What happens to what you tell us.

In this policy:

• Website means this website, available at www.surveyarabia.com.
• You means the individual using the Website, or the company or organisation on whose behalf that individual is using it.
• Personal Data means any information relating to an identified or identifiable individual.
• Usage Data means technical data generated when the Website is accessed or used, such as server logs, IP address, request time, browser type, device type, and pages visited.
• Service Provider means a company that processes data on our behalf so we can operate the Website and respond to enquiries.

We collect only what is needed to operate the Website and respond to what you ask us for.

If you send an enquiry, we may receive:

• your name;
• company name;
• email address;
• phone number, if you provide it;
• the kind of research or decision you are asking about;
• anything you write in the message field.

If you use the study-plan builder, we receive the question you are trying to answer and the answers you provide as the builder shapes it into a draft research path.

Your name, company, email address, or phone number are only sent to us if you choose to request a quote, submit a brief, or contact us.

Our website and hosting providers may collect ordinary technical information needed to serve and secure the Website, such as IP address, request time, browser, device type, pages visited, and server logs.

This information is used for security, troubleshooting, performance, and website operation. We do not use it to build a personal profile of you.

This Website is intended for business and research enquiries.

Please do not send sensitive personal data through the Website or study-plan builder unless we specifically ask for it and explain why it is needed.

This includes information such as health data, financial information, political opinions, religious beliefs, identification documents, information about children, or any other sensitive personal information.

Cookies are small files stored on your device when you visit a website. Similar technologies, such as pixels, tags, and local storage, work in comparable ways. We use them for two purposes: to make the Website work, and to understand how it performs.

Some technologies are required for the Website to function, to keep it secure, and to remember choices you make during a visit, including your cookie preferences. These cannot be switched off without affecting how the Website works.

We use Google Analytics 4, provided by Google, to understand how the Website is used — which pages are visited, how visitors arrive, and which devices they use.

This sets the following cookies on your device:

• _ga and _ga_*, which distinguish one visitor from another and hold session state, and expire after two years;
• _gid, which distinguishes visitors, and expires after 24 hours.

We use this to see how the Website performs in aggregate. We do not use it to identify you personally, and we do not have Google Signals enabled, so we do not combine this data with Google account information to build demographic or interest profiles.

We use two advertising tools:

• Google Ads conversion tracking, which tells us when a visit that came from one of our Google advertisements led to an enquiry. This sets the _gcl_au cookie, which expires after approximately 90 days;
• the LinkedIn Insight Tag, provided by LinkedIn, which measures the performance of our LinkedIn advertising and allows us to show advertisements to people who have visited the Website. LinkedIn sets its own cookies from its domains for this purpose.

The LinkedIn Insight Tag can be used to build audiences for advertising. Where we use it this way, it is to reach business audiences with our own advertising. We do not sell information about you, and we do not share your enquiry content with advertising platforms.

Google and LinkedIn act as independent controllers of the data they receive through these tools. Their own privacy policies govern that processing:

• Google: policies.google.com/privacy
• LinkedIn: www.linkedin.com/legal/privacy-policy

Where consent is required by applicable law for non-essential cookies or tracking, we ask for it before those technologies are used. You can change or withdraw your choice at any time using the cookie settings link on this page.

You can also block or delete cookies through your browser settings, and you can opt out of Google Analytics across all websites using Google's browser add-on at tools.google.com/dlpage/gaoptout. Blocking essential cookies may stop parts of the Website working.

We use the information we collect for the following purposes:

• to respond to your enquiry;
• to prepare the study path, brief, feasibility view, or quote you asked for;
• to operate, maintain, secure, and improve the Website;
• to understand website and campaign performance;
• to prevent misuse, spam, fraud, or security issues;
• to comply with legal obligations;
• to establish, exercise, or defend legal claims.

Where a legal basis is required, we rely on one or more of the following:

• your request or consent, when you contact us or submit information through the Website;
• your consent, for non-essential cookies and tracking technologies, where applicable law requires it;
• legitimate interests, such as responding to business enquiries, operating the Website, improving our services, and protecting the Website from misuse;
• legal obligation, where we must keep or disclose information to comply with the law;
• legal claims, where information is needed to establish, exercise, or defend a legal claim.

We do not sell your Personal Data.

What you write to us — your enquiry, your brief, your study-plan conversation — is not shared with advertisers and is not used for advertising. It goes to the service providers listed below only so that we can receive it and respond to you.

