Who we are
This notice covers the Brand X pages at alsayegh.com/brandx. Brand X is the brand experience studio of Alsayegh Worldwide, and Alsayegh Worldwide is responsible for these pages and for the personal data described in this notice. You can reach us about anything on this page at brandx@alsayegh.com.
What we collect
When you send the contact form we receive:
- your name, email address and message
- your phone number and company, if you add them
- the service you picked, if any
- a record of your consent: the time and the version of the wording you agreed to
- whether you asked to receive news from us
- the page you sent the form from, the first Brand X page you visited, the page that sent you here (including a page of the main alsayegh.com website) and, if you arrived from an advert or a tracked link, the campaign details in that link (for example utm_source or a Google click ID)
- a scrambled (hashed) version of your IP address and your browser type, used only to stop spam and repeated automated submissions. The hashed address is removed after 30 days.
We do not ask for payment details or sensitive personal data, and we ask you not to include them in your message.
When you open a Brand X page, the web server records the request in its access log: the page address, the time, your IP address, the page that linked to it and your browser type. Brand X pages share the alsayegh.com address with the Alsayegh Worldwide website, so these requests are also recorded in the server logs of that website’s hosting account.
Why we use it
- to reply to your enquiry and discuss a possible project with you
- to protect the form from spam and abuse
- to keep these pages running and secure, which is what the server logs are for
- to understand which campaigns bring enquiries, so we spend our advertising budget sensibly
- to send you occasional news about our work, only if you ticked that box. You can unsubscribe at any time.
For replying to you and for knowing how you found us, we rely on your consent, which you give when you tick the box on the form. You can withdraw it at any time by emailing us. Protecting the form from spam and abuse, and keeping server logs, do not depend on the tick: we do them because we need to keep the site safe to use (for visitors in the United Kingdom and the European Union, this is our legitimate interest).
This notice is written to meet the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), the Saudi Personal Data Protection Law (Royal Decree No. M/19 of 9/2/1443H, as amended) and, for visitors in the United Kingdom and the European Union, the UK and EU GDPR.
Who helps us handle it
We use a small number of service providers who process data on our behalf and under contract:
- Buzinessware, which hosts these pages and the database where enquiries are stored, on servers in the United Arab Emirates
- Brevo, which delivers the email that tells our team about your enquiry
- Google, only if you allow analytics or advertising cookies (see below)
Some of these providers store data outside the country you are in. Where that happens we rely on the safeguards they offer under their contracts with us. We do not sell your personal data.
How long we keep it
We keep an enquiry for up to 24 months after you send it, unless it becomes a project, in which case we keep what the contract and the law require. Messages our spam filter catches are deleted after 30 days, and hashed IP addresses are removed after 30 days.
Cookies and similar storage
Brand X pages set no advertising or analytics cookies unless you choose to allow them. When analytics or advertising tools are switched on, a banner asks for your choice first, and you can change it at any time from the Cookie settings link at the bottom of every Brand X page. Your choice covers only the Brand X pages at alsayegh.com/brandx.
What Brand X keeps in your browser:
- bx_consent (local storage, 12 months): your cookie choice, so we do not ask on every visit
- bx_attr (session storage, this tab only): the campaign details of your visit, attached to the form if you send it
- bx_lead (session storage, this tab only): used once on the thank-you page to count a sent enquiry
Set only if you allow them:
- Analytics (Google Analytics): bx_ga and bx_ga_*
- Advertising (Google Ads): bx_gcl_*, a copy of the advert click details that Google may keep in local storage, and cookies Google sets on its own domains
Brand X pages share the alsayegh.com address with the Alsayegh Worldwide website, so your browser may also send Brand X pages the cookies set by other alsayegh.com pages, for example XSRF-TOKEN, alsayegh_session, _gcl_au or Hotjar’s _hj cookies. Brand X pages do not read or use them, and your choice here does not change them.
Your rights
You can ask us to:
- tell you what personal data we hold about you and give you a copy
- correct it if it is wrong
- delete it
- stop using it for news or marketing
- move it to another organisation, where the law allows
Email brandx@alsayegh.com and we will reply within the time the law sets. If you are not happy with our answer you can complain to the UAE Data Office, in Saudi Arabia to the Saudi Data and AI Authority (SDAIA), or in the United Kingdom to the Information Commissioner’s Office.
Changes to this notice
If we change how we handle personal data we will update this page and the date at the top.