📅 Last updated: January 2026
1. Who We Are
Cloudativ LLC ("Cloudativ", "we", "us", or "our") is a cloud consulting and services provider operating from offices in London (UK), Riyadh (Saudi Arabia), and Cairo (Egypt).
We are the data controller responsible for your personal information. If you have any questions about this Privacy Policy or how we handle your data, please contact us at privacy@cloudativ.com.
Registered addresses:
- UK: 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE
- KSA: Nimr Al Nakheel Centre, Building A, Riyadh 12381, Saudi Arabia
- Egypt: 5th Settlement, New Cairo, Cairo, Egypt
2. Data We Collect
We collect personal data in the following ways:
Information you provide directly:
- Contact details (name, email address, phone number) submitted via our contact form or emails
- Company name, job title, and business information you share during consultations
- Content of messages and enquiries you send us
- Information provided when registering for webinars, events, or assessments
Information collected automatically:
- IP address and approximate geographic location
- Browser type, operating system, and device information
- Pages visited, time spent on pages, and referring URLs
- Cookie identifiers (see Section 9 for details)
3. How We Use Your Data
We use the personal data we collect for the following purposes:
- Responding to enquiries: To reply to contact form submissions, emails, and calls
- Service delivery: To provide cloud consulting, migration, and managed services you have engaged us for
- Marketing communications: To send you relevant news, insights, and service updates — only where you have given consent or where we have a legitimate interest
- Improving our website: To understand how visitors use our site and improve the user experience
- Legal compliance: To comply with applicable laws, regulations, and lawful requests from public authorities
- Security: To detect, prevent, and address fraud, abuse, security risks, and technical issues
4. Legal Basis for Processing
Where GDPR or equivalent data protection law applies, we rely on the following legal bases:
- Consent: Where you have opted in to marketing communications or agreed to our use of non-essential cookies
- Contract performance: When processing is necessary to fulfil a contract or take pre-contractual steps at your request
- Legitimate interests: For business operations such as responding to enquiries, improving services, and ensuring security — where our interests are not overridden by your rights
- Legal obligation: When we must process data to comply with a legal requirement
5. Data Sharing & Third Parties
We do not sell, rent, or trade your personal data. We may share your data with:
- Service providers: Trusted vendors who help us operate our business (e.g. email delivery, CRM, analytics, cloud infrastructure) — bound by data processing agreements
- Professional advisors: Lawyers, accountants, and insurers where necessary
- Regulatory authorities: Where required by law or to protect our legal rights
- Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction
All third-party processors are required to keep your information secure and to use it only for the purposes we specify.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting obligations.
- Contact enquiries: Up to 3 years from the date of last contact
- Client records: 7 years from the end of the engagement (to comply with financial regulations)
- Marketing data: Until you withdraw consent or request deletion
- Website analytics: Anonymised data retained for up to 26 months
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your personal data ("right to be forgotten")
- Restriction: Request that we limit the processing of your data
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests or for direct marketing
- Withdraw consent: Withdraw any consent you have given at any time
To exercise any of these rights, please contact us at privacy@cloudativ.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
8. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These include:
- TLS/SSL encryption for all data transmitted via our website
- Access controls and role-based permissions for our internal systems
- Regular security assessments and employee training
- Incident response procedures in the event of a data breach
While we take all reasonable precautions, no transmission over the internet is completely secure. If you believe your data has been compromised, please contact us immediately.
9. Cookies
Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device that help us provide and improve our services.
Types of cookies we use:
- Essential cookies: Required for the website to function (session management, security). These cannot be disabled.
- Analytics cookies: Help us understand how visitors interact with our site (e.g. Google Analytics). Collected in anonymised form.
- Marketing cookies: Used to deliver relevant advertisements and track campaign performance. Only set with your consent.
You can manage or withdraw your consent for non-essential cookies at any time through your browser settings or our cookie consent banner.
10. International Transfers
Cloudativ operates globally with offices in the UK, Saudi Arabia, and Egypt. Your personal data may be transferred to and processed in countries outside your own, including countries that may have different data protection laws.
Where we transfer data from the UK or EEA to third countries, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the relevant authorities, or we rely on adequacy decisions where applicable.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised "Last updated" date.
If we make significant changes, we will notify you by email (if we have your contact details) or by displaying a prominent notice on our website prior to the change taking effect.
