How Alboum handles personal information.

1. Scope

Alboum provides software development, cybersecurity, penetration testing, security readiness, and technology consulting services. This policy applies to personal information collected through our website, contact forms, WhatsApp links, email, phone calls, business meetings, and project communications.

This policy does not replace any signed contract, non-disclosure agreement, data processing agreement, penetration testing scope, or project-specific security terms agreed with a client.

2. Information we collect

We collect only the information reasonably needed to respond to inquiries, provide services, maintain our website, and operate our business.

• Contact information: name, company name, email address, phone number, job title, and message details.
• Project information: requirements, business context, technical scope, files or screenshots you choose to share, meeting notes, and communication history.
• Cybersecurity engagement information: authorized scope, asset lists, technical evidence, logs, findings, remediation notes, and report materials shared or generated during a security engagement.
• Website and technical information: IP address, device/browser information, approximate location, pages visited, referral source, and similar usage data.
• WhatsApp and communication data: if you contact us through WhatsApp, email, phone, or social platforms, those providers may process your communication according to their own policies.

3. How we use information

• To respond to inquiries and schedule consultations.
• To understand your software, cybersecurity, or business requirements.
• To prepare proposals, scopes of work, quotes, and project plans.
• To deliver software development, cybersecurity, consulting, support, and reporting services.
• To secure, maintain, troubleshoot, and improve our website and internal operations.
• To keep business records, invoices, project documentation, and compliance records where needed.
• To send relevant service updates or follow-up communications, where appropriate.

4. Legal basis, consent, and business need

Depending on the context and applicable requirements, we process information based on your request or consent, our need to perform a contract or take steps before entering a contract, our legitimate business interests, legal obligations, or security requirements.

For cybersecurity work, we only test systems within an agreed and authorized scope. Clients are responsible for ensuring they have the authority to request testing or assessment of the systems, accounts, data, and environments included in the scope.

5. Sharing information

We do not sell personal information. We may share information only where needed for business operations, service delivery, legal requirements, or client-authorized project work.

• Cloud, hosting, analytics, email, collaboration, or communication providers.
• Professional advisers such as accountants, lawyers, auditors, or insurers.
• Contractors or specialists working under confidentiality obligations for a specific project.
• Government, regulatory, law enforcement, or court authorities where required by applicable law.
• Successor entities if Alboum is involved in a business restructuring, merger, or transfer of assets.

6. Security, confidentiality, and cybersecurity materials

We use reasonable administrative, technical, and organizational measures to protect information. No website, email, cloud service, or communication channel can be guaranteed to be completely secure.

Cybersecurity reports, vulnerability details, logs, screenshots, and remediation notes are treated as confidential project materials and are shared only with authorized client contacts or as otherwise agreed in writing.

7. Cookies and analytics

Our website may use cookies or similar technologies for basic functionality, performance, analytics, and security. We use analytics tools, including Google Analytics, to understand how visitors use the site and improve content and usability.

You can manage or block cookies through your browser settings. Blocking cookies may affect some website features.

8. Retention

We keep information for as long as needed for the purpose it was collected, including responding to inquiries, delivering services, maintaining records, resolving disputes, meeting legal or accounting requirements, and protecting legitimate business interests.

Project and cybersecurity materials may be retained for a period agreed with the client or as reasonably needed for reporting, support, quality assurance, legal, or security reasons.

9. Your choices and requests

Depending on applicable law and the nature of the information, you may request access, correction, deletion, restriction, objection, withdrawal of consent, or a copy of certain personal information. We may need to verify your identity before responding.

Some information may need to be retained where required for legal, contractual, accounting, security, or legitimate business reasons.

10. International services and third-party platforms

Some service providers used by Alboum may process or store information outside Kuwait. Where this happens, we aim to use reputable providers and apply reasonable safeguards appropriate to the information and service involved.

11. Children

Our website and services are intended for businesses and professional users. We do not knowingly collect personal information from children through this website.

12. Changes to this policy

We may update this policy from time to time. The updated version will be posted on this page with a revised “Last updated” date.

13. Contact Alboum

If you have a privacy question or want to make a privacy-related request, contact us using the details below.