Privacy policy

Your information, handled with care

This policy explains what ORIGIN collects when you visit origin.global or send a request through our SWANA pages, why we collect it, who sees it, how long we keep it, and how you stay in control.

  • Last updated14 November 2026
  • Applies toorigin.global, and the ORIGIN SWANA pages, forms, tools and chat
  • Contactinfo@origin.global
On this page

The short version

  • We ask for your details so we can judge whether ORIGIN and your team are a good fit, and so we can contact you about your request.
  • We also use them to send you ORIGIN news and offers, and to show you ORIGIN ads on platforms such as Instagram and LinkedIn.
  • A small set of trusted providers handle your information for us. We do not sell it.
  • Google, Meta, LinkedIn and Microsoft tags measure our pages and ads, and the Meta pixel and LinkedIn tag show ORIGIN ads again to people who visited, but only if you allow it in the cookie box that opens on the page. We may add TikTok and Snapchat tags later; the same rule will apply to them. You can change your choice at any time (section 10).
  • You can withdraw your consent at any time. Write to info@origin.global or use the unsubscribe link in any ORIGIN email.
  • You can ask to see, correct or delete your information whenever you want.

01Who we are

ORIGIN S.A.R.L (“ORIGIN”, “we”, “us”), registered in Lebanon under commercial registration 2056368, is the company responsible for your information on origin.global. Its Saudi branch, ORIGIN LLC, registered in Riyadh, Saudi Arabia, under commercial registration 1010804253, runs the ORIGIN SWANA pages, forms, tools and chat.

ORIGIN LLC is the Saudi branch of ORIGIN S.A.R.L, which is part of the ORIGIN group, a global brand transformation house. The group’s headquarters and operations base are in Lebanon. In this policy, “ORIGIN” also covers the group team members who work on your request.

ORIGIN S.A.R.L, Sahel Alma, Lebanon
ORIGIN LLC
Building 7196, Al Hakam Al Mustansir Billah, Al Khaleej District, Riyadh 13223, Saudi Arabia
Secondary number 3745. Short address RFKA7196
Privacy contact: info@origin.global

02What we collect

We collect only what helps us answer your request, judge whether we are a good fit, and keep the form safe.

TypeWhat it includesWhere it comes from
Your requestThe service you need, your role, your full name, your phone number, your work email, your company name and website, your sector, your budget range, when you want to bring an agency on board, when the project must be complete, and what you need in your own words.You, in the form.
Tool answersYour answers and the result in our brand health check or Build your own tool (for example a score, findings or a price range), and the messages you send in chat.You, in the tool or chat.
Page and campaign dataThe page you used and its language, the date and time, and the campaign values in the link you arrived from (UTM source, medium, campaign and term). If you came from an ad, the click identifier from Google or Meta. If you allow it in the cookie box: the identifiers that the Google, Meta, LinkedIn and Microsoft tags on the page set in your browser, the pages you view, and, for Microsoft Clarity, how you move, click and scroll on the page (see section 10).Your browser, the link you followed, and the Google, Meta, LinkedIn and Microsoft tags on the page.
Security dataYour IP address, browser and device details, and the signal from the reCAPTCHA check that tells us a person sent the form.Your browser, and Google reCAPTCHA.
Our own notesNotes from calls and meetings, our assessment of your request, and the history of our contact with you.ORIGIN team members.

We calculate a fit score from your answers. It helps our team decide which requests to follow up first. A team member follows up on requests that fit. If your answers show that we are not a good fit, we may not follow up. If you think your answers were misjudged, write to us and a person will review them.

Kindly answer every question accurately. Inaccurate answers affect your application. If you do not give the details marked required, we cannot answer your request.

03Why we use it

We use your information for the purposes below. For the first four, we rely on your consent, which you give by ticking the box on the form. For the last four, we rely on our legitimate interest in running a safe and effective business, or on a legal duty, as the law allows. Two of those four, improving our pages and campaigns and showing ORIGIN ads to visitors, are the exception: we do them only if you allow analytics or advertising in the cookie box.

