Privacy Policy

SOC Root ("we", "us", "our") is a cybersecurity services provider operating internationally with a primary focus on the UAE and Jordan markets. We offer managed security services, vulnerability assessments, compliance consulting, and security awareness training.

For privacy inquiries, contact us at: [email protected]

We collect the following categories of data:

Contact & Identity Data: Name, email address, company name, and phone number — collected when you submit a form, create an order, or contact us.

Technical Data: IP address, browser type, and domain names — collected automatically for security scanning and operational purposes.

Service Data: Domains, scan results, and vulnerability reports — collected as part of delivering our cybersecurity services to you.

Communication Data: Messages, emails, and support requests — retained to ensure quality and continuity of service.

We use your data to:

We do NOT sell your data to third parties. We do NOT use your data for advertising purposes.

All personal data is:

Scan results and reports are retained for 12 months after service completion, then permanently deleted.

Depending on your jurisdiction, you have the right to:

To exercise any of these rights, contact: [email protected] with subject "Privacy Request — [Your Name]". We respond within 30 days.

SOC Root does not use advertising or tracking cookies. We use only:

You can disable cookies in your browser settings without affecting core website functionality.

We use the following sub-processors:

| Service | Purpose | Data Shared |

|---------|---------|-------------|

| Hetzner Cloud (DE) | Server infrastructure | IP, logs |

| Cloudflare Pages | Static site hosting & CDN | IP, request metadata |

| Outlook / SMTP | Email delivery | Email address |

| Telegram Bot API | Admin notifications | None (admin use only) |

All sub-processors are contractually bound to equivalent data protection standards.

We process personal data under the following legal bases:

Our servers are located in Germany (EU). If you are based in the UAE or Jordan, your data may be transferred to and processed in EU jurisdictions. We ensure such transfers comply with the UAE PDPL cross-border transfer requirements through appropriate safeguards.

We may update this policy to reflect regulatory changes or service updates. The "Last Updated" date at the top of this page will reflect any changes. We will notify active clients via email for material changes. Continued use of our services after policy updates constitutes acceptance.