Perspective What we answer How we do it M&A Discipline
ENESDE
Get a first look
PerspectiveWhat we answerHow we do itM&ADisciplineGet a first look

Privacy Policy

Last updated: October 22, 2026

At a glance

  • Controller: processing is carried out under the Sighture brand. Contact: contact@sighture.com.
  • If you contact us: we use your information only to respond to you and to manage a potential business relationship.
  • What we analyze: publicly available information about business locations, including reviews that consumers post on open platforms. We analyze reviews in aggregate and deliver findings about locations and networks. We do not publish individual reviews or disclose who wrote them.
  • What we never do: sell personal information, build profiles of individuals, or make automated decisions about them.
  • Your rights: you can exercise them at any time by writing to contact@sighture.com.

1. Controller and contact

The processing described in this policy is carried out under the Sighture brand. For data protection questions or to exercise your rights, please write to contact@sighture.com.

Part A · If you contact us

A.1 Information we process

We process the information you provide through our contact form: company or brand, role, headquarters country, number of locations in your network, business email address, and, optionally, a comment. We also process any information you include in emails you send us.

We do not ask for information about your customers or for internal operating data. Please do not include sensitive information, and do not include personal information about third parties unless it is necessary for your inquiry.

A.2 How we use it

We use this information to respond to you, assess whether we can help, prepare and send the first look you request, and manage our communications and any resulting business relationship.

A.3 Legal basis

Where the EU General Data Protection Regulation (GDPR) applies, we rely, where applicable, on Article 6(1)(b) for steps taken at your request prior to entering into a contract, and on our legitimate interest in responding to business communications (Article 6(1)(f)) for other inquiries. Submitting the form does not constitute consent to receive marketing communications unrelated to your request.

A.4 How long we keep it

We keep it for up to 12 months after our last contact with you, unless the law requires a longer period. You may ask us to delete it sooner, and we will honor that request where appropriate under applicable law.

Part B · Business contacts we initiate

B.1 Information we use

We may contact executives at companies that operate networks of locations to introduce our services. To do so, we use published professional information (name, title, company, and business contact details) from public professional profiles and corporate websites.

B.2 Legal basis

Where the GDPR applies, processing professional contact information to introduce our services may rely on legitimate interests under Article 6(1)(f), provided the legal requirements are met. Our marketing communications also comply with the specific rules of each country and communication channel.

B.3 If you prefer not to hear from us

Simply let us know. We will stop contacting you and retain only the information necessary to honor your request.

B.4 How long we keep it

If you do not respond, we delete your information 12 months after our last contact.

Part C · Public information we analyze

C.1 What we do

Working from the outside in, Sighture analyzes the performance of business locations and location networks and compares it with that of their competitors. To do so, we use publicly available information: business directories, public records, and reviews that consumers post on open platforms.

C.2 How we use reviews

Sighture does not publish, quote, or share individual reviews, and does not disclose the identity of their authors in its analyses or in the findings it delivers.

Reviews are analyzed in aggregate. Our findings describe locations, markets, and networks, never individuals. We do not use reviewers’ names or usernames in our analyses.

C.3 Personal information reviews may contain

A public review may include the name or username under which it was posted, the text, the date, and the rating. In addition to the information contained in reviews, we use certain publicly available account characteristics, such as the number of reviews the account has posted, solely to calibrate the statistical weight of each review. We do not conduct any further research intended to identify reviewers or to build personal profiles of them, and we never contact them.

C.4 Sensitive information

Some public reviews may contain references to sensitive personal circumstances, such as health. We do not use those references to analyze reviewers’ personal characteristics or to build individual profiles.

C.5 Legal basis

For the processing of ordinary personal data, we rely on legitimate interests under Article 6(1)(f) GDPR, namely conducting comparative and longitudinal research into the commercial performance of locations, markets, and networks, based on publicly available information and with findings intended for organizations rather than for evaluating individual consumers. We rely on this legal basis only where the requirements of necessity and of balancing the rights and interests concerned are met.