Separately, the analytics and advertising tools described in the Cookies and tracking section send technical information about visits to Google and LinkedIn. That is measurement data about how the Website performs, not the content of what you tell us.

We use a limited number of service providers to operate the Website and respond to enquiries.

We may use an email delivery provider, such as Resend, to send website enquiries to our inbox. This provider may process message content and delivery metadata to provide that service.

Once an enquiry is delivered, it may exist in our email inbox and related business records.

We may use Anthropic to process the text entered into the study-plan builder. The builder works by sending the information you provide to Anthropic's API so it can help shape your question into a draft research path.

We do not ask you to enter sensitive personal data into the builder.

Inputs and outputs may be retained by Anthropic for a limited period under its commercial API terms for purposes such as service operation, safety, abuse prevention, or legal compliance. Your submitted business enquiry data is not used to train AI models.

Our hosting and infrastructure providers serve the Website and may process technical information such as IP address, request time, browser, device, and security logs.

Google and LinkedIn receive technical information about visits and interactions with the Website, such as page views, referral source, device information, and conversion events, as described in the Cookies and tracking section.

We keep Personal Data only for as long as needed for the purpose it was collected, unless a longer period is required by law or needed for a legal claim.

Our normal retention periods are:

• enquiries and correspondence: up to 24 months from the last exchange;
• study-plan conversations submitted to us by email or form: up to 24 months from the last exchange;
• server and security logs: up to 12 months, unless a longer period is needed for security, troubleshooting, or legal reasons;
• Google Analytics event data: 2 months;
• Google Analytics user-level data associated with cookies or identifiers: 14 months;
• advertising data held by Google and LinkedIn: according to those providers' own retention periods, described in their privacy policies.

We may keep information longer where:

• the law requires it;
• it is needed for tax, accounting, or business records;
• it is needed to establish, exercise, or defend a legal claim;
• you have asked us to keep it;
• a copy remains in encrypted backups awaiting routine deletion. Backups are not restored except for disaster recovery, security, or legal compliance.

Your information may be processed in Jordan and in other countries where our service providers operate.

Those countries may have data protection laws that differ from the laws in your country.

Where applicable law requires safeguards for international transfers, we will take reasonable steps to ensure appropriate protections are in place.

You may contact us at info@surveyarabia.com to ask us to:

• tell you what Personal Data we hold about you;
• give you a copy of it;
• correct anything inaccurate or outdated;
• delete it, unless we are required or permitted to keep it;
• stop using it to contact you;
• withdraw consent where processing is based on consent;
• object to certain uses of your Personal Data where applicable law gives you that right.

To withdraw consent for non-essential cookies and tracking specifically, use the cookie settings link on this page. You do not need to contact us to do that.

We will respond within 30 days, or sooner where we can.

Where a privacy law applies to our processing of your Personal Data and gives you additional rights, we will honour those rights.

If you are not satisfied with how we handle your request, you may have the right to complain to the relevant data protection authority in your country.

We may disclose Personal Data where:

• the law requires it;
• we receive a valid request from a court, regulator, or public authority;
• disclosure is needed to protect the rights, property, or safety of the Company, our users, our clients, or the public;
• disclosure is needed to investigate misuse, fraud, security issues, or possible wrongdoing;
• the Company is involved in a merger, acquisition, restructuring, or sale of assets.

If a business transfer happens, we will take reasonable steps to ensure your Personal Data remains protected.

We take reasonable technical and organisational steps to protect the information you send us.

However, no method of transmission over the internet and no method of electronic storage is completely secure. We cannot guarantee absolute security.

This Website is not directed at anyone under 16, and we do not knowingly collect Personal Data from anyone under 16.

If you are a parent or guardian and believe a child has provided us with Personal Data, please contact us at info@surveyarabia.com, and we will remove it where appropriate.

Where the law applying to a user sets a higher age for consenting to the processing of their own Personal Data, and we are relying on consent, we may require the consent of a parent or guardian.

This Website may link to websites we do not operate.

We are not responsible for the content, security, or privacy practices of those websites. We recommend reading the privacy policy of any website you visit.

We may update this policy from time to time.

When we do, we will update the Last updated date above. Where a change is significant, we will take reasonable steps to bring it to your attention.

Changes take effect when they are posted on this page.

For questions about this policy or your Personal Data, contact us at:

Arabian Advantage Consulting LLC, trading as Survey Arabia

info@surveyarabia.com