  • Review your request. We read your answers and decide whether ORIGIN and your team are a good fit.
  • Contact you. We call or email you about your request and arrange calls and meetings.
  • Send you ORIGIN news and offers. Occasional emails about our work, ideas and services.
  • Show you ORIGIN ads. We use your details to build audiences on platforms such as Instagram and LinkedIn, so we can show you ORIGIN ads.
  • Keep the form safe. We block spam, abuse and fraud.
  • Improve our pages and campaigns. We measure which pages and ads lead to requests. If you allow analytics in the cookie box, Google Analytics and Microsoft Clarity described in section 10 help us do this. If you allow advertising, the Google tag, the Meta pixel and the LinkedIn Insight Tag help us measure our ads.
  • Show ORIGIN ads to visitors who allow it. If you allow advertising in the cookie box, the Meta pixel and the LinkedIn Insight Tag in section 10 let us show ORIGIN ads again to people who visited, whether or not they sent a request. You can change your choice at any time (section 10).
  • Meet legal duties. We keep records the law requires.

We do not sell your information.

05Who we share it with

We share your information only with the kinds of recipient below and only for the reasons given. Most of them act only on our instructions. Google and Meta also use what they receive for their own purposes, under their own privacy policies.

  • Providers that run our systems. They keep our customer records, email, calendar and hosting. They receive the details in your request, your contact details, our notes and our messages with you.
  • The form check. It checks that a person, not a bot, sent the form. It receives browser and device signals and your IP address.
  • Analytics providers. Google (Analytics) and Microsoft (Clarity) receive identifiers, the pages you view and, for Clarity, how you move, click and scroll, but only if you allowed analytics in the cookie box.
  • Ad platforms such as Meta (Instagram), LinkedIn, Google, and, if we add them later, TikTok and Snapchat. They build ad audiences and measure our ads. They receive a scrambled version (a hash) of your email address or phone number, ad click identifiers, whether your request went ahead, and, if you allowed analytics or advertising in the cookie box, the identifiers from their tags and the pages you view.
  • Our advertising agency and the team that builds our website. They run our campaigns and maintain these pages. They receive campaign values and, only when needed to fix a problem, form submissions.
  • Advisers and authorities. They give legal, accounting and compliance advice, and make legal requests. They receive only what the advice or the request requires.

We do not sell your information to anyone.

06Transfers outside Saudi Arabia

Some of the providers above store or process information outside Saudi Arabia. ORIGIN team members in Lebanon, where the group is headquartered, may also access it to work on your request.

We transfer personal data outside the Kingdom only as the Saudi Personal Data Protection Law and its regulations allow, we limit what we send to what is needed, and we require our providers to protect it.

07How long we keep it

We keep your information for 36 months after you were last in touch with us: a reply, a call, a meeting or a new request. Our news emails do not restart this period. After that, we delete it or remove everything that identifies you. We keep it longer only if the law requires it, or if we need it to handle a legal claim.

The ad platforms keep visitors in our ad audiences for 365 days at most.

Microsoft Clarity keeps session recordings for 30 days, and heatmaps and recordings we save for review for 9 months. These are Microsoft’s published retention periods.

We keep a record of your consent and of any withdrawal: only your email address, the date, and what you agreed to or stopped. We keep it for as long as we need it to show that we respected your choice.

08How we keep it safe

  • Your form answers travel to us over an encrypted connection.
  • Only the ORIGIN team members and providers who need your information for the purposes in this policy can see it.
  • Our sales workspace signs team members in and keeps their sessions encrypted.
  • We use reCAPTCHA and other checks to block spam and abuse.
  • Our providers are bound by contract or by their terms of service to protect your information.

No system is perfectly secure. If a breach affects your information, we tell you and the authority as the law requires.

09Your rights

Under the Saudi Personal Data Protection Law, you have the right to:

  • know what we do with your information, which this policy explains;
  • access your information and ask for a copy;
  • ask us to correct information that is wrong or incomplete;
  • ask us to delete your information;
  • ask us to restrict how we use it, where the law gives you that right;
  • ask us to stop using your information for ORIGIN ads, and turn off the ad tags in your browser (section 10);
  • withdraw your consent at any time (see section 4).

