Privacy policy

1. Who we are

SIDRA HUB HOLDING is a trading name of SIDRA HUB LTD, a private limited company registered in England and Wales under company number 16611051, with its registered office in Birmingham, United Kingdom.

SIDRA HUB LTD is the data controller for personal data collected through this website, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For any privacy question or to exercise your rights, contact us at: contact@sidrahubholding.com

2. The data we collect

We only collect the data you choose to give us through the website's forms. Depending on the form, this includes:

• Identity and contact details: name, email address, phone number, job title, organisation and country.
• Request details: subject, message, the service or company you are interested in, scope, timeline and preferred meeting times.
• Careers details: discipline, professional profile link, and any CV or attachment you choose to send.
• Limited technical data: your IP address, held temporarily in server memory to prevent abuse and spam. It is not stored with your request.

3. How we use your data and our lawful basis

• To respond to your enquiry, proposal or meeting request and route it to the relevant group company — on the basis of taking steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries.
• To consider job and partnership applications — on the basis of our legitimate interests and pre-contractual steps.
• To protect the website against abuse and fraud — on the basis of our legitimate interest in keeping our services secure.
• To meet our legal obligations where required.

We do not use your data for marketing without your separate, explicit consent. We never sell your data, and we do not make solely automated decisions about you that have legal effects.

4. Sharing your data

• With the relevant company within the SIDRA HUB HOLDING ecosystem, depending on your request, which processes it for the same purpose only.
• With service providers acting on our behalf under data-processing agreements: our website host (Hostinger) and our email provider (Titan).
• With public authorities where the law requires us to.

5. International transfers

Your data may be processed by, or made available to, group companies and service providers outside the United Kingdom, including in the Gulf, Egypt and Libya. Where this happens, we rely on safeguards recognised by law, such as adequacy regulations, the International Data Transfer Agreement (IDTA) or the UK Addendum to the Standard Contractual Clauses.

6. How long we keep it

• Enquiries, proposal, meeting and partnership requests: up to 24 months from our last contact, unless a contractual relationship requires longer.
• Job applications and CVs: up to 12 months for future opportunities, then deleted.
• IP addresses: not stored; cleared from memory within minutes.

When a retention period ends, we securely delete or anonymise the data.

7. How we protect it

Data travels over encrypted connections (HTTPS), attachments are never stored in any public location on the website, and access is limited to authorised people who need it to respond to your request. Our forms also include controls against automated submissions and abuse.

8. Cookies

This website does not use cookies for tracking, advertising or analytics. It may use strictly necessary technical cookies to work properly, which do not require consent. If we add analytics tools in future, we will ask for your consent first and update this policy.

9. Your rights

Under UK data-protection law, you have the right to:

• Access your data and receive a copy of it.
• Have inaccurate or incomplete data corrected.
• Ask us to erase your data.
• Restrict or object to processing, including processing based on legitimate interests.
• Receive your data in a portable, machine-readable format.
• Withdraw your consent at any time, where processing is based on consent.

10. Exercising your rights and complaints

To exercise any of your rights, email contact@sidrahubholding.com. We will respond within one month of receiving your request and may ask you to verify your identity.

You have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. If you live in Saudi Arabia, you also have rights under the Personal Data Protection Law (PDPL), overseen by the Saudi Data & AI Authority (SDAIA); if you are in the UAE, under Federal Decree-Law No. 45 of 2021. We would appreciate the chance to address your concern first, so please contact us directly.

11. Children

This website is intended for organisations and professionals. We do not knowingly collect data from anyone under 18.

12. Changes to this policy

We may update this policy when our services or legal requirements change. The latest version is always published on this page with its last-updated date.