Skip to content
Nuvelo ConsultingBook a Consultation

Privacy

Plain-English privacy policy. This page explains what data Nuvelo collects, why, how long we keep it, and how to exercise your rights under UAE PDPL and GDPR.

Last reviewed: 2026-04-22.

Data map

Name + email (scoping form)

Booking a 30-minute scoping call

24 months or until scoped plus 24 months

Notion, Resend

US

IP hash (scoping form)

Abuse prevention and rate limiting

30 days

Vercel KV

US

Consent preferences

Analytics cookie state

12 months

localStorage + cookie

client-side

Plausible page events

Anonymous analytics

26 months

Plausible

EU

GA4 events (if enabled)

Anonymous analytics

26 months

GA4

US

Calendar booking

30-minute scoping call

Cal.com retention default

Cal.com

US

Details

Nuvelo Consulting collects only the data needed to respond to a scoping-call request and to run anonymous analytics on nuveloconsulting.com. We do not sell or share data with advertisers. We do not enrich lead data from third parties.

The full data map is at the top of this page.

Strictly necessary. Functional cookies for session handling, CSRF tokens, and consent state. No consent required.

Analytics. Plausible (EU-hosted, anonymous) and GA4 (US-hosted, anonymous). Loaded only after you accept in the cookie consent banner. Declining is honoured.

Marketing. None in v1. If we add retargeting in a future version, we will update this page and request fresh consent.

You have the right to: access the data we hold about you, correct errors, request erasure, restrict processing, object to processing, and receive your data in a portable format. GDPR also grants the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, email the DPO contact below. We respond within 30 days.

We process scoping-form data on the legal basis of your request and our legitimate interest in responding. Analytics data is processed under consent in the EU and under a legitimate-interest balance in the UAE per UAE PDPL.

Retention per field is in the data-map table above. Requests for earlier deletion are honoured where contractually and legally permitted.

Email hassan@nuveloconsulting.com with the subject line Data Subject Request. Include the name and email associated with the data. We will verify identity, process, and respond within 30 days under PDPL and GDPR.

In the event of a data breach affecting personal data, Nuvelo will notify affected data subjects within 72 hours of becoming aware. We will also notify the UAE Data Office and relevant EU supervisory authority where required.

UAE Data Office: the national authority under UAE Federal Decree-Law No. 45 of 2021 on personal data protection.

For EU supervisory authority, we cooperate with the authority in the country of the data subject is residence. The Irish DPC is our typical lead authority for EU requests.

Enterprise clients can download our standard Data Processing Agreement. Email hassan@nuveloconsulting.com with the subject line DPA Request.

DPO contact

hassan@nuveloconsulting.com

Nuvelo Consulting FZ-LLC, Meydan Free Zone, UAE.