Privacy Policy

This policy explains how Aventra Global LLC ("Aventra", "we", "us") handles personal data: what we collect, why, who we share it with, how long we keep it and the rights you have. We wrote it to meet the requirements of the data protection laws that apply to our work, including the EU and UK General Data Protection Regulations, the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), the Saudi Personal Data Protection Law, India's Digital Personal Data Protection Act 2023 and California privacy law.

If anything here is unclear, email hello@aventraglobal.com and we will explain it.

Who we are

Aventra Global LLC is a software engineering company registered in Dubai, United Arab Emirates. For the personal data described in this policy, we are the controller: we decide why and how it is used.

What this policy covers

This policy covers personal data we collect when you:

• visit this website;
• contact us, including through the enquiry form, by email, by phone or on WhatsApp;
• meet or work with us as a client, a prospective client or a supplier, or as someone who works for one.

When we build or support software for a client, we often process personal data inside that software on the client's behalf. In that role we act as a processor under the client's instructions and our agreement with them, and the client's own privacy notice applies to that data.

The personal data we collect

Information you give us. When you send an enquiry, we collect your name, work email, company, the service you are interested in, your budget range and timeline, whether you would like a non-disclosure agreement, and the message you write. When we correspond or meet, we keep a record of what we discuss and agree, and your business contact details.

Information collected automatically. Our hosting and security provider records technical data when you visit, such as your IP address, browser and device type, the pages you request, the referring page and the date and time. We use this data to deliver the website, keep it secure and investigate misuse. This website does not use advertising trackers or analytics cookies.

Information from other sources. Before a meeting, we may look at publicly available information about your company, such as its website or professional profiles. If someone refers you to us, they may share your name and business contact details.

Please do not send us health, financial or other sensitive personal data through the enquiry form. If a project involves sensitive data, we will agree how to handle it under a separate agreement.

How we use it, and our legal bases

Where a law requires your consent for a particular use, we ask for it, and you can withdraw it at any time without affecting processing that took place before you withdrew. We do not sell personal data, we do not use it for targeted advertising, and we do not make decisions about you based solely on automated processing.

Cookies and similar technologies

This website does not set advertising or analytics cookies. Our hosting provider, Cloudflare, may set strictly necessary cookies that protect the site against bots and abuse; these do not track you across other websites and cannot be switched off without affecting security. If we introduce analytics in the future, we will update this policy first and ask for your consent where the law requires it.

We honour Global Privacy Control signals as a request to opt out of the sale or sharing of personal data. We do not sell or share personal data in that sense in any case.

Who we share it with

We share personal data only where we need to, and only with:

• Service providers that act on our instructions, such as our hosting and content delivery provider (Cloudflare), our email delivery provider for enquiry forms (Resend), and our email, file storage, video conferencing and accounting tools. They must keep the data confidential and secure, and use it only to provide their service to us.
• Professional advisers, such as lawyers, accountants and auditors, bound by confidentiality.
• Authorities, where the law requires us to disclose data, or to protect our rights, property or safety and those of others.
• A buyer or successor, if Aventra is involved in a merger, acquisition or sale of assets, under safeguards equivalent to this policy.

International transfers

We are based in the United Arab Emirates, and some of our service providers process data in other countries, including the European Union and the United States. When we transfer personal data internationally, we use the safeguards the applicable law requires, such as adequacy decisions or standard contractual clauses, and we choose providers that protect data to a standard consistent with this policy.

How long we keep it

• Enquiries that do not lead to a project: up to 24 months after our last contact, so we can pick up the conversation again. After that we delete them.
• Client, contract and billing records: for the length of our relationship, and afterwards for the periods required by tax and commercial record-keeping laws.
• Technical and security logs: for short periods, only as long as needed for security and troubleshooting.

When we no longer need personal data, we delete it or anonymise it so it can no longer identify you.

How we protect it

We protect personal data with measures proportionate to the risk, including encryption in transit, access limited to the people who need it, multi-factor authentication on our accounts, careful selection of service providers, and confidentiality obligations for everyone who works with us. No system is perfectly secure; if a