To use any of these rights, write to info@origin.global. We may ask you to confirm who you are before we act. We reply without undue delay, and within the time the law allows.

If you are not happy with our answer, write to us first so we can put it right. You can also complain to the Saudi Data and AI Authority (SDAIA), the authority that oversees the law.

10Cookies and similar technology

When you open any page on origin.global, a box in the middle of the screen asks you to choose. Accept all allows analytics and advertising. Decline, or no answer, allows neither. Choose lets you allow analytics and advertising one by one. Both are off until you allow them.

  • Kept in your browser while you fill in the form. The page keeps your tool result and the campaign values from your link in your browser until you send the form or close the tab. This helps the form work. It is not shared until you send the form.
  • Google reCAPTCHA. It sets its own cookies and reads browser signals to tell people from bots.
  • Ads. If you came from an ad, the link carries a click identifier from the ad platform. We use it to match your request to the ad.
  • Google Analytics and Google Ads (the Google tag). They set cookies and read browser signals so we can measure our pages and which Google ads lead to requests. Analytics runs only if you allow analytics. Google Ads measurement runs only if you allow advertising.
  • Microsoft Clarity, only if you allow analytics. It sets cookies and records how you move, click and scroll on our pages, so we can see where visitors get stuck. On the ORIGIN SWANA pages we run Clarity on the strictest masking setting, so the text on those pages, including what you type in forms, is not recorded.
  • Meta pixel (Instagram and Facebook), only if you allow advertising. It sets cookies and reads browser signals so we can measure which Instagram and Facebook ads lead to requests and show ORIGIN ads again to people who visited.
  • LinkedIn Insight Tag, only if you allow advertising. It sets cookies and reads browser signals so we can measure which LinkedIn ads lead to requests and show ORIGIN ads again to people who visited.
  • Sortlist badge. Some of our pages show a badge image that your browser loads from Sortlist’s server (sortlist.com). Loading it sends Sortlist your IP address and the usual request details. It sets no cookie on our pages.
  • TikTok pixel and Snap pixel. We may add these two advertising tools to our pages later. They do not run today and no TikTok or Snapchat request is sent from our pages. When we add them, they will run only if you allow advertising in the cookie box. They will set cookies and read browser signals so we can measure which TikTok and Snapchat ads lead to requests and show ORIGIN ads again to people who visited. We will switch them on only after this section is updated to say so.
  • Cloudflare measures how fast our pages load and how many people open them. It does not set cookies.

The pages load Google Tag Manager, a container that holds these tools, so that they can switch on the moment you allow them. Until you allow them, none of the tools runs: no Google Analytics, Google Ads, Meta, LinkedIn or Microsoft request is sent and no cookie is set. Loading Tag Manager itself sends your browser’s address and the usual request details to Google. We keep your choice in your browser for 180 days, then we ask again. To change it at any time, use the Cookie settings button below, or the Cookie settings link next to Privacy policy at the bottom of every page. You can also block or delete cookies in your browser settings, and hide ORIGIN ads in your settings on the ad platform. Google, Meta, LinkedIn and Microsoft also use what their tags collect under their own privacy policies (Google, Meta, LinkedIn, Microsoft). Blocking some cookies may stop parts of the page from working.

If we add other analytics or advertising tools to these pages, we list them here before they go live.

11Children

These pages are for business users. They are not meant for anyone under 18, and we do not knowingly collect information from children. If you think a child has sent us information, write to info@origin.global and we will delete it.

12Changes to this policy

We may update this policy as our services or the law change. The date at the top shows the latest version. If a change affects how we use your information, we tell you and ask for your consent again where the law requires it.

Version 12 widens this policy to the whole of origin.global, names Microsoft Clarity and the LinkedIn Insight Tag, and tells you in advance that we may add the TikTok pixel and the Snap pixel.

13Contact us

For any question about this policy or your information, to use your rights, or to withdraw your consent:

Write to info@origin.global

ORIGIN S.A.R.L, Sahel Alma, Lebanon
ORIGIN LLC
Building 7196, Al Hakam Al Mustansir Billah, Al Khaleej District, Riyadh 13223, Saudi Arabia
Secondary number 3745. Short address RFKA7196