We use four types of cookies: Necessary Cookies (essential for website operation), Statistics/Analytics (help us understand how visitors use the website), Preferences/Functionality (remember your preferences and settings), and Advertisement/Marketing (track visitors across websites to display relevant ads). You can opt out of Google Analytics tracking and manage cookie preferences through your browser settings.

Privacy & Cookies | General Index

Q: What personal data we collect and process, and how do we use it?

We process Account Data (name, business email, employer, user ID, authentication details), Service Usage Data (interactions with Services, requests, data products accessed, parameters, timestamps, IP address), Assistant Content (AI feature questions and responses), Session Recordings (interactions with Services), and Payment Data (billing details processed by payment provider). We process this data to provide, operate and support the Services, authenticate users, maintain security, meet record-keeping obligations as a benchmark administrator, improve and develop Services including AI features, and administer subscriptions and payments.

Q: Who do we share your personal data with?

We share personal data with third party infrastructure providers (cloud infrastructure and hosting, product analytics and error monitoring, payment processing, email delivery, AI and machine learning services), regulators or law enforcement agencies, and partners where you choose to connect a GX connector to a third-party AI assistant. We do not sell your personal data.

Q: AI features and session recording

GX Go includes AI-assisted features and connectors for third-party AI assistants. Questions and responses are processed by AI models hosted by our cloud provider within our own cloud environment; your content is not sent to a model vendor's own service. We will not use your content to train AI models without telling you first. We review and analyse this content to provide support, monitor quality and accuracy, and develop and improve our AI features. Session recording captures user interactions to identify problems and improve Services. Password fields are always masked. Recordings are retained for up to 90 days.

Q: Accessing your personal data and your rights

You have rights under data protection law to access, correct, delete, restrict processing, object to processing, and port your personal data. You can exercise these rights by contacting us at info@general-index.com.

Q: Contacting us and changes to your personal data

If you have any questions about this Privacy Policy or wish to update your personal data, please contact us at info@general-index.com.

Q: Changes to our privacy policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and, where appropriate, notified to you by email. Previous versions are available for reference.

What personal data we collect and process, and how do we use it?

When you access the Website or use the Services, you may provide us with personal data, and we may collect and process such personal data in accordance with this Privacy Policy and for the following purposes:

‍

What personal data do we process?

- Identity Data: this may include your first name, surname, job title, employer and geographical location.

- Contact Data: this may include your email address, phone number(s), physical address and any other contact details you may choose to provide to us.

- Website Technical Data: we may process data regarding general technical use of the Website, such as IP addresses and diagnostic information.

- Account Data: where you use the Services, this may include your name, business email address, employer, user ID and the authentication details used to access the Services.

- Service Usage Data: records of your interactions with the Services, including the requests you make, the data products you access, the parameters of those requests, timestamps and IP address.

- Assistant Content: where you use an AI feature, or connect a GX connector to a third-party AI assistant, the questions you submit and the responses returned.

- Session Recordings: where enabled, a recording of your interactions with the Services.

- Payment Data: where you purchase a subscription directly, billing details processed on our behalf by our payment provider. We do not store full card details.

‍

Why do we process this personal data?

- To register your inquiry

- To contact you with details on our commodity indexing solutions

- To send you marketing and promotional material

- To identify any problems, defects or issues with the Website

- To optimize the performance of the Website

- To improve future versions of the Website

- To provide, operate and support the Services

- To authenticate you and manage access to the Services

- To maintain security, and to investigate and prevent misuse

- To meet the record-keeping obligations that apply to us as a benchmark administrator

- To improve and develop the Services, including our AI features, and to develop new products and services

- To administer subscriptions and payments

‍

What is our lawful basis for processing?

We set out in the following table the purpose for which we may use specific types of your personal data and our specific legal basis for doing so:

‍

Type of data

Data process

Legal basis

Satisfy our legitimate interests (run and operate our Website, run our business, maintain our records)

Contact details (other)

GDPR 6(1)(f) Legitimate Interest

Take steps to fulfill a contract with you

Contact details, financial data (other)

GDPR 6(1)(b) Contractual Obligations

To satisfy our legitimate interest (to enable you to use the Website and make any necessary modifications and updates to the Website)

Contact details (other)

GDPR 6 (1)(f) Legitimate Interest

Your consent (you can withdraw your consent at any time by emailing info@general-index.com or clicking the "unsubscribe" link in any email)

Contact details (other)

GDPR 6(1)(a) Consent

Account Data

Providing access to the Services

GDPR 6(1)(b) Contractual Obligations

Service Usage Data

Operating and securing the Services

GDPR 6(1)(f) Legitimate Interest (secure and reliable operation of our Services)

Service Usage Data

Meeting our record-keeping obligations

GDPR 6(1)(c) Legal Obligation

Assistant Content

Providing and improving AI features

GDPR 6(1)(b) Contractual Obligations and GDPR 6(1)(f) Legitimate Interest

Session Recordings

Understanding and improving how the Services are used

GDPR 6(1)(f) Legitimate Interest

Payment Data

Administering subscriptions

GDPR 6(1)(b) Contractual Obligations

Who do we share your personal data with?

By using the Website or the Services, we may need to disclose your personal data to the following categories of third parties in limited circumstances:

- Third party infrastructure providers: your personal data may be held and processed securely by us on the dedicated systems supplied, monitored and maintained by our third party infrastructure providers, such as our Website hosting provider and customer relationship management provider; HubSpot.

- Regulators or law enforcement agencies: if we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation, we may share your personal data with a regulator or law enforcement agency to comply with legal or regulatory requests.

- Partners: when you provide us with your contact information, we may share it with carefully selected partners for joint marketing purposes. We ensure that any partners we share your data with adhere to strict data protection standards. Your information will only be used to send you relevant marketing communications related to our/their products or services. You have the right to withdraw your consent or object to the processing of your data for marketing at any time by contacting us at info@general-index.com

- Cloud infrastructure and hosting providers.

- Product analytics and error monitoring providers.

- Payment processing providers.

- Email delivery providers.

- Providers of AI and machine learning services that power our AI features.

- Where you choose to connect a GX connector to a third-party AI assistant, that assistant's provider.

We do not sell your personal data.

Transfers of your personal data

Our primary infrastructure is located in the United Kingdom. Some personal data is processed outside the UK, in the circumstances set out below.

- Backups and certain storage are held in the European Economic Area.

- AI processing: where you use our AI features, the content you submit is processed by AI models hosted in the United States.

- Some of our service providers process personal data outside the UK.

Transfers to the European Economic Area are covered by UK adequacy regulations.

For transfers to countries not covered by UK adequacy regulations, including the United States, we rely on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with additional safeguards where appropriate.

If you would like further information about the safeguards we use, please contact us at info@general-index.com.

On visiting any website, browsers download and store text files holding small pieces of data which provides a record of your visit and allow full functionality of the website. They enable personalization where applicable and to see how visitors use the site in order to make improvements for future visits.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission. This site uses different types of cookies (full list of cookie types below). Some cookies are placed by third party services that appear on our pages. You can at any time change or withdraw your consent from the 'Cookie Settings' button at the bottom of each page on our website. Some of these third party services will collect personal data such as contact information. This information is only captured by forms (powered by HubSpot) that have been completed and submitted by you.

Cookie types

Necessary Cookies - Necessary cookies help make our website usable by enabling basic functions like page navigation and access to secure areas of the website. Our website cannot function properly without these cookies.
‍
Statistics/Analytics - Statistic cookies help us understand how visitors interact with the website by collecting and reporting information anonymously.

‍Preferences/Functionality - Preference cookies enable our website to remember information that changes the way it behaves or looks, like your preferred language or the region that you are in.

‍Advertisement/Marketing - Marketing cookies are used to track visitors across our website. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.

We require your consent for cookies to be enabled on devices. If you decline, information will not be tracked other than a single cookie in your browser to give effect to your request not to be tracked. You can opt out via the Google Browser Add-On functionality using any browser. Additional information on cookies including further details on how to opt-out on different browsers can be found at www.allaboutcookies.org

‍The main cookies used on General Index website:

‍Name - Google Analytics (GA4)
‍Description - This helps us understand how visitors arrive at and use the website
‍Retention Period - GoogleAnalytics: 14 Months
‍Type - Statistics/Analytics

‍Name - HubSpot
‍Description - This helps us understand how visitors arrive at and use the website, as well as types of engagement (form submissions, pages viewed etc.). It is also our customer relationship management software that stores a users contact information once that user has started a conversation with us through a form submission
‍Retention Period - As long as a user/customer has an active lifespan with us
‍Type - Preferences/Functionality

‍Name - LinkedIn Insight Tag (LinkedIn Campaign Manager)
‍Description - This helps us understand how many visitors arrive at a predetermined landing page. Some contact information is collected
‍Retention Period - 90 days
‍Type - Advertisement/Marketing

Name - Apollo
‍Description - This helps us understand users intent to buy from us and allows us to prioritize the right content for those users
‍Retention Period - 30 days
‍Type - Advertisement/Marketing

The website and third party websites

The Website may contain links to third party websites. If you follow a link to a third party website, please note that this Privacy Policy does not apply to those websites. We are not responsible or liable for the privacy policies or practices of those websites, so please check their policies before you submit any personal data to those websites.

AI features and session recording

GX Go includes AI-assisted features, and we offer connectors that let you use GX data through third-party AI assistants. When you use these features:

- The questions you submit and the responses returned are processed by AI models hosted by our cloud provider within our own cloud environment; your content is not sent to a model vendor's own service. We will not use your content to train AI models without telling you first.

- We review and analyze this content ourselves — to provide support, to monitor the quality and accuracy of our answers, and to develop, evaluate and improve our AI features. Access is limited to staff who need it for those purposes.

- This content is retained in line with the "Data retention and storage" section below.

When you choose to connect a GX connector to a third-party AI assistant, you are initiating a connection between GX and that provider. We receive only the specific data request needed to answer your question and return a response. We do not receive your conversation with that assistant. Requests made through that connection are processed by us as described in this Privacy Policy, and by that provider under its own privacy policy.

Session recording. We use a third-party analytics product to record how users interact with the Services, so we can identify problems and improve the Services. These recordings capture your interactions, including the text you type into form fields. Password fields are always masked and are not captured. Recordings are retained for up to 90 days.

Data retention and storage

We store your personal data in line with legal, regulatory, financial and good-practice requirements. If you want to know more about our data retention policies, please contact us at info@general-index.com. This information is stored for as long as necessary and permitted by law for the legitimate business purpose(s) for which we originally collected it. In line with the GDPR storage limitation principle, we do not keep data for longer than is needed and data records are periodically reviewed and deleted or anonymized where possible. Personal data is stored on secure servers in line with GDPR guidelines.

We keep personal data for no longer than 7 years. In many cases we delete it sooner, where it is no longer needed for the purpose it was collected for.

Some categories have shorter set periods:

- Session recordings: up to 90 days.

- Cookies: as set out in the cookie table above.

We retain certain records for the full period because, as a benchmark administrator, we are required to keep records that allow our published assessments to be reconstructed and audited.

Accessing your personal data and your rights

As a result of us collecting and processing your personal data, you have the following legal rights:

- to access personal data held about you;
- to request us to make any changes to your personal data if it is inaccurate or incomplete;
- to request your personal data is erased where we do not have a compelling reason to continue to process such data in certain circumstances;
- to receive your personal data provided to us as a data controller in a structured, commonly used and machine-readable format where our processing of the data is based on: (i) your consent; (ii) our necessity for performance of a contract to which you are a party to; or (iii) steps taken at your request prior to entering into a contract with us and the processing is carried out by automated means;
- to object to, or restrict, our processing of your personal data in certain circumstances;
- if we use your personal data for direct marketing, you can ask us to stop and we will comply with your request;
- if we use your personal data on the basis of having a legitimate interest, you can object to our use of it for those purposes, giving an explanation of your particular situation, and we will consider your objection;
- to object to, and not be subject to a decision which is based solely on, automated processing (including profiling), which produces legal effects or could significantly affect you;
- to lodge a complaint with a data protection supervisory body.

To exercise any of your rights set out above, including to withdraw your consent where we have stated we are processing your personal data based on your consent, please contact us at info@general-index.com.

Contacting us and changes to your personal data

If you have any questions, comments and requests about this Privacy Policy or your personal data, please email us at: info@general-index.com.

Please notify us by email with any changes to your personal data at any time.

Changes to our privacy policy

Any changes we may make to this Privacy Policy in the future will be posted here.

Please check back regularly to keep informed of updates or changes to this Privacy Policy. This Privacy Policy was last updated on 28 August 2026.