Privacy Policy

1. Introduction

Nacravo LLC ("Nacravo", "we", "us" or "our") is committed to protecting the privacy of everyone who contacts us, books a service, or visits www.nacravo.com. This Privacy Policy explains what personal information we collect, why we collect it, how we use and safeguard it, and the rights you have over it. Nacravo LLC is the data controller responsible for the personal information described here.

It applies to our website, our booking and enquiry channels (WhatsApp, telephone, email and web forms), and the marketing and analytics tools we use to run our business. By using our website or services, you agree to the practices described in this policy.

2. Company & Contact Information

For any privacy matter you can reach our Data Protection team at info@nacravo.com.

3. Definitions

• Personal data — any information relating to an identified or identifiable individual, such as a name, phone number, email address or location.
• Processing — any operation performed on personal data, including collection, storage, use, sharing and deletion.
• Data controller — the party that determines the purposes and means of processing; here, Nacravo LLC.
• Data processor — a third party that processes data on our behalf, such as our hosting or analytics providers.
• Cookies — small text files stored on your device that help websites function and measure performance.

4. Information We Collect

We only collect what we need to quote, deliver and improve our services. Depending on how you interact with us, this may include:

• Personal information — your name and the details you choose to share when requesting a quote or booking.
• Contact information — phone number, WhatsApp number and email address.
• Location information — the area, building or address where a service is required (for example, Downtown Dubai, Business Bay or DIFC). We do not track your device's precise GPS location.
• Service details — property type, number of bedrooms, preferred date and time, and any notes you provide.
• Device and browser information — browser type, operating system, screen size and referring page.
• IP address — collected automatically by our hosting and analytics providers for security and aggregate reporting.
• Cookies and usage data — how you navigate and interact with our website (see our Cookie Policy).
• Payment and invoice information — the information needed to issue an invoice and record a completed transaction. We do not store full card numbers.
• Marketing preferences — your choices about receiving offers and updates, and your cookie-consent selections.

5. How We Collect It

• Website contact and booking forms — the details you submit to request a quote or book a service.
• WhatsApp communication — messages you send us via WhatsApp Business. Your WhatsApp messages are also governed by WhatsApp's own privacy terms.
• Phone calls and emails — the information you share when you call or email us.
• Booking requests and customer support — records of your requests and our correspondence.
• Payments and invoices — details captured when a service is billed.
• Automatically — through cookies, Google Analytics and Google Tag Manager as you browse, subject to your consent.

6. Spam Protection & Google reCAPTCHA

To protect our forms and messaging channels from spam and abuse, we may use anti-spam and bot-detection technologies, which can include Google reCAPTCHA. Where reCAPTCHA is used, it collects hardware and software information (such as device and application data) and sends it to Google for analysis to distinguish humans from automated traffic. This use is subject to the Google Privacy Policy and Terms of Service.

7. Analytics & Advertising

To understand how our website performs and to reach people looking for cleaning and maintenance in Dubai, we use the following platforms, configured through Google Tag Manager. Analytics and advertising tags load only after you consent through our cookie banner, in line with Google Consent Mode v2:

• Google Analytics (GA4) — aggregate website usage and traffic-source reporting.
• Google Ads conversion tracking — measuring which campaigns lead to enquiries.
• Google Tag Manager — the tag-management layer that governs our measurement tags.
• Google Search Console — monitoring how our site appears in Google Search.
• Meta Pixel — ad measurement and optimisation across Facebook and Instagram.
• Microsoft Advertising — ad performance measurement on the Microsoft network.

8. Google OAuth, the Google Ads API & Scopes

Nacravo uses Google's advertising and analytics platforms to manage its own marketing. Where we connect a Google account through Google OAuth and the Google Ads API, we do so under strict controls:

The Google APIs and services we may connect to are:

Google service / API	Purpose
Google OAuth 2.0	Secure authentication and authorisation (no password is shared with Nacravo).
Google Ads API	Internal campaign management, reporting, analytics and optimization.
Google Analytics (GA4)	Aggregate website measurement and reporting.

