Privacy Policy

1. Introduction

Al Sabbagh Syber X Fortress Consultancy - Single Person LLC ("Syber X Fortress", "we") respects the privacy of its website visitors, clients, and service applicants. This policy explains what personal data we collect through the website, how we use it, who we share it with, and what your rights are regarding it.

2. Who We Are

• Trade name: SYBER X FORTRESS
• Registered legal name: Al Sabbagh Syber X Fortress Consultancy - Single Person LLC
• Legal name: AL SABBAGH SYBER X FORTRESS CONSULTANCY O.P.L.L.C
• Commercial registration number: 0111024014, dated 19/08/2026
• Licensing authority: Ministry of Economy and Industry — Directorate of Internal Trade and Consumer Protection — Damascus
• Registered address: Damascus, Sahat Al-Mouhafazat, Ittihad Al-Ummal Building, Syrian Arab Republic
• Privacy contact email: info@syberxfortress.com

3. Data We Collect

We collect the following categories of data only when you interact with us directly through the website's contact form:

• Identification data: full name, organization name.
• Contact data: email address, and phone number if provided.
• Request content: inquiry subject and message text.
• Basic automatic technical data (browser and device type, public IP address) for security and analytical purposes only.

4. How We Use Your Data

• Responding to your inquiries and security assessment requests.
• Communicating about requested services and preparing technical proposals.
• Improving the quality of the website and user experience.
• Complying with any applicable legal obligation.

5. Legal Basis for Processing

We process your data based on: (a) your explicit consent when submitting the contact form, (b) the company's legitimate interest in responding to prospective client inquiries, and (c) the performance of a contractual obligation where an existing service relationship applies.

6. Sharing Data with Third Parties

We do not sell your personal data to any party under any circumstances, and we do not share it with any external party except the following technical service providers, who act on our behalf solely to operate the website:

• Resend — for delivering emails generated by the contact form only.
• Vercel — for hosting and running the website.

Your data is not shared with any other party, including any external accounting, marketing, or consulting party.

7. Data Retention Period

We retain contact form data for three (3) months from the date of last contact, unless an ongoing contractual relationship requires retention for a longer period in accordance with the legal and accounting obligations applicable in the Syrian Arab Republic.

8. Information Security

We apply reasonable technical and organizational measures to protect your data from unauthorized access, loss, or disclosure, appropriate to the nature of our work as a company specialized in cybersecurity. However, absolute security of any data transmission over the internet cannot be guaranteed.

9. Your Rights Regarding Your Data

• Accessing the data held about you.
• Requesting correction of any inaccurate data.
• Requesting deletion of your data, within legal limits.
• Objecting to the processing of your data or withdrawing your consent at any time.

To exercise any of these rights, contact us at info@syberxfortress.com.

10. Cookies and Analytics

This website currently does not use any analytics or advertising tracking tool (such as Google Analytics or Meta Pixel), nor marketing cookies. Any essential technical files necessary for the website's operation are not used to identify you personally.

Should any analytics or advertising tracking tool be activated in the future, this policy will be updated immediately to accurately describe it, and your explicit consent will be requested via a dedicated notice before any such tracking is activated.

11. Cross-Border Data Transfer

Your data may be processed by the above-mentioned service providers (Vercel and Resend) on servers located outside the Syrian Arab Republic. We ensure that any such transfer takes place with adequate safeguards to protect your data.

12. Children's Privacy

This website does not target individuals under the age of eighteen (the age of legal majority under Syrian civil law), and we do not knowingly collect personal data from minors.

13. Changes to This Policy

We may update this policy from time to time. Any material amendment will be published on this page along with the date of the last update.

14. Status of Personal Data Protection Law in Syria

The Syrian Arab Republic enacted Law No. 12 of 2024 on the Protection of Personal Electronic Data, with an official effective date of 1 January 2025. Given the institutional and constitutional changes the country underwent immediately following that date, no confirmed official information is currently available, as of the date of this policy, regarding the continued practical application of this law or the operational status of the authority it established. Regardless of this uncertainty, and out of our commitment to the highest standard of protection, AL SABBAGH SYBER X FORTRESS CONSULTANCY O.P.L.L.C voluntarily adheres to the core principles of this law — including obtaining explicit consent before collecting data, clearly disclosing our data-processing practices, exercising caution with any cross-border data transfer, and promptly reporting any security breach affecting your data — in addition to applicable international best practices in this field.

15. Governing Law

This policy is governed by and construed in accordance with the laws of the Syrian Arab Republic, and the Syrian courts have exclusive jurisdiction over any dispute arising from it.

16. Contact Us

For any inquiry regarding this policy or to exercise your rights: info@syberxfortress.com.