Privacy

What we collect

Only what a form asks for, and only when you submit it.

• Your name, work email, phone or WhatsApp number, company, role, number of stores, category, and anything you write in the message box.
• Your name is the only required field. You need to leave either an email or a phone number, because otherwise we cannot reply.
• Two hidden fields go with it: which form it came from, and the path of the page you were on. There is only one form, so the first is there for the day there is a second.

Why we hold it, and on what basis

To reply to your enquiry and, if you want one, to arrange a pilot conversation. That is the only purpose. The lawful basis is your own request: you asked us to get in touch.

We do not sell it, share it for marketing, or add you to a list you did not ask for.

Where it goes

A submission is composed into a plain text email and sent over authenticated SMTP to a Google Workspace mailbox at Asherif@gosmartmarket.online. Your address, where you gave one, is set as the reply address so a reply reaches you directly.

This site has no database. Nothing you submit is written to the web server, and there is no admin screen anywhere on it. If a send fails, the failure is recorded in a log outside the public web root; that log records that a send failed, not what was in it.

How the form is protected, and what that costs you in data

Four controls sit on the contact endpoint, and only one of them touches anything about you.

• A one-time token, issued to your browser as a short-lived cookie and sent back with the form, so a submission cannot be forged from another site. It holds no personal data.
• A hidden field no person can see or reach with a keyboard or screen reader. Automated submissions fill it in; you will not.
• A timing check that ignores a form completed faster than any human fills one.
• A rate limiter, which is the one that touches you. It needs to tell submissions apart without holding personal data, so it never writes your IP address down. It stores a salted one-way hash of it instead, outside the public web root. The stored value cannot be turned back into an address, it is not attached to your submission, and it is deleted within 24 hours.

Cookies

One cookie, and only if you load a form with JavaScript enabled. It is called gs_csrf, it holds a random value and nothing else, it is same-site and unreadable by scripts, and it expires within the hour. There is no analytics cookie, no advertising cookie, and nothing that follows you to another site.

How long we keep it, and who can see it

Enquiry emails are kept for 24 months and then deleted. They sit in one mailbox and are read by the Go.Smart commercial team, and by nobody else.

The rate limiter holds nothing beyond 24 hours. Nothing else about your visit is retained anywhere.

Asking us to delete it

You can ask what we hold, ask for a copy, ask us to correct it, or ask us to delete it. Email Asherif@gosmartmarket.online, or message +971 55 160 2448, and say what you are asking for. We will respond within one business day, and deletion means the enquiry email and any reply thread go with it.

Who we are

Go.Smart is a product of Web Signature, which is responsible for the data described here. Email Asherif@gosmartmarket.online with anything about it.