This Privacy Policy describes how BRAVA 360 Digital (“we”, “us”, “our”) collects, uses, and shares information about you when you use our website at https://brava360.digital (the “Site”) or engage with our services.

By using the Site or our services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information you provide directly

When you contact us, book a consultation, or fill out a form on our Site, we may collect:

Name and job title
Email address and phone number
Company name and website URL
Your message and any details you choose to share

1.2 Information collected automatically

When you visit our Site, we automatically collect certain technical information, including:

IP address and approximate geographic location (country/city level)
Browser type and version
Pages viewed, time on site, and referring URL
Device type and operating system

This information is collected through Google Analytics 4 and similar tools. We use this data in aggregate to understand how our Site is used and to improve it. We do not use this data to identify you personally.

1.3 Cookies

Our Site uses cookies. For full details of the cookies we use and how to control them, please see our Cookie Policy.

2. How We Use Your Information

We use the information we collect to:

Respond to your enquiries and provide the services you request
Schedule and manage consultations
Send service-related communications (project updates, invoices, reports)
Improve our Site and service offering
Comply with our legal obligations
Protect against fraud and misuse

We do not sell your personal data. We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

3. Legal Basis for Processing (GDPR / UAE PDPL)

Purpose	Legal Basis
Responding to enquiries and providing services	Contractual necessity / Legitimate interests
Analytics and Site improvement	Legitimate interests (with opt-out via cookie controls)
Marketing communications	Consent (where required) / Legitimate interests
Legal compliance	Legal obligation

If you are located in the European Economic Area (EEA) or United Kingdom, the above bases apply under the GDPR / UK GDPR. If you are located in the UAE, we process your data in compliance with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL).

4. How We Share Your Information

We share your information only in the following circumstances:

Service providers: We use trusted third-party providers for hosting (Rocket.net), email (Fluent SMTP), analytics (Google Analytics), and scheduling (Calendly). These providers process your data on our behalf under appropriate data processing agreements.
Legal requirements: We may disclose your information if required by law, court order, or governmental authority.
Business transfer: If we sell or transfer our business, your information may be transferred as part of that transaction.

We do not share your personal data with third parties for their own marketing purposes.

5. Data Retention

We retain personal data for as long as necessary to provide our services and fulfil the purposes described in this policy, or as required by law. Enquiry and contact data is retained for up to 3 years from last contact unless you ask us to delete it sooner. Project-related data is retained for up to 7 years for accounting and legal compliance purposes.

6. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include HTTPS encryption, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of your personal data, subject to legal obligations.
Restriction: Request that we limit how we use your data.
Portability: Request your data in a machine-readable format.
Objection: Object to processing based on legitimate interests.
Withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email us at hello@brava360.digital. We will respond within 30 days.

8. International Data Transfers

Our servers are located in the UAE/GCC region. If you are accessing our Site from outside this region, your data may be transferred to and processed in a country with different data protection laws. We take steps to ensure adequate safeguards are in place where required.

9. Third-Party Links

Our Site may contain links to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any external sites you visit.

10. Children’s Privacy

Our Site and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Continued use of our Site after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Email: hello@brava360.digital
Address: One Central, The Offices 4, Trade Centre, Dubai, UAE