Privacy Policy

Who we are#

Sahla Smart Solutions is a consulting and implementation firm registered at Business Center, SPC FZ, Sharjah, United Arab Emirates. We work with clients across MENA. For personal information collected through this website, Sahla Smart Solutions is the controller: we decide why and how it is used.

If you have a question about this policy or about information we hold about you, write to info@sahlasolutions.com.

Information we collect#

We collect information in three ways.

Information you provide. This may include:

• contact details such as your name, work email, company, country and phone number;
• the service you are interested in and anything you write in a message;
• your newsletter email address;
• your email address, assessment result, dimension summary and optional note when you complete a Business Operations or AI Readiness Assessment; and
• job-application details such as the role, contact details, LinkedIn or portfolio link, application note and any CV you choose to upload.

Your individual answers to an assessment are scored in your browser, and we also receive them along with your result and dimension summary. We keep the answers because the report is generated after you leave the page and is rebuilt from them; without them we could not produce or re-send it. They are covered by the assessment retention period below.

Information collected when you use the site. Our systems receive ordinary technical information such as an IP address, browser and device information, requested page, date and time, language, diagnostic information and security events. Analytics information depends on the choice described below.

Information from other sources. If someone submits information for you or introduces you to us, we may receive the contact and business information needed to respond. The person providing it must be authorised to do so.

Please do not submit passwords, access keys, unnecessary sensitive personal information, or confidential information that you are not authorised to share.

We do not buy contact lists, sell personal information, run advertising pixels, or let another organisation use website submissions for its own marketing.

Why we use it#

We use personal information only where we have a lawful reason. Depending on the activity and the law that applies, we use it:

• to respond to an enquiry, take steps you request before a possible engagement, and manage our business relationship;
• to provide an assessment result or report and related follow-up;
• to send the newsletter when you subscribe;
• to assess and respond to a job application;
• to operate, secure, troubleshoot and improve the website;
• to measure which pages and features are useful; and
• to meet legal obligations and establish, exercise or defend legal claims.

Our legal bases are your consent where you subscribe or accept optional analytics; steps taken at your request before a possible contract; our legitimate interests in responding, recruiting, operating and securing a business website, and understanding it in aggregate; and compliance with applicable law. Where we rely on consent, you may withdraw it without affecting earlier lawful use.

Cookies and analytics#

We use cookieless measurement to count page views and website events in aggregate. It does not use advertising identifiers or recognise you across different websites.

Optional cookie-based analytics loads only after you accept it on the consent banner. If you decline or ignore the banner, that analytics script is not added to the page.

Your choice is stored in your browser's local storage, not in a cookie, and it never reaches our server. Clearing your browser data resets it and the banner will ask again. You can withdraw optional analytics consent by clearing this site's browser data and making a new choice.

Our forms use a bot-protection service. It receives the technical information needed to decide whether a submission came from a person rather than an automated script and may place a short-lived security token in your browser.

Who receives it#

Access inside Sahla is limited to people who need the information, such as the consultant handling an enquiry or the people reviewing a job application.

We use service providers to help us host, protect and operate the website, route and store submissions, deliver email, manage business enquiries and applications, diagnose errors, and provide analytics you have accepted. They may process information only to provide those services to us, subject to their contracts and applicable law.

We may also disclose information to professional advisers, regulators, courts or public authorities where reasonably necessary or legally required, or in connection with a reorganisation or transfer of our business subject to appropriate confidentiality and legal safeguards.

International processing#

Our main website systems are hosted in the European Union. Sahla is established in the United Arab Emirates, and some service providers or authorised recipients may process information in other countries. Those countries may have different data-protection rules.

Where applicable law requires it, we use contractual, organisational and technical safeguards for cross-border processing and require an appropriate level of protection. You may contact us for further information about safeguards relevant to your information.

How long we keep it#

We keep information only for as long as needed for the purpose described above, then delete or anonymise it unless law requires longer retention. Normally:

• enquiry and assessment records are kept while we respond and for up to 24 months after the last meaningful contact;
• unsuccessful job applications are kept for the recruitment process and for up to 12 months after it closes, unless you agree to longer consideration;
• newsletter details are kept until you unsubscribe, after which we may retain the minimum suppression record needed to honour that choice;
• security and ordinary server logs are kept for a limited operational period, unless an incident requires longer investigation; and
• analytics is retained according to the configured service period or in aggregated form that does not identify an individual.

Records may be kept longer where reasonably necessary for a legal obligation, an active dispute, fraud prevention or security. Retention also applies to copies held by service providers, subject to reasonable backup-deletion cycles.

Automated assessment results#

The assessments use fixed scoring rules to produce an indicative result from your answers. They do not make decisions that have a legal or similarly significant effect on you. A person may review the summary if you ask us to follow up.

Where you leave an optional note, we may use an AI language model to rewrite parts of the written commentary in an emailed report so it speaks to what you told us. That model is operated by a third-party provider outside Sahla, and it receives only your note, the wording we had already prepared for your result, and the name of your stage. It does not receive your email address, your company, or your individual answers.

Your result, your stage and every figure in the report come from the fixed scoring rules described above. A model cannot introduce, change or remove a number. If you leave the note blank, no model is used at all.

Your rights#

Depending on where you are and which law applies, you may ask us to:

• explain how we use your information and give you access to or a copy of it;
• correct incomplete or inaccurate information;
• delete information or restrict or stop particular processing;
• provide information in a portable format where applicable;
• object to processing based on legitimate interests or to direct marketing; or
• withdraw consent at any time.

Write to info@sahlasolutions.com. You do not need particular wording. We may need to verify your identity and may retain information where an applicable exception or legal obligation requires it. We will respond within the period required by the law that applies and normally do not charge for a request.

Every newsletter carries an unsubscribe link that works in one click.

You may also complain to the UAE Data Office, the Saudi Data and AI Authority where Saudi law applies, or the data-protection supervisory authority in your country. We would appreciate the chance to address the concern first, but you do not have to contact us before approaching a regulator.

Security and breaches#

We use proportionate technical and organisational measures intended to protect personal information from unauthorised access, alteration, loss or disclosure. No internet service can promise absolute security. If a breach creates a risk that requires notice, we will notify affected people and the relevant authority as required by applicable law.

Children#

This site is aimed at businesses. We do not knowingly collect information from anyone under 18. A person under 18 should not submit a form or application.

Changes#

If we change this policy we update the date at the top of this page. Material changes will be explained here and, where required, brought to your attention or made subject to fresh consent.