To protect individuals, we do not publish individual reviews, we do not disclose reviewers’ identities, and we do not use their names or usernames in our analyses.

Where Mexican law applies, processing is governed by the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), including its rules on notice, purposes, consent, and statutory exceptions.

C.6 How we protect it

Access to this information is restricted. Our reports contain aggregate findings only.

C.7 How long we keep it

  • Reviews as collected: up to 24 months from collection.
  • Information derived from our analysis (classifications and indicators by location): up to 36 months, subject to annual review.
  • Fully anonymized statistical findings: may be retained for historical studies, where such use is permitted.

Deletion of information held by our service providers is governed by the agreements and the retention and deletion procedures that apply to each service.

C.8 Notice to reviewers

This policy provides publicly available information about the processing of reviews and a means to exercise privacy rights. Notice obligations relating to personal data obtained indirectly are addressed in accordance with the requirements and exceptions established by applicable law.

C.9 Do we hold information about you?

If you would like to inquire about, object to the processing of, or request the deletion of information related to a review you posted, please write to contact@sighture.com. To help us locate it, please include the username, location, date, or link, if available. We will review your request and inform you of the outcome in accordance with applicable law.

Part D · For all cases

D.1 Service providers and recipients

We use service providers for website hosting and forms, technical collection of public information, analytical processing (including artificial intelligence tools), cloud storage, and email. Depending on the service and purpose, they may act as processors or, for certain operations, as independent controllers.

The aggregate findings of our analyses are shared with client organizations as part of our competitive intelligence services. These reports contain no individual reviews and no personal identifiers of reviewers.

We do not sell or rent personal information, and we do not share it for advertising purposes.

D.2 International transfers

Some services may involve transferring personal information outside the European Economic Area. Where the GDPR applies, such transfers must comply with the mechanisms set out in Articles 44 et seq. You may request information about the applicable safeguards by writing to contact@sighture.com.

D.3 Your rights

  • In the European Union: access, rectification, erasure, restriction of processing, data portability (where applicable), and objection. Under Article 21(1) GDPR, you may object at any time, on grounds relating to your particular situation, to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before its withdrawal.
  • Direct marketing: where your personal data is processed for direct marketing purposes, you may object to that processing at any time (Article 21(2) GDPR).
  • In Mexico: where Mexican law applies, access, rectification, cancellation, and opposition (ARCO rights), as well as the right to limit the use or disclosure of your information and to revoke consent, where applicable.
  • In California: where California privacy law applies, the rights it provides, including access, correction, and deletion.

To exercise your rights, write to contact@sighture.com, stating what you are requesting and what information or posts will help us locate the relevant records. Where necessary, we may ask for reasonable information to verify your identity or your authority to act on another person’s behalf. We will inform you of our decision, any action taken, and, where applicable, the reasons why a request cannot be fulfilled. In the EU, under Article 12(3) GDPR, we will generally respond within one month of receiving your request, subject to any extension permitted by law.

D.4 Complaints

In the EU, you may lodge a complaint with the supervisory authority of the Member State where you habitually reside or work, or where the alleged infringement occurred. In Mexico, where Mexican law applies, you may contact the Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno) through the procedures provided by law.

You may also write to us directly to try to resolve any issue. Contacting us first is voluntary and does not limit your right to bring the matter before the competent authority.

D.5 Cookies and browser storage

This website does not use cookies or local browser storage, and it does not use analytics or advertising tools to track visitors.

D.6 Security

We use encrypted connections and access controls.

D.7 Automated decisions

We do not build individual profiles of reviewers: public account characteristics are used only to weight each review statistically. Nor do we make solely automated decisions about individuals that produce legal effects concerning them or similarly significantly affect them.

D.8 Children

This website is intended for businesses and professionals. We do not knowingly collect information from children.

D.9 Changes

We announce changes to this policy by posting the updated version on this website, together with its effective date. Where applicable law requires additional notice or consent, we will provide such notice or obtain such consent.

What the market already knows about your network.
Contact FAQ Privacy Legal © 2026