Privacy Policy
Last updated: 22 June 2026
NetXol Technologies ("NetXol", "we", "us", "our") respects the privacy of every person who interacts with our website, products and services. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and the rights you have over it.
Plain summary
We only collect the data we need to respond to your enquiry, deliver a contracted service, or improve our website. We do not sell personal data. You can contact us at any time to access, correct or delete the data we hold about you.
1. Who we are (data controller)
For the purposes of this Policy, the data controller is NetXol Technologies, with its global headquarters in Riyadh, Kingdom of Saudi Arabia, and operating offices in Lahore (Pakistan) and Madrid (Spain). You can reach our team about anything in this Policy at info@netxol.com.
2. What information we collect
- Contact data you give us via the contact or RFP form: name, work email, company, role, country, message and any RFP document you choose to attach.
- Account data for any administrative or operator portal you log into (username, encrypted password hash, session identifier).
- Usage data automatically collected as you browse: pages viewed, referrer, approximate region from your IP address, browser and device family.
- Cookies and similar technologies that keep you logged in, remember preferences and help us understand aggregate usage (see "Cookies" below).
- When you are a customer or partner, the business contact details required to deliver our services and operate our account with you.
3. Why we collect it (lawful bases)
Purpose → lawful basis
| Reply to your enquiry / scope your RFP | Performance of pre-contract steps you have requested; legitimate interest. |
| Provide our products and operate accounts | Performance of the contract between us. |
| Send service announcements (security, breaking changes) | Legitimate interest; vital where the change is safety-critical. |
| Send marketing emails to business contacts | Legitimate interest (B2B), with opt-out in every email. |
| Analytics and product improvement | Legitimate interest, balanced against your privacy expectations. |
| Comply with legal obligations | Legal obligation (e.g. tax, security, lawful requests). |
4. Who we share data with
- Sub-processors who help us run the service — cloud hosting, email delivery, analytics — under written data-processing agreements.
- Professional advisors (auditors, lawyers, accountants) when required for legal or contractual compliance.
- Authorities, where compelled by a lawful order applicable to NetXol or its sub-processors.
- Group companies that operate under common control, only where necessary to support you under one contract.
What we do not do
We do not sell personal data. We do not share your data with third parties for their own marketing purposes. We do not use the contents of your RFP documents to train models without your written consent.
5. Where data is processed
NetXol operates from Riyadh, Lahore and Madrid. Depending on the service you use, your data may be processed in any of these locations, in the United Arab Emirates, in the European Union or in the United States (where some of our cloud and email-delivery providers are based). Where transfers outside your jurisdiction occur, we rely on lawful transfer mechanisms — typically Standard Contractual Clauses or local-law equivalents.
6. How long we keep data
| Contact-form submissions | Up to 24 months from last interaction, then deleted. |
| RFP attachments | Up to 24 months from receipt, then deleted or anonymised; longer where you become a customer. |
| Customer account records | For the term of the contract plus the period required by tax, audit and statutory obligations. |
| Analytics and logs | Up to 13 months in aggregate / pseudonymised form. |
| Cookies | See cookie expiry in each cookie; never more than 13 months for analytics cookies. |
7. Security
We protect personal data with administrative, technical and physical safeguards proportionate to the risk: encryption in transit (TLS), encryption at rest where applicable, access on a need-to-know basis with audited authentication, secret-management for credentials, secure software development practices, third-party security review, and incident response procedures. No system is perfect; we tell you promptly if we discover anything that affects your data.
8. Your rights
- Access — ask us what personal data we hold about you and obtain a copy.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete personal data, subject to legal retention obligations.
- Restriction — ask us to limit how we process your data while a query is resolved.
- Objection — object to processing based on our legitimate interest.
- Portability — receive your data in a portable, machine-readable format.
- Withdraw consent — at any time, where we rely on your consent.
- Complain — to your local data-protection regulator if you believe we have not acted lawfully.
To exercise any of these rights, email info@netxol.com with the subject "Privacy request". We will respond within 30 calendar days and may need to verify your identity before we act.
9. Cookies and similar technologies
We use a small number of cookies to operate the site (session, security), to remember your preferences (language, theme), and to understand aggregate usage. Non-essential cookies are set only with your consent where applicable law requires it. You can clear or refuse cookies in your browser at any time; some site functionality will not work without essentials.
10. Children
Our website and services are for business users and are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
11. Updates to this Policy
We revise this Policy when our practices change, when the law changes, or to clarify our existing practices. We will publish the updated version on this page with a new "last updated" date. For material changes that affect you, we will notify you separately where reasonably practicable.
12. Contact us
For anything in this Policy — questions, requests or complaints — email info@netxol.com. For postal correspondence, write to NetXol Technologies, Olaya District, Riyadh, Kingdom of Saudi Arabia.