Privacy Policy
Last updated: September 30, 2026
1. Who we are
Guard Security Training Ltd ("Guard", "we", "our") is a cybersecurity awareness training company registered in the Abu Dhabi Global Market (ADGM).
Guard Security Training Ltd
4th Floor, Z23, Mohamed Bin Zayed City
Abu Dhabi, United Arab Emirates
Phone: +971 52 995 0357
Email: privacy@guardsecuritytraining.com
2. Data we collect
When organizations enroll their staff in our platform, we process:
- Identity data: Name and work email address (provided by your employer)
- Training data: Module completion records, assessment scores, learning path progress
- Simulation data: Interaction with simulated phishing emails (click, report, ignore)
- Technical data: Browser type, OS, IP address (for access logging)
- Communication data: Information provided via contact forms, email, or phone
3. How we use data
Data is used solely to:
- Deliver security awareness training and phishing simulations
- Generate risk scores and effectiveness reports for your organization
- Identify employees who may benefit from additional coaching
- Improve training content based on aggregate trends
- Comply with contractual obligations to your organization
4. Legal basis for processing
- Legitimate interest: Your employer's interest in reducing cyber risk through awareness programs
- Contractual necessity: Processing required to fulfill our service agreement
- Consent: Where required by applicable law (e.g., website cookies)
5. Data sharing
- Your organization: Aggregated and individual metrics shared with designated security administrators
- Infrastructure providers: AWS and Azure for hosting (DPAs in place)
- Legal requirements: When required by law, regulation, or valid legal process
We do not sell personal data to third parties or use it for advertising.
6. International transfers
We operate from the UAE, UK, and Singapore. Data may be transferred between these jurisdictions under appropriate safeguards including Standard Contractual Clauses (SCCs) and adequacy decisions.
7. Retention
Training records: duration of service agreement plus 12 months. Website analytics: 26 months. Contact form submissions: 24 months. All data is securely deleted after the retention period.
8. Security
- AES-256 encryption at rest, TLS 1.3 in transit
- Role-based access with multi-factor authentication
- Regular penetration testing and vulnerability assessments
- Industry-standard security practices and regular third-party assessments
9. Your rights
You may have the right to access, rectify, delete, restrict processing of, or port your personal data, and to withdraw consent. Contact privacy@guardsecuritytraining.com. We respond within 30 days.
10. Cookies
- Essential: Required for site functionality
- Analytics: Help us understand usage (can be declined via the cookie banner)
11. Changes
Material changes will be communicated via email to organizations with active agreements. The date at the top reflects the most recent revision.
12. Contact