Enquiries opening soon · Online form not yet active.

⚠ Generic draft, not legal advice. Needs review before the form goes live.

Privacy notice

Privacy notice

Privacy notice

This notice explains how SectorGauge handles the personal data you send us through the Request a benchmark form or by email.

Draft dated 27 October 2026. Effective date: [to be set when this notice is approved and published].

1. Who is responsible for your data

1. Who is responsible for your data

[Data controller details to be confirmed before this privacy notice is finalised.]

Contact: [contact email, to be set after domain setup is verified].

2. What we collect

2. What we collect

Through the Request a benchmark form we collect:

  • your name, work email address and company;

  • your phone number, if you choose to give it;

  • the decision you want the research to support, your industry, your market and the competitors you name;

  • a record that you gave consent, and when.

If you email us, we also receive what you include in your message. The form host may process technical data, such as your IP address, to deliver the form and protect it against spam [to be confirmed with the form host].

Please do not include confidential information in the form or in your first message.

3. Why we use it

3. Why we use it

  • to read and reply to your enquiry;

  • to propose a scope for a benchmark;

  • to keep a record of your enquiry and our correspondence.

We do not use your details for marketing unless you separately agree, and we do not sell your personal data.

4. Legal basis

4. Legal basis

We process your enquiry data on the basis of your consent, which you give by ticking the box on the form. This applies under the Saudi Personal Data Protection Law (PDPL) and, where they apply to you, under the EU General Data Protection Regulation (GDPR) and the UK GDPR (consent, Article 6(1)(a)).

[Legal basis to be confirmed in legal review.]

You can withdraw your consent at any time by contacting us. Withdrawing consent does not affect processing that took place before you withdrew it. If you later become a client, the agreement with you will describe how data is handled for that work.

5. Who processes your data for us

5. Who processes your data for us

We use service providers to host the website form and to deliver email. We expect these to be:

  • Framer, as website and form host [to be confirmed];

  • Microsoft 365, as email provider for the sectorgauge.ai domain [to be confirmed].

Any other provider that receives enquiry data will be listed here before the form goes live. We share personal data only with these providers, as needed to run the service, or where the law requires it.

6. International transfers

6. International transfers

Our providers may store or process data outside the country where you are, including outside Saudi Arabia, the European Union or the United Kingdom. Where the law requires it, we will rely on the transfer safeguards it permits, such as those under the PDPL and its implementing regulations or standard contractual clauses under the GDPR and UK GDPR [details to be confirmed with each provider].

7. How long we keep it

7. How long we keep it

Proposal, to be confirmed: we delete enquiries that do not lead to an engagement 24 months after our last contact with you. If an engagement goes ahead, the agreement will set how long its records are kept. If you withdraw consent, we will delete your enquiry data unless the law requires us to keep it.

8. How we protect it

8. How we protect it

[security and storage measures to be described once providers are confirmed]

9. Your rights

9. Your rights

Under the Saudi PDPL you have the right to be informed about how your data is used, to access it and obtain a copy, to have it corrected, to have it destroyed when it is no longer needed, and to withdraw consent.

Under the GDPR and UK GDPR, where they apply, you also have the rights of access, rectification, erasure, restriction, objection and data portability, and the right to withdraw consent.

To use any of these rights, contact us at the address in section 1. We may need to confirm your identity first. You can also complain to the data protection authority in your country: in Saudi Arabia, the Saudi Data and Artificial Intelligence Authority (SDAIA); in the United Kingdom, the Information Commissioner’s Office (ICO); in the European Union, your local supervisory authority.

10. Cookies

10. Cookies

This draft site does not use analytics or advertising cookies. Any cookies or similar technologies used by the website host will be described here before launch [to be confirmed with the website host].

11. Changes to this notice

11. Changes to this notice

We will update this notice when our practices or providers change, and show the new effective date at the top.

12. Contact

12. Contact

For questions about this notice or your data: [contact email, to be set after domain setup is verified].