Privacy Policy
We keep this simple: we collect only what we need, we never sell your data, and we use it only to provide the service you asked for.
1. Who we are
Gulf Software Advisory is an independent enterprise software consulting practice. For the purposes of this policy, "we", "us", and "our" refer to Gulf Software Advisory. Our primary contact email is you@yourdomain.com.
2. What data we collect
We collect personal data only when you voluntarily provide it. This includes:
- Your name and email address when you request a results summary or book a consultation
- Your company name (optional) when submitted through our tools
- Tool inputs such as process selections, industry, and cost estimates used in our ROI calculator and readiness checklist
- Your messages when you interact with our AI chat assistant
We do not collect payment information, government IDs, or any sensitive personal data.
3. How we use your data
We use the data you provide to:
- Send you a personalised ROI and readiness summary report
- Follow up regarding your consultation booking
- Respond to enquiries you send us directly
- Improve the tools and content on this website
4. Legal basis for processing
We process your personal data on the basis of your consent (when you submit a form) and our legitimate interest in providing advisory services you have requested. You may withdraw consent at any time by contacting us.
5. Third-party services
We use the following third-party services which may process your data on our behalf:
- EmailJS — used to send your results report by email. Data is processed in accordance with EmailJS's privacy policy.
- Calendly — used for booking consultation calls. Data is processed in accordance with Calendly's privacy policy.
- Anthropic Claude API — used to power the AI chat assistant. Conversation content may be processed by Anthropic in accordance with their privacy policy.
We do not sell, rent, or share your personal data with any other third parties for marketing purposes.
6. Cookies
This website uses cookies to remember your cookie consent preference and to support the functionality of embedded third-party services. We do not use advertising or tracking cookies. You can decline non-essential cookies using the banner shown on your first visit.
7. Data retention
We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected — typically the duration of an active client engagement. If you have not engaged with us for 12 months, your data is deleted. You may request deletion at any time.
8. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw consent at any time
- Lodge a complaint with your local data protection authority
To exercise any of these rights, contact us at you@yourdomain.com and we will respond within 14 business days.
9. Data security
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. All data is transmitted over encrypted HTTPS connections.
10. International transfers
As we use third-party services headquartered outside the Gulf region, your data may be transferred to and processed in other countries. Where this occurs, we ensure appropriate safeguards are in place through the terms and privacy policies of those services.
11. Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the website after changes constitutes acceptance of the updated policy.
12. Contact
For any questions about this privacy policy or how your data is handled, please contact us at you@yourdomain.com.