Privacy & trust
Privacy policy
This policy explains how MENA GRC Community handles information when you use this website.
1. Who we are
This website is operated by MENA GRC Community. Questions about this policy or your personal data may be sent to info@menagrc.com.
2. Information we collect
We collect information you choose to provide through account registration, resource publishing, the community survey and the contact form, including your name, email, organisation, message and submitted materials. We may also receive essential technical information needed to secure and operate the website. In addition, we record anonymous usage statistics — such as page visits, resource downloads and tool completions — that are not linked to your name or email.
3. How we use information
We use information to operate the resource library, manage member and contributor access, respond to enquiries, protect the service from misuse and improve the community experience. We do not sell personal data.
4. Contact messages
Contact submissions are stored securely so the community team can review and respond. They are not publicly visible. Email delivery to info@menagrc.com will be enabled after the domain and mailbox are verified.
5. Assistant conversations
The GRC Assistant sends the current conversation to an AI service to generate a response. Conversation history is held only in the current browser visit and is not intentionally stored by this website. Do not enter confidential, sensitive or personal information.
6. Storage, cookies and retention
We use essential browser storage for language preference and authentication. We retain account and published-resource data while the account or content remains active, and contact messages only as long as reasonably needed for follow-up, security and applicable obligations.
7. Sharing and safeguards
Data may be processed by trusted hosting, database and AI service providers only where needed to deliver the website. We use reasonable technical and organisational safeguards, but no internet service can guarantee absolute security.
8. Your choices and rights
Subject to applicable law, you may ask to access, correct or delete your personal data, or raise a privacy concern, by contacting info@menagrc.com. We may need to verify your identity before acting.
9. Governing framework and changes
This policy is subject to the laws and regulations of the Kingdom of Saudi Arabia, including applicable personal data protection requirements. We may update it as the service develops and will publish the revised date here.