Privacy
Plain-English privacy policy. This page explains what data Nuvelo collects, why, how long we keep it, and how to exercise your rights under UAE PDPL and GDPR.
Last reviewed: 2026-04-22.
Data map
Name + email (scoping form)
Booking a 30-minute scoping call
24 months or until scoped plus 24 months
Notion, Resend
US
IP hash (scoping form)
Abuse prevention and rate limiting
30 days
Vercel KV
US
Consent preferences
Analytics cookie state
12 months
localStorage + cookie
client-side
Plausible page events
Anonymous analytics
26 months
Plausible
EU
GA4 events (if enabled)
Anonymous analytics
26 months
GA4
US
Calendar booking
30-minute scoping call
Cal.com retention default
Cal.com
US
Details
Nuvelo Consulting collects only the data needed to respond to a scoping-call request and to run anonymous analytics on nuveloconsulting.com. We do not sell or share data with advertisers. We do not enrich lead data from third parties.
The full data map is at the top of this page.
Strictly necessary. Functional cookies for session handling, CSRF tokens, and consent state. No consent required.
Analytics. Plausible (EU-hosted, anonymous) and GA4 (US-hosted, anonymous). Loaded only after you accept in the cookie consent banner. Declining is honoured.
Marketing. None in v1. If we add retargeting in a future version, we will update this page and request fresh consent.
You have the right to: access the data we hold about you, correct errors, request erasure, restrict processing, object to processing, and receive your data in a portable format. GDPR also grants the right to lodge a complaint with a supervisory authority.
To exercise any of these rights, email the DPO contact below. We respond within 30 days.
We process scoping-form data on the legal basis of your request and our legitimate interest in responding. Analytics data is processed under consent in the EU and under a legitimate-interest balance in the UAE per UAE PDPL.
Retention per field is in the data-map table above. Requests for earlier deletion are honoured where contractually and legally permitted.
Email hassan@nuveloconsulting.com with the subject line Data Subject Request. Include the name and email associated with the data. We will verify identity, process, and respond within 30 days under PDPL and GDPR.
In the event of a data breach affecting personal data, Nuvelo will notify affected data subjects within 72 hours of becoming aware. We will also notify the UAE Data Office and relevant EU supervisory authority where required.
UAE Data Office: the national authority under UAE Federal Decree-Law No. 45 of 2021 on personal data protection.
For EU supervisory authority, we cooperate with the authority in the country of the data subject is residence. The Irish DPC is our typical lead authority for EU requests.
Enterprise clients can download our standard Data Processing Agreement. Email hassan@nuveloconsulting.com with the subject line DPA Request.
DPO contact
hassan@nuveloconsulting.com
Nuvelo Consulting FZ-LLC, Meydan Free Zone, UAE.