Legal

Privacy Policy

Last updated: 25 June 2026

Plain-language summary: We collect your name and email only when you choose to share it (downloads, contact forms, newsletter). We use analytics tools to understand how the site is used — but only after you consent. You can withdraw consent or request deletion of your data at any time.

01

Who we are

This website (osamaelemary.net) is operated by Osama Elemary, a Museum Strategy Consultant, Writer, and Speaker.

For the purposes of data protection law, Osama Elemary is the data controller responsible for your personal data collected through this website.

Contact: osama.el@moqtana.sa

02

What data we collect

Data you provide directly

Source Data collected
Contact form Name, email address, message
Resource download gate Name, email address, job title, organisation (optional)
Newsletter sign-up Email address
Service enquiry form Name, email address, organisation, message

Data collected automatically

When you visit the site we may collect the following — only after you grant consent:

03

Why we collect it

Purpose Legal basis
Responding to enquiries and service requests Legitimate interest / contract performance
Delivering downloadable resources you requested Contract performance
Sending the newsletter you subscribed to Consent (you can unsubscribe at any time)
Understanding how visitors use the site (analytics) Consent (via cookie banner)
Running future advertising campaigns Consent (via cookie banner — marketing category)
Understanding which marketing channels bring visitors Legitimate interest (attribution analytics)
04

Cookies & tracking

We use a cookie consent banner. No optional cookies are set until you choose to accept them.

Your preference is stored in your browser under the key oe_consent_v2 for 365 days.

Essential (always active)

CookiePurposeDuration
oe_consent_v2 Stores your cookie consent preference 365 days

Analytics (requires consent)

ServicePurposeProvider
Google Analytics 4 Page views, engagement, conversion events Google LLC (USA)
Microsoft Clarity Session recordings and heatmaps (selected pages only) Microsoft (USA)

Marketing (requires consent)

ServicePurposeProvider
LinkedIn Insight Tag Audience building for future advertising campaigns LinkedIn Ireland (EU)

All optional cookies are loaded through Google Tag Manager (GTM-THQ47VPS) and are injected only after consent is granted.

You can change your cookie preferences at any time by clearing your browser's local storage for this site, which will cause the consent banner to reappear on your next visit.

05

Third-party services

Service Role Privacy policy
Supabase Database — stores form submissions, subscribers, downloads supabase.com/privacy
Google Tag Manager Tag management container policies.google.com/privacy
Google Analytics 4 Web analytics policies.google.com/privacy
Microsoft Clarity Heatmaps & session recordings privacy.microsoft.com
LinkedIn Insight Tag Marketing audience (future campaigns) linkedin.com/legal/privacy-policy
EmailJS Sends email notifications when forms are submitted emailjs.com/legal/privacy-policy
Hostinger Website hosting hostinger.com/privacy-policy
Google Fonts Typeface delivery (Cormorant Garamond, Inter) policies.google.com/privacy

We do not sell your personal data to any third party.

06

How long we keep data

Data typeRetention period
Contact form submissions 2 years from submission
Download gate records (name, email, job) 2 years from submission
Newsletter subscriptions Until you unsubscribe
Attribution data (UTM, referrer) 1 year from submission
Analytics data (GA4) 14 months (Google's default retention)

Data is deleted or anonymised once the retention period expires.

07

Your rights

Depending on your location, you may have some or all of the following rights:

To exercise any right, email osama.el@moqtana.sa with the subject line "Data Request". We will respond within 30 days.

Saudi Arabia (PDPL)

If you are located in Saudi Arabia, this policy complies with the Personal Data Protection Law (PDPL) issued by Royal Decree M/19 and overseen by the Saudi Data and AI Authority (SDAIA). You may submit a complaint to SDAIA if you believe your rights have been violated.

European Union (GDPR)

If you are located in the EU or EEA, you also have the right to lodge a complaint with your local supervisory authority.

08

International data transfers

Your data may be processed in countries outside your own (including the United States) by the third-party services listed above. Where this occurs, transfers are subject to appropriate safeguards including Standard Contractual Clauses (SCCs) or the service provider's compliance with applicable data transfer frameworks.

09

Children

This website is intended for professionals and is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through this site, please contact us and we will delete it promptly.

10

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page reflects when it was most recently revised. We encourage you to review this page periodically. Continued use of the site after changes constitutes acceptance of the updated policy.

11

Contact us

If you have any questions about this Privacy Policy or how we handle your data:

Get in touch

We are happy to answer any questions about your privacy or your data.

osama.el@moqtana.sa