Written in plain language, because a risk and resilience research initiative should be exemplary about this.
Anonymous research data: when an assessment or any other THIQL research instrument is completed, the responses and the organization profile (industry, size band, sector type, country) are recorded as a research datapoint, together with the language used. No name, email, or other identifying information is part of this record, and no IP address is stored with it. As with any website, the infrastructure that serves this site and receives the form sees the connecting address in transit; it is never linked to a response and is never used to identify anyone.
Voluntary contact data: if you request a report or a results discussion, the details you enter — name, organization, email, and optionally phone — are sent to THIQL along with your scores, so the request can be fulfilled and followed up. If you subscribe to research updates, only your email address is recorded.
Site analytics: this site uses Cloudflare Web Analytics, a privacy-first, cookie-free measurement tool. It shows THIQL aggregate numbers — page views, countries, referrers — and cannot identify individual visitors.
Anonymous responses and organization profiles become part of THIQL's research dataset. That dataset is the basis of everything THIQL produces from the research: published findings, sector and national benchmarks, written reports, and research products THIQL may sell or license to organizations, industry bodies, regulators and researchers. Because the dataset carries no identifying information, it is used, shared and licensed in aggregated, anonymized form only. Contact details are used to respond to the request you made and to follow up on it. If you opted in to research updates, your email is used for occasional messages about new research or events — and every such message includes a way to opt out.
If you tick the marketing box when leaving your details, THIQL will send you occasional marketing messages — about THIQL's services, offers, and programs, including programs run with partners. Your details stay with THIQL and are never handed to any other party; every message carries an unsubscribe link, and you can withdraw consent at any time by unsubscribing or writing to [email protected].
Your personal data is never handed to advertisers or ad networks, and is not passed to another party to use for its own purposes without your consent; the service providers described below process it only on THIQL's instructions. Contact details are used for the purpose you sent them for, and are not part of the research dataset. Anything THIQL publishes, shares or licenses from its research is aggregated and anonymized — it can never be traced back to a person or an individual organization. And no statistic is published, shared or licensed where fewer than five organizations sit beneath it: in a small sector, a number that carries no names can still point at one organization, so it is withheld. No cookies or fingerprinting techniques are used anywhere on this site.
THIQL may carry out studies that another organization commissions or sponsors: a sector benchmark a bank requests, a survey an industry body funds. Three principles govern every such study. The sponsor buys the question, never the answer — methodology and findings remain THIQL's alone, and the sponsorship is disclosed wherever the results appear. The sponsor receives analysis in the same aggregated, anonymized form as everything else THIQL licenses; never respondent-level records, and never access to respondents or to anyone's contact details. And where a study needs organizations to take part in an identified way — named peers benchmarking one another, for example — it runs on its own data, collected separately under terms shown to every participant before they take part. Nothing from the anonymous dataset described on this page is ever converted into identified data.
THIQL does not run its own infrastructure. The site is served by Cloudflare; form submissions are received and routed by an automation service; research and contact records are held in a managed PostgreSQL database in Frankfurt, Germany; and correspondence runs through a German email provider. Anonymous research data contains no personal data at all. The contact details you choose to send are personal data, and holding them on this infrastructure means they are processed outside the Kingdom. That transfer is limited to what the purpose you asked for requires, is governed by each provider's published data-processing terms, and is documented in a transfer assessment THIQL keeps on file. In line with the PDPL and its Regulation on Personal Data Transfer outside the Kingdom, you may ask about that transfer — or ask for your data to be deleted — at [email protected].
Contact details are kept only as long as the purpose you provided them for requires. The anonymous research record is kept indefinitely as part of THIQL's dataset — it contains nothing that identifies you, which is what makes long-run research possible. In line with the principles of the Saudi Personal Data Protection Law (PDPL), you may at any time ask what personal data THIQL holds about you, ask for it to be corrected or deleted, or withdraw a consent you previously gave. Write to [email protected] and you will receive a prompt response.
For anything related to privacy or data — questions, corrections, deletion requests — contact THIQL at [email protected].