Privacy Policy.

Your data is handled with the same rigour we apply to sovereign compute security.

Effective Date: 1 July 2026

Governing Law: Saudi Personal Data Protection Law (PDPL); EU GDPR where applicable

Contact: privacy@aternaworld.com

1. Who We Are

Aterna World (‘we’, ‘us’, ‘our’) is the data controller responsible for personal data collected through this Website. Our registered office is in Riyadh, Kingdom of Saudi Arabia. For all data protection enquiries, please contact us at privacy@aternaworld.com.

2. Data We Collect

2.1 Data You Provide Directly

We collect personal data that you voluntarily provide when you:

  • Complete an enquiry, contact, or briefing request form (name, organisation, email address, job title, nature of enquiry)
  • Register for the Investor Portal (name, organisation, email address, investor type)
  • Request restricted technical documentation (name, organisation, email address, use case)
  • Register for G1 Alpha evaluation units or G1 Production allocation (name, organisation, email, deployment scale)
  • Submit a careers application or introduction (name, contact details, professional background)
  • Subscribe to progress updates or communications (name, email address)

2.2 Data Collected Automatically

When you visit our Website, we may automatically collect certain technical data including:

  • IP address and approximate geographic location (country / city level)
  • Browser type, version, and operating system
  • Pages visited, time spent on pages, and navigation paths
  • Referring URL (the page you visited before arriving at our Website)
  • Device type and screen resolution
  • Cookie and session identifiers (see our Cookie Policy for details)

Aterna World does not warrant that the Website will be uninterrupted, error-free, or free of viruses or other harmful components. You assume sole responsibility for your use of the Website and any reliance you place on its content.

2.3 Data We Do Not Collect

We do not collect special category personal data (including racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required and explicitly consented to. We do not knowingly collect personal data from individuals under the age of 18.

3. How We Use Your Data

Purpose Legal Basis
Responding to enquiries and briefing requests Legitimate interests (pre-contractual engagement)
Processing Investor Portal registrations and NDA management Contractual necessity; Legitimate interests
Managing access to restricted technical documentation Contractual necessity; Legal obligation (ITAR / export control compliance)
Processing G1 allocation registrations Contractual necessity
Sending progress updates and communications (where opted in) Consent
Processing careers applications Legitimate interests (recruitment)
Website analytics and performance monitoring Legitimate interests (improving user experience)
Compliance with legal obligations including ITAR, Saudi PDPL, and applicable export control regulations Legal obligation
Fraud prevention and security monitoring Legitimate interests; Legal obligation

4. Data Sharing

4.1 With Whom We Share Data

We do not sell, rent, or trade your personal data. We may share data with:

  • Trusted service providers acting as data processors on our behalf (e.g. CRM platforms, email delivery services, data room providers), who are contractually bound to process data only on our instructions and to appropriate security standards
  • Legal and professional advisors, under strict confidentiality obligations
  • Regulatory authorities, courts, or law enforcement agencies where required by applicable law or court order
  • In the context of ITAR compliance, US government authorities as required under the International Traffic in Arms Regulations

4.2 International Transfers

Your personal data may be transferred to and processed in countries outside the Kingdom of Saudi Arabia, including the United States (in connection with our ITAR-compliant manufacturing operations). Where such transfers occur, we ensure appropriate safeguards are in place in accordance with the Saudi Personal Data Protection Law and, where applicable, EU GDPR transfer mechanisms.

5. Data Security

Aterna World implements technical and organisational security measures commensurate with the sensitivity of the data we hold and the nature of our operations in sovereign technology environments. These measures include:

  • Encryption of data in transit (TLS 1.3 or higher) and at rest
  • Access controls limiting data access to authorised personnel only, on a need-to-know basis
  • Secure, auditable data room infrastructure for restricted technical documentation
  • Regular security assessments and penetration testing
  • Staff training on data protection and security obligations

 

No transmission over the internet is completely secure. While we take all reasonable steps to protect your personal data, we cannot guarantee the security of data transmitted to our Website.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are:

Retention Table
Data Category Retention Period
Enquiry and contact form submissions 3 years from last contact
Investor Portal registrations and NDA records 7 years from execution of NDA or last engagement
Technical documentation access records 7 years (ITAR compliance requirement)
G1 allocation registrations 5 years from registration or fulfilment
Careers applications (unsuccessful) 12 months from application date
Website analytics data 26 months from collection
Communication opt-in records Duration of subscription plus 3 years

7. Your Rights

Subject to the Saudi Personal Data Protection Law and, where applicable, the EU General Data Protection Regulation, you have the following rights in relation to your personal data:

  • Right of Access — to request a copy of the personal data we hold about you
  • Right of Rectification — to request correction of inaccurate or incomplete data
  • Right of Erasure — to request deletion of your data in certain circumstances
  • Right to Restrict Processing — to request that we limit the way we use your data
  • Right to Data Portability — to receive your data in a structured, machine-readable format
  • Right to Object — to object to processing based on legitimate interests
  • Right to Withdraw Consent — where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing

 

To exercise any of these rights, please contact us at privacy@aternaworld.com. We will respond within 30 days of receiving your request. We may need to verify your identity before processing your request.

8. Cookies

We use cookies and similar tracking technologies on our Website. For full details of the cookies we use, why we use them, and how to manage your preferences, please see our Cookie Policy (Section 04 of this document).

9. Children's Privacy

Our Website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us at privacy@aternaworld.com and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page with a revised effective date. Where changes are material, we will notify registered users by email where we hold a valid email address.

11. Contact and Complaints

For any questions about this Privacy Policy or to exercise your data rights, please contact our Privacy function at privacy@aternaworld.com.

If you are a resident of the European Economic Area and you believe we have not handled your data in accordance with applicable law, you have the right to lodge a complaint with your national data protection supervisory authority. If you are a resident of the Kingdom of Saudi Arabia, you may contact the Saudi Data and Artificial Intelligence Authority (SDAIA).