Nacravo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. You can review or revoke access at any time in your Google Account permissions.

9. How We Use Your Information

• Respond to enquiries and prepare accurate, fixed quotes;
• Schedule, deliver and document services, including before-and-after photo reports;
• Issue invoices and keep proper business records;
• Provide customer support and handle any follow-up or re-work;
• Improve our website, services and operations through analytics;
• Deliver relevant advertising and measure its effectiveness (with your consent);
• Send service updates and, where you have opted in, marketing communications;
• Protect our website and comply with legal obligations.

10. Artificial Intelligence & Automated Decision-Making

We may use AI-assisted tools to help with analytics, reporting, scheduling and advertising-campaign optimization — for example, to summarise performance data or suggest improvements. These tools support our team; they do not replace human judgement. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing without human involvement. If you have questions about any automated processing, contact our Privacy Officer.

11. Legal Basis for Processing

We process personal data where we have a lawful basis: to take steps at your request before entering into a contract and to perform that contract (quoting and delivering services); for our legitimate interests in operating and improving our business (analytics, security and service quality); with your consent (non-essential cookies and marketing); and to comply with our legal and regulatory obligations in the UAE.

12. Third-Party Services We Rely On

• Hosting and cloud providers — our website is hosted on a reputable cloud platform (Vercel) and served over encrypted connections.
• Google services — Analytics, Tag Manager, Ads, Search Console and reCAPTCHA, as described above.
• Messaging — WhatsApp Business, for the messages you send us.
• Advertising platforms — Meta and Microsoft Advertising, for campaign measurement.
• Payment providers — regulated providers handle electronic payments; Nacravo does not store full card details.

We do not sell your personal data. We may disclose information where required by law or to protect our rights, property or safety.

13. Data Retention

We keep personal data only as long as necessary for the purposes described in this policy. Our standard retention periods are:

When data is no longer needed, we securely delete or anonymise it.

14. Data Security & Encryption

We protect personal data with technical and organisational measures, including TLS 1.3 encryption in transit (HTTPS), AES-256 encryption at rest for sensitive data such as OAuth tokens, role-based access controls, least-privilege permissions and continuous monitoring. Full details are in our Security Policy. No method of transmission or storage is completely secure, but we work continuously to protect your information.

15. Your Rights

Subject to applicable law, you have the right to:

• Access — request a copy of the personal data we hold about you;
• Correction — ask us to correct inaccurate or incomplete data;
• Deletion — ask us to delete your data, through our Data Deletion process;
• Data portability — receive your data in a structured, commonly used format;
• Object or restrict — object to certain processing, including direct marketing;
• Withdraw consent — where processing is based on consent, withdraw it at any time (including via the cookie banner);
• Cookie control — manage cookies through our consent banner, your browser, and our Cookie Policy.

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

16. International Users — EEA & UK (GDPR)

Nacravo is based in the UAE and serves customers in Dubai. If you access our website from the European Economic Area (EEA) or the United Kingdom, we apply GDPR/UK GDPR principles to your personal data as a matter of good practice. In addition to the rights listed above, you have the right to lodge a complaint with your local data-protection supervisory authority. Where we rely on consent, you may withdraw it at any time; where we rely on legitimate interests, you may object. Details of the legal bases we rely on are in section 11, and international-transfer safeguards are in section 19.

17. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it, to request access and deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information. Nacravo does not sell your personal information and does not share it for cross-context behavioural advertising in exchange for money. We will not discriminate against you for exercising your rights. To make a request, contact our Privacy Officer using the details below.

18. Children's Privacy

Our services and website are intended for adults arranging cleaning and maintenance for their homes or businesses. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

19. International Data Transfers

Some of our service providers (for example, Google, Meta, Microsoft and our hosting provider) operate globally, so your data may be processed on servers outside the UAE. Where this happens, we rely on providers that apply appropriate safeguards and recognised data-protection frameworks (such as Standard Contractual Clauses where applicable) to keep your information protected to the standard described in this policy.

20. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we do, we will revise the "Last updated" date and version number at the top of this page. Significant changes will be highlighted on our website.

21. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us.