Privacy Policy
Who We Are
Gulf Commercial Insights is operated by Boost My Business AI Innovation Limited, registered at DIFC Innovation Hub, Dubai International Financial Centre, Dubai, UAE. Trade Licence CL11954.
What Data We Collect
- Account information: name and email address provided at registration
- Contact and enquiry data: name, email address, phone or WhatsApp number, firm, role, and the mandate brief you send us through our enquiry, mandate submission and Deal Health Score forms (for example sector, geography, ticket size, timeline and report type)
- Investment brief data: investment type, sector, geography, ticket size, and deal-specific information you enter into the platform
- Uploaded documents: financial statements, information memoranda, or other files you upload for auto-extraction
- Recruitment data: if you apply for a role, your CV, LinkedIn profile URL, current employer, employment history, salary expectation and any other details you include in your application
- Newsletter subscriptions: the email address you confirm when you subscribe to the GCI Morning Brief or other updates
- Usage data: pages visited, reports generated, session duration, and the cookie and device data described under Analytics and Cookies below
- Payment information: processed by Stripe. We do not store card details on our servers.
How We Use Your Data
- To generate commercial diligence intelligence reports based on your brief
- To respond to your enquiry or mandate, scope an engagement, and manage our relationship with you
- To assess job applications
- To send the newsletters you have subscribed to
- To process payments and maintain your account
- To communicate service updates
- To measure and improve how the website is used
We do not use your data to train language models. We do not sell your data or share it with third parties for their own marketing. Analytics and CRM providers process data on our behalf only, as described below.
Analytics and Cookies
We use Google Analytics, loaded through Google Tag Manager, and Microsoft Clarity to measure site usage and session behaviour, including pages visited, clicks, scrolling and session recordings. These providers set cookies and process usage data on our behalf. Enquiries submitted through our Deal Health Score form are sent to HubSpot, our customer relationship management system, which uses the hubspotutk cookie to link your submission to your visits. You can block or delete cookies in your browser settings; the site will still work without them.
Uploaded Documents
Documents you upload for auto-extraction are processed to identify deal-relevant data fields. Uploaded content is transmitted to our enterprise AI processing providers under their enterprise API terms solely to generate your report. We do not store your uploaded documents beyond the active session unless you save the report to your report history. We do not use uploaded documents to train language models or share them with third parties. Analyst review of reports is available on Enterprise engagements; outside those engagements, GCI staff do not read your uploaded documents. GCI does not opt into any model training programmes offered by AI providers.
Client data, deal documents and reports are stored in UAE data centres. AI processing uses enterprise endpoints, some outside the UAE, under terms that prohibit training on your data. Full details are on our Security page.
Third-Party Subprocessors
- Microsoft Azure (website hosting, platform infrastructure, storage and speech services): United Arab Emirates (UAE North)
- Enterprise AI model providers, three in total (AI processing under terms that prohibit training on your data): United States. The current named list is available on request from difc@gulfcapitalintelligence.com.
- Google Analytics and Google Tag Manager (website analytics): United States
- Microsoft Clarity (website analytics and session recording): United States
- HubSpot (customer relationship management and enquiry forms): European Union
- Stripe (payment processing): United States
International Transfers
Some of the providers above process personal data outside the DIFC and the UAE. Where we transfer personal data to a jurisdiction that the DIFC Commissioner of Data Protection has not recognised as providing adequate protection, we do so only in line with the transfer rules of DIFC Data Protection Law No. 5 of 2020, relying on appropriate safeguards such as the providers' data processing terms and standard contractual clauses.
Data Retention
Account data is retained while your account is active. Contact and enquiry data is kept for as long as we need it to respond to you and manage any resulting engagement. Recruitment data is kept for the duration of the recruitment process, and afterwards only if you agree that we may consider you for future roles. Newsletter subscriptions are kept until you unsubscribe. Brief content and uploaded documents are not retained beyond the active session unless you explicitly save a report to your report history. Saved reports can be deleted from your history at any time. You may request deletion of your full account and associated data by contacting us at difc@gulfcapitalintelligence.com.
Your Rights
You have the right to access, correct, or delete your personal data. Contact us at difc@gulfcapitalintelligence.com to exercise these rights.
Contact
Boost My Business AI Innovation Limited | DIFC Innovation Hub | Dubai, UAE
difc@gulfcapitalintelligence.com | +971 55 463 9500