Privacy policy

Last updated: 6 July 2026

BearingGate collects as little personal data as the site can function with. This page explains exactly what we collect, why, who processes it, and the choices you have. It is written to be read, not to be survived.

1. Who is responsible

The controller for the personal data described here is Maybury Consulting LLC, Sharjah Media City, Sharjah, United Arab Emirates (“BearingGate”, “we”, “us”). For any privacy question or to exercise your rights, contact intro@bearinggate.com.

2. What we collect, and why

The sample-report form

When you request the sample report, you give us one thing: your email address. We use it for exactly two purposes:

• to review your request and email you the sample report — a member of the team sends it by hand, usually within one business day; and
• to notify us that a genuine request came in, so a human can send your sample and reply if you later get in touch.

That is the whole of it. We do not add you to a marketing list, run a drip sequence, or set an SDR on you. Being honest about what does happen: your address is delivered to our inbox and passes through our email provider, so it is retained in those two places (see “Retention” below) — it is not erased the instant the mail is sent. Legal basis: taking a step at your request (Art. 6(1)(a)/(b) GDPR); our notification is a legitimate interest in running the business (Art. 6(1)(f)).

Booking an intro call

The “Book an intro call” buttons open Calendly, a third-party scheduling service. If you book, you provide your details to Calendly directly and we receive the booking. Calendly processes that data under its own privacy policy. We only see what you choose to enter when booking.

Analytics

We would like to know, in aggregate, how the site is used. We use Google Analytics 4 for this — but only if you accept in the cookie banner. Until you accept, no Google script loads and no analytics cookie is set. If you decline, nothing analytics-related runs at all, on this visit or any future one, unless you change your mind via the “Cookies” link in the footer. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Keeping the form from being abused

The sample-report form is protected by Cloudflare Turnstile (a privacy-focused CAPTCHA alternative) and by rate limits. To stop the same address being used to send mail on repeat, we keep a short-lived, hashed counter — we store a one-way hash of the address with a 24-hour expiry, never the address itself, and it is deleted automatically. This is an abuse control, not a record of you. Legal basis: our legitimate interest in security (Art. 6(1)(f) GDPR).

Hosting and server logs

The site is hosted on Cloudflare. Like any web host, Cloudflare processes technical data (such as IP address and request metadata) to serve pages and protect against attacks, under its own terms.

3. Cookies

With no interaction, this site sets no cookies and makes no third-party requests. The only cookies are those set by Google Analytics after you accept. Your accept/decline choice itself is stored locally in your browser (not a cookie, and never sent to us) so we can remember it. To change your choice, use the Cookies link in the footer at any time.

4. Processors and international transfers

We rely on a small set of service providers who process data on our behalf:

• Resend (email delivery) — a US-based processor. Even where a European sending region is selected, that affects where mail is sent from, not where account data and delivery logs reside, which remain in the United States. Transfers are covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses, under a data processing agreement.
• Google (Analytics) — processes analytics data only after your consent, under the Data Privacy Framework / SCCs.
• Cloudflare (hosting, Turnstile) — processes technical request data to serve and protect the site.
• Calendly (scheduling) — only if you choose to book a call.

5. Retention

• Your email address from the sample-report form: kept in our inbox and in Resend’s sending logs. We remove it on request, and otherwise retain it no longer than 36 months.
• Anti-abuse counter: a hashed value that auto-expires within 24 hours.
• Analytics: retained by Google per the property’s configured retention window, set to 36 months.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time (which does not affect processing already carried out). To exercise any of these, email intro@bearinggate.com — because we hold so little, most requests are quick to honour. You also have the right to lodge a complaint with your local data protection supervisory authority.

7. Changes

If this policy changes, we will update the date at the top. Material changes will be made clear on this page.

Questions? intro@bearinggate.com.