What I do with your data. In plain words.
This is a real privacy notice, not a template I pasted. It's short because I collect very little and do very little with it.
If you take the GCC Growth Score: your answers, your market, vertical, approximate revenue band and team size. If you ask for the full report: your first name, company, work email and WhatsApp number. If you book a call: whatever the calendar and pre-call form collect. That's the entire list.
What I do with itSend you your report. Send you one follow-up. Improve the benchmark — your answers become part of the anonymised sample the peer comparison is eventually built from, with nothing identifying attached.
What I don't do with itI don't sell it. I don't rent it. I don't share it with a partner, an affiliate, or a data broker. I don't add you to a list you didn't opt into. If I ever want to use your data for something not on this page, I'll ask first, and you can say no without losing your report.
The WhatsApp opt-inIt's explicit and it's unticked by default, because the alternative is legally wrong in this region and personally irritating everywhere. You get your report and one follow-up. Reply STOP and it stops immediately — no retention flow, no "before you go."
How long I keep itYour score data: as long as it's useful to the benchmark, in anonymised form. Your contact details: until you ask me to delete them, or until it's obvious we're not going to work together and I'm just holding data for no reason.
Your rightsAsk me what I have on you and I'll tell you. Ask me to delete it and I'll delete it, and confirm when it's done. Ask me to correct it and I'll correct it. Email mohammedyaseenba23@gmail.com — you'll get me, not a ticket.
Cookies and analyticsThis section will state exactly what runs on the site and what it records. [To be completed before launch.]
Where the data livesThe jurisdiction where your data is stored will be named here. [To be completed before launch.]
The regulationsThis notice is written to meet UAE and Saudi PDPL requirements and India's data protection rules, since I'm currently based in Kerala and relocating to Dubai in Q4 2026. If you're in the EU, GDPR applies regardless of where I sit, and the rights above are the ones it gives you anyway.
If I get this wrongTell me. mohammedyaseenba23@gmail.com. I'd rather fix it than argue about it.
I collect the minimum, I use it for what I said, and I delete it when you ask. If a privacy policy needs two thousand words, it's usually hiding something in paragraph forty.