Privacy Policy

1. Who we are

Preempt OSINT is a service owned and operated by Nebo Holdings Ltd, a company registered in Gibraltar ("we", "us", "Nebo Holdings"). Nebo Holdings is the data controller for personal data processed through this website and for enquiries submitted to us. You can reach us at Info@roshdatacenters.com.

2. What we collect

• Contact data you provide when requesting a demo or emailing us: name, business email, company, role, and message content.
• Technical data generated when you visit: IP address, browser and device type, referring page, and pages viewed.
• Consent records showing your cookie choices and when they were made.

We do not knowingly collect special category data, and we do not seek personal data from anyone under 16.

3. Why we process it and on what basis

• To respond to demo requests and support enquiries — performance of a contract or steps taken at your request.
• To operate, secure, and improve the website — our legitimate interest in running a safe and functional service.
• To set optional analytics cookies — your consent, which you may withdraw at any time.
• To meet legal, accounting, and regulatory obligations — compliance with a legal obligation.

4. Intelligence data

The Preempt OSINT platform analyses openly available and commercially available source material relating to infrastructure assets nominated by our customers. Where that material incidentally contains personal data, we process it on the basis of the legitimate interest of our customers and of Nebo Holdings in preventing and detecting cyber attacks, subject to a documented balancing assessment and to contractual data processing terms with each customer. In that context Nebo Holdings acts as a processor on behalf of the customer.

5. Sharing

We share personal data only with service providers who host our website, deliver our email, and support our platform, each bound by written confidentiality and data protection terms; with professional advisers; and with authorities where we are legally required to do so. We do not sell personal data.

6. International transfers

Nebo Holdings is established in Gibraltar. Where personal data is transferred outside Gibraltar, the UK, or the EEA, we rely on adequacy regulations or on standard contractual clauses together with appropriate supplementary measures.

7. Retention

Enquiry correspondence is kept for up to 24 months after the last contact. Consent records are kept for 12 months. Server and security logs are kept for up to 12 months. Data held under a customer contract is retained in line with that contract and deleted or returned on termination.

8. Your rights

Subject to applicable law you may request access to your personal data, correction, erasure, restriction, or portability; you may object to processing based on legitimate interests; and you may withdraw consent at any time without affecting prior processing. Email Info@roshdatacenters.com and we will respond within one month. You also have the right to complain to the Gibraltar Regulatory Authority or to your local supervisory authority.

9. Security

We apply access control, encryption in transit, logging, and least privilege across our systems, and we review these measures regularly. No online service can be guaranteed to be perfectly secure.

10. Changes

We may update this policy to reflect changes to our services or the law. The date at the top of this page shows when it was last revised.