marsadcomply.com is a brochure site operated by Marsad Technology (DIFC) Ltd. We collect very little. This page is the full account of what is processed, why, and under which law.
This site and the MARSAD platform are built and delivered by Marsad Technology (DIFC) Ltd ("Marsad", "we", "us"). "MARSAD" and "Marsad Comply" are trading names of Marsad Technology (DIFC) Ltd. For the limited personal data this site processes, Marsad Technology (DIFC) Ltd is the controller.
This policy applies to the brochure site at marsadcomply.com (and subdomains such as status.marsadcomply.com). The MARSAD platform itself is deployed inside each customer bank's own infrastructure and is governed by the contract and privacy posture of that deployment, not this page.
As a DIFC-incorporated company, our processing of personal data is governed by the DIFC Data Protection Law, DIFC Law No. 5 of 2020 ("DP Law 2020") and its regulations, supervised by the DIFC Commissioner of Data Protection.
Because this site is addressed primarily to banks in the Kingdom of Saudi Arabia, the Saudi Personal Data Protection Law (PDPL) may also apply to data relating to individuals in the Kingdom. Where both regimes apply, we apply the stricter of the two.
marsadcomply.com is intentionally minimal. The brochure site does not host accounts, does not require login, has no contact form, and runs no third-party analytics or advertising trackers. What that leaves:
hello@, support@, security@) we keep your message and reply for as long as the conversation is active and a reasonable retention window after.The site does not set cookies. It does not embed third-party scripts. Fonts are self-hosted. Open Graph and Twitter card meta tags resolve to images served from this domain.
We do not collect, infer, or process any of the following on marsadcomply.com:
The minimal processing this site does (server logs, email correspondence) rests on our legitimate interests (Article 10(1)(f), DP Law 2020) in operating a secure, debuggable public website and in responding to people who choose to write to us. No automated decision-making, no profiling.
The brochure site is hosted on a third-party static-site provider; server logs and email are processed in the provider's jurisdiction. Where that involves transferring personal data out of the DIFC, we rely on the transfer mechanisms in Part 4 of the DP Law 2020 (adequacy or appropriate safeguards).
The MARSAD platform itself (where customer bank data lives) is hosted inside the customer's chosen sovereign cloud and is governed by the deployment contract, separately from this brochure.
We do not sell, rent, or share the data processed by this site with third parties for marketing. The static-site host and the email provider act as processors under standard contractual terms; we use them only to deliver the site and respond to inbound enquiries.
If we hold personal data about you (in practice, only what you've sent us by email), you have the rights set out in Part 6 of the DP Law 2020 (access, rectification, erasure, restriction, objection, and data portability) and, for individuals in Saudi Arabia, the corresponding rights under the PDPL. Send any request to hello@marsadcomply.com.
If you are unsatisfied with our response, you may lodge a complaint with the DIFC Commissioner of Data Protection; individuals in the Kingdom may also contact the Saudi Data & AI Authority (SDAIA) as the PDPL's competent authority.
The brochure site enforces TLS, ships a strict Content Security Policy, and discloses our security-research contact via /.well-known/security.txt. For coordinated disclosure, write to security@marsadcomply.com.
If we change this policy we will update the date below. For material changes, the previous version stays accessible via site history.
Privacy questions about this site: hello@marsadcomply.com, or by post to the registered office above.
Privacy posture of a specific MARSAD deployment: contact the bank that operates that deployment.