Privacy Policy

Effective date: October 24, 2026
Last updated: October 24, 2026

MJOLNIR SECURITY - FZCO ("Mjolnir Security", "we", "us") is a cybersecurity firm based in Dubai, United Arab Emirates, and part of the Mjolnir Security group. This policy explains what personal data we collect through our website and in the course of our business, why we collect it, who we share it with and the choices you have. It does not cover the confidential client data we handle during an engagement, which is governed by the engagement agreement with that client.

1. Who is responsible

MJOLNIR SECURITY - FZCO is the controller of the personal data described in this policy. We handle personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other laws that apply to us. Our privacy contact is accountable for how we handle it.

Privacy contact: Milind Bhargava, Founder & CEO
Email: privacy@mjolnir.ae
Location: MJOLNIR SECURITY - FZCO, Dubai, United Arab Emirates

2. What we collect

Information you give us

Contact form and SOC sizing calculator: your name, work email, company, phone number (optional), the topic you choose and your message. For the calculator, also the environment details, budget range and timeline you enter, and the details of any partner helping you.
Chat: messages you type into the website chat, and any contact details you share there.
Marketing consent: whether you ticked the optional box agreeing to receive email from us. When you do, we record the date and time, your IP address, the page and the exact wording you agreed to, so we can prove consent.
Business dealings: billing contacts and correspondence when you engage our services.

Job applications submitted through the Mjolnir Security group's careers site are handled by the group under the notice shown on that site.

Information collected automatically

Technical data: when you visit, our hosting and security provider processes your IP address, browser and device type, the page requested and the time of the request, to deliver the site and protect it from abuse.

We do not use analytics or visitor-identification tools on this website.

3. Why we use it

To reply to your enquiry and to scope, propose and deliver services you ask about.
To send you insights, threat research and service updates, only if you gave consent. You can withdraw that consent at any time.
To protect our website and systems from abuse, including spam submissions.
To meet legal, accounting and regulatory obligations.

We process personal data on the basis of your consent, or where the PDPL otherwise permits it, for example where processing is needed to take steps at your request before entering into a contract, to perform a contract with you, or to comply with a legal obligation. We do not sell personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.

4. Who we share it with

We share personal data only with service providers and group entities that process it on our behalf, under contract and for the purposes above:

Provider	What it does for us	Where data may be processed
Pipedrive	Customer relationship management: stores contact form, calculator and chat enquiries; website chat	European Union or United States
Cloudflare	Website hosting, delivery and security	Global network
Google Fonts (Google)	Website fonts; your browser connects to Google to load them	United States and other countries
Mjolnir Security group entities	Shared services, including sales, delivery, finance and administration	Canada and other countries where the group operates

We may also disclose information where required by law, to protect our rights or the safety of others, to partners you ask us to work with on your engagement, or as part of a merger or sale of our business, subject to confidentiality.

Transfers outside the UAE. Some of the providers and group entities above process personal data outside the United Arab Emirates. We transfer personal data across borders only as the PDPL permits, and we put appropriate safeguards in place, such as contractual commitments on confidentiality, security and use, so that your data stays protected wherever it is processed.

5. Cookies and similar technologies

Essential: needed for the site to work, to remember your cookie choice and to stop spam. Always on.
Chat: the Pipedrive chat stores an identifier so a conversation continues across pages. It loads only if you allow chat, or when you click "Chat with us".

We do not use analytics, advertising or visitor-identification cookies. Chat is off until you choose in the cookie banner. You can change your choice at any time from the "Cookie settings" link in the footer, and you can also block or delete cookies in your browser.

6. How long we keep it

Enquiries and CRM records: three years after our last contact with you, unless you become a client.
Client business records: for the relationship plus the period required by applicable law.
Marketing consent records: for as long as we email you, plus three years, so we can prove consent.

When we no longer need personal data for these purposes, we delete or anonymize it.

7. How we protect it

We apply administrative, technical and physical safeguards appropriate to the sensitivity of the information, and we operate to the Mjolnir Security group's control set, which is independently audited under SOC 2 Type II. No method of transmission or storage is completely secure. If a breach affects your personal data, we will notify you and the competent authorities as the PDPL and applicable law require.

8. Your choices and rights

Under the PDPL, you can ask to:

access the personal data we hold about you, and learn how we process it;
correct personal data that is inaccurate or incomplete;
erase personal data we no longer need, subject to legal obligations;
restrict our processing of your personal data in the circumstances the law allows;
object to processing, including for direct marketing;
receive your personal data in a structured, commonly used format, or have it transferred to another controller where technically feasible;
withdraw consent, including marketing consent, at any time; every marketing email has an unsubscribe link.

If you are located in another jurisdiction, for example Saudi Arabia, Qatar, Bahrain, Oman, Singapore or India, you may have rights under your local data protection law. We honour those rights where they apply to our processing of your data.

Email privacy@mjolnir.ae. We will verify your identity and respond within 30 days.

If you are not satisfied with our response, you may be able to lodge a complaint with the data protection authority that is competent for you.

9. Children

Our website and services are not directed to anyone under 18, and we do not knowingly collect their information.

10. Changes

We will post any changes here and update the date above. If a change materially affects how we use information you have already given us, we will ask for your consent where required.

11. Contact

MJOLNIR SECURITY - FZCO, Dubai, United Arab Emirates
Privacy contact: Milind Bhargava, privacy@mjolnir.ae
General enquiries: sales@mjolnir.ae