uses. To exercise any of these rights, contact us using the details below.

9. Children's Privacy

Our website and services are intended for business audiences and are not directed at children. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the website after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

For questions about this Privacy Policy or to exercise your data rights, contact us at: