Privacy PolicyPrivacy Policy

1. Who we are

This website is operated by Nova Web Technology, a web design and digital technology business serving clients across the United Arab Emirates.

• Registered legal entity name: <<CLIENT TO PROVIDE>>
• Trade licence number and issuing authority: <<CLIENT TO PROVIDE>>
• Registered business address: <<CLIENT TO PROVIDE>>
• Email: CEO@novawebtechnology.net
• Telephone: 050 986 0360

For the purposes of applicable data protection law, the registered entity named above is the controller of the personal data described in this policy.

2. What personal data we collect

2.1 Information you give us directly

When you submit the enquiry form on this website, or contact us by email, telephone or WhatsApp, we collect the information you choose to provide. This typically includes:

• your name;
• your email address;
• your telephone or WhatsApp number;
• your company or business name, where you supply it;
• the content of your message, including any details of the project, budget range or timeline you describe.

Please do not include sensitive personal data, financial account details, or confidential third-party information in an enquiry message. If you need to share commercially sensitive material, ask us and we will agree a secure route first.

2.2 Information collected automatically

When you visit this website, limited technical information is collected by our hosting infrastructure and, where enabled, our analytics provider. This may include your IP address (which may be truncated or anonymised by the analytics provider), browser and device type, operating system, referring website, the pages you view and the approximate region you are browsing from.

This information is used in aggregate to understand how the site performs and which content is useful. We do not attempt to identify individual visitors from it, and we do not combine it with enquiry form data to build behavioural profiles.

2.3 Information we collect during a client project

If you engage us, we will additionally process the business and contact information needed to deliver the project — for example billing contacts, domain and hosting account details, and any content, imagery or credentials you supply for use on your website. This data is processed under our contract with you and is covered by the confidentiality terms of that engagement.

3. Why we use your data and our lawful basis

We only process personal data where we have a lawful basis to do so. The bases we rely on are:

• Performance of a contract, or steps taken at your request before entering into a contract — responding to your enquiry, preparing a proposal or quotation, and delivering and supporting an engaged project.
• Legitimate interests — operating, securing and improving this website, understanding aggregate site usage, keeping records of business communications, and preventing fraud, spam and abuse. We balance these interests against your rights and do not rely on this basis where your interests override ours.
• Consent — where you have opted in to receive marketing communications, or where consent is required for non-essential cookies or analytics in your jurisdiction. You may withdraw consent at any time, without affecting processing carried out before withdrawal.
• Legal obligation — retaining accounting, tax and invoicing records for the periods required by applicable UAE law.

We do not sell personal data, and we do not share enquiry data with third parties for their own marketing purposes.

4. Cookies and similar technologies

This website aims to use the minimum number of cookies necessary. The categories that may be used are:

• Strictly necessary — required for the site to function and to protect forms against automated abuse. These cannot be switched off.
• Analytics / performance — used to measure aggregate traffic and page performance. Where required by law, these are set only after you consent.

We do not use advertising or cross-site tracking cookies on this website. You can block or delete cookies through your browser settings; blocking strictly necessary cookies may prevent parts of the site, including the enquiry form, from working correctly.

Analytics and cookie tooling actually deployed on this site: <<CLIENT TO PROVIDE>>. This section must be finalised to name the specific providers in use before launch.

5. Third parties who process data for us

We use a small number of reputable service providers to run this website and our business. Each acts as a processor on our instructions, under a contract that requires appropriate security and confidentiality. The categories are:

• Website hosting and content delivery — serves the website and processes server logs.
• Form delivery and email — transmits and stores enquiry messages so we can reply.
• Analytics — provides aggregate traffic and performance reporting.
• Messaging— where you choose to contact us via WhatsApp, your message is handled under that platform's own privacy policy, not ours.
• Accounting and invoicing — for client billing records.

Named processors and their locations: <<CLIENT TO PROVIDE>>. We may also disclose personal data where we are required to do so by law, by a competent regulator, or by a court of competent jurisdiction, or where disclosure is necessary to establish, exercise or defend legal claims.

6. International transfers

Some of our service providers store or process data on servers located outside the United Arab Emirates. Where personal data is transferred outside the UAE, we take reasonable steps to ensure it remains protected to a standard consistent with this policy and with applicable UAE data protection law — for example by contracting with providers who offer standard contractual clauses or an equivalent transfer mechanism, and who operate in jurisdictions recognised as providing an adequate level of protection.

Confirmed processing locations and transfer safeguards: <<CLIENT TO PROVIDE>>.

7. How long we keep your data

We keep personal data only for as long as it is needed for the purpose it was collected for, or for as long as the law requires. As a general rule:

• Enquiries that do not become projects — kept for up to <<CLIENT TO PROVIDE>> (enquiry retention period) from your last contact with us, then deleted, so we can pick up a conversation you return to.
• Client project records and correspondence — kept for the duration of the engagement and for a reasonable period afterwards to support maintenance requests and to establish or defend legal claims.
• Accounting and tax records — kept for the minimum retention period required by applicable UAE law.
• Analytics data — retained in aggregate form according to the retention settings of the analytics provider.

8. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. These include encryption of data in transit over HTTPS, access controls and least-privilege access to systems holding client data, use of reputable providers with recognised security practices, and keeping software and dependencies patched.

No method of transmission or storage is completely secure. While we work to protect your data, we cannot guarantee absolute security, and any transmission is at your own risk. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the relevant authority and affected individuals as required by applicable law.

9. Your rights

Subject to applicable law and to any exemptions that apply, you have the right to:

• request access to the personal data we hold about you;
• request correction of data that is inaccurate or incomplete;
• request deletion of your data where there is no continuing lawful reason for us to hold it;
• object to, or request restriction of, processing carried out on the basis of our legitimate interests;
• request a copy of data you provided to us in a portable, machine-readable format;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with the competent data protection authority in your jurisdiction.

To exercise any of these rights, contact us using the details in section 12. We will respond within the period required by applicable law. We may ask you to verify your identity before acting on a request, to make sure data is not disclosed to the wrong person.

10. Children's data

This website and our services are directed at businesses and are not intended for children. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our services, our providers, or the law. The current version is always published on this page, with the “last updated” date shown above. Where a change is material, we will take reasonable steps to bring it to the attention of affected clients — for example by email — before it takes effect.

12. How to contact us

For any question about this policy, or to make a data protection request, contact us:

• Data protection contact: <<CLIENT TO PROVIDE>>
• Email: CEO@novawebtechnology.net
• Telephone: 050 986 0360
• Registered address for written requests: <<CLIENT TO PROVIDE>>