Privacy Policy

1. Introduction

IntegriqAI ("IntegriqAI", "we", "us") builds and deploys AI systems for businesses across the Gulf Cooperation Council (GCC) region, including the United Arab Emirates, the Kingdom of Saudi Arabia, and the wider Gulf. Protecting your personal data is fundamental to how we operate. This policy explains what personal data we collect through this website, how we use and safeguard it, and the rights available to you under the applicable data protection laws of the GCC.

2. Who We Are & Applicable Law

IntegriqAI is the data controller responsible for the personal data collected through this website. We process personal data in accordance with the data protection frameworks applicable across the region in which we and our clients operate, including:

• United Arab Emirates — Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the UAE PDPL), together with the applicable regulations of the UAE Data Office, and, where relevant, the DIFC Data Protection Law No. 5 of 2020 and the ADGM Data Protection Regulations 2021.
• Kingdom of Saudi Arabia — the Personal Data Protection Law issued by Royal Decree No. M/19 of 2021 (as amended) and its Implementing Regulations, supervised by the Saudi Data & AI Authority (SDAIA).
• Other GCC personal data protection laws (including those of Bahrain, Qatar, and Oman) where they apply to a client engagement.

3. The Data We Collect

We collect only the data needed to respond to your enquiry and deliver our services. This may include: Identity Data (name, job title, role); Contact Data (work email, phone number, company); Business Data (company website, size, sector, budget indication); Project Data (the details you share about your operations and goals); and Technical Data (IP address, browser type, and basic usage information collected automatically when you visit the site).

4. How Your Data Is Collected

We collect personal data through your direct interactions with us — primarily when you submit the contact form, request a proposal, or book a discovery call — and through standard, privacy-respecting technical means when you browse the site.

5. Lawful Basis & How We Use Your Data

We process personal data only where we have a lawful basis to do so under the applicable GCC laws — namely your consent, the performance of a contract, our legitimate business interests, or compliance with a legal obligation. We use your data to respond to enquiries, schedule and conduct consultations, scope and deliver engagements, and communicate with you about our services. We do not sell your personal data.

6. Service Providers & Sub-Processors

We rely on a small number of trusted service providers to operate this website and communicate with you (for example, hosting, database, email delivery, and scheduling providers). These providers process data only on our instructions and under confidentiality and data protection obligations consistent with GCC requirements.

7. International & Cross-Border Transfers

Some of our service providers may process data outside your country of residence. Where personal data is transferred across borders, we ensure an adequate level of protection through appropriate safeguards, in line with the cross-border transfer requirements of the UAE PDPL, the KSA PDPL, and other applicable GCC laws.

8. Data Security

We apply appropriate technical and organisational measures — including encryption in transit, access controls, and least-privilege practices — to protect personal data against unauthorised access, alteration, disclosure, or loss.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy and to meet any legal, regulatory, or contractual obligations under applicable GCC law, after which it is securely deleted or anonymised.

10. Your Rights

Subject to the applicable law in your jurisdiction, you have the right to access, correct, or delete your personal data; to restrict or object to certain processing; to request data portability; and to withdraw consent where processing is based on it. You also have the right to lodge a complaint with the competent supervisory authority — the UAE Data Office in the United Arab Emirates, or SDAIA in the Kingdom of Saudi Arabia. To exercise any of these rights, contact us using the details below.

11. Third-Party Links

Our website may link to external sites we do not operate. We are not responsible for the content or privacy practices of those third-party sites, and we encourage you to review their policies.

12. Children's Privacy

This website and our services are intended for businesses and are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

13. Contact Us

For any question about this policy, or to exercise your rights, contact us at:

Email: info@integriqai.com

14. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with a revised "Last updated" date.