Our newsletterStacy’s Brain
Privacy Policy
This Privacy Policy explains what personal data Stacy’s Brain collects when you visit stacysbrain.com, use its forms or subscribe to its newsletter, why we collect it, who we share it with, and the choices you have.
1. Who we are
Stacy’s Brain (stacysbrain.com and newsletter.stacysbrain.com) is operated by GREEN DOTS - FZCO, a free zone company incorporated under the laws of the United Arab Emirates, holding trade license No. 54972. GREEN DOTS - FZCO is the controller of the personal data described in this policy.
For any question about your data, or to exercise your rights, write to contact@stacysbrain.com.
2. What data we collect
You can browse the site without an account and without giving us your name or email.
| What | Examples | How we get it |
|---|---|---|
| Information you send in forms | Email address; your request (for example the insights you are looking for); role, company size and company or product website if you give them; your answers in the “What brings you here today?” panel | You type or select it in a form on the site |
| Newsletter subscription | Email address, subscription date, whether you open and click our emails | You subscribe on the site or on Substack |
| Usage and device data | Pages viewed, clicks, downloads, searches and filters used, time on page, referring site, campaign (UTM) tags, approximate location from IP address, browser and device type | Google Analytics cookies and similar technologies, only after you consent where consent is required |
| Messages to us | Your email address and what you write | You email contact@stacysbrain.com or reply to our emails |
We do not collect payment details, government IDs or special categories of data (such as health or political opinions). Please do not include them in free-text fields.
3. Why we use it and on what legal basis
| Purpose | Data used | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Reply to your request, early-access sign-up, waitlist or audit request | Form data, email | Taking steps at your request before a possible contract; legitimate interest in answering you |
| Send the newsletter you subscribed to | Email, subscription and engagement data | Your consent, which you can withdraw at any time |
| Understand how the site is used and improve it | Usage and device data, aggregated | Your consent to analytics cookies |
| Decide which insights and benchmarks to research next | Requests and answers you give in forms, aggregated | Legitimate interest in developing the product |
| Keep the site secure and comply with law | Usage data, records of requests | Legitimate interest; legal obligation |
Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), we process your data with your consent or where processing is needed to answer your request, to meet a legal obligation or for the other purposes the law allows.
We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
4. Emails we send you
Filling in a form on the site does not subscribe you to our newsletter. You receive the newsletter only if you choose to subscribe.
If you send us a request through a form, we may email you about that request: to confirm we received it, to ask a follow-up question, or to tell you when the insight or feature you asked for is available. These are service messages, not marketing.
You can unsubscribe from the newsletter with the link in every issue. To stop service messages about a request, reply to any of them or write to contact@stacysbrain.com.
6. International transfers, retention and security
Transfers. We are based in the UAE and our providers store data mainly in the United States and the European Union. When data from the EU or UK goes to a country without an adequacy decision, we rely on the provider’s Standard Contractual Clauses or an equivalent safeguard. When we transfer data from the UAE to other countries, we do so in line with the UAE Personal Data Protection Law, relying on the safeguards in our providers’ data protection terms.
How long we keep data.
- Form requests and related emails: up to 24 months after our last contact with you, then deleted or anonymised.
- Newsletter data: while you are subscribed; after you unsubscribe, only what is needed to respect that choice.
- Analytics data: 14 months, the retention period set in Google Analytics.
Security. Access to personal data is limited to the people who need it, accounts are protected with strong authentication, and providers are chosen for their security practices. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.
7. Your rights
Wherever you live, you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct data that is wrong or incomplete;
- delete your data;
- stop or limit how we use it, or object to processing based on legitimate interest;
- send your data to you or another provider in a machine-readable format;
- withdraw consent at any time, without affecting processing done before.
To use any of these rights, email contact@stacysbrain.com. We answer within 30 days and may ask you to confirm your identity first.
EU and UK residents can also complain to their local data protection authority. UAE residents can complain to the UAE Data Office.