Last updated: 19 October 2026
Who we are
Wadeh Cyber Security (“Wadeh”, “we”) provides managed cyber security to businesses in the UAE and is based in Dubai Airport Freezone (DAFZA). We handle personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and the other laws that apply to us.
What we collect
We only collect what we need:
- This website: no cookies, analytics or advertising trackers. The Security Score and the price calculator run in your browser and send nothing to us unless you choose to message us. Our website host keeps standard server logs, such as IP address and pages requested, for security.
- When you message us: your name, phone number, the messages you send and anything you choose to share, such as your Security Score.
- When you become a client: the names, work email addresses, phone numbers and roles of your contacts, and billing details.
- Security data from your systems: device and user names, IP addresses, sign-in activity, and details of alerts, files, emails and websites flagged as threats. Our security tools collect this so we can watch, investigate and report.
- The Wadeh client portal: your name, work email, role and language; your password, stored only in a one-way encrypted form; your two-step sign-in settings; and sign-in times, IP addresses and actions, kept to protect your account.
How we use it
To reply to you and give you a quote; to deliver the service we agreed with your business (watching for threats, responding to them and reporting to you); to keep our systems and your portal account secure; to send invoices; and to meet our legal obligations. We rely on your consent, on our contract with your business, or on a legal requirement, as the law allows. We do not sell personal data or use it for advertising.
Who we share it with
Only with the providers that help us deliver the service, under agreements that require them to protect it:
- Sophos, for device protection and monitoring.
- Microsoft, for Microsoft 365 and its security features.
- Our hosting and email delivery providers, for this website and the client portal.
- WhatsApp, when you message us there.
We may also share data when the law requires it, for example with UAE authorities after a cyber attack.
Where it is stored
Our providers may store and process data in data centres inside or outside the UAE. Where data leaves the UAE, we use providers that protect it to the standard UAE law expects. Before you sign, we tell you in writing where each service keeps your data.
How long we keep it
- Messages from people who do not become clients: up to 12 months after our last contact.
- Client security data and portal records: for as long as you are a client, then up to 12 months, unless you ask us to delete them sooner or the law requires us to keep them longer.
- Portal backups: 14 days.
- Invoices and contracts: as long as UAE law requires.
How we protect it
We encrypt data in transit, encrypt the credentials we hold for your security tools, require two-step sign-in for all Wadeh staff, give each person access only to what their job needs, and record who did what in the portal. If a breach affects your personal data, we tell you and the authorities as the law requires.
Your rights
You can ask us to show you the personal data we hold about you, correct it, delete it, limit how we use it, or stop using it, and you can withdraw your consent at any time. If your data reached us through your employer’s contract with us, we may need to check with your employer first. To make a request, message us on WhatsApp. If you are not happy with our answer, you can complain to the UAE Data Office.
Children
Our services are for businesses. We do not knowingly collect data about children.
Changes to this policy
When we change this policy, we update the date at the top of this page. If a change affects how we use your data, we tell our clients directly.
Contact
Message us on WhatsApp at +971 50 943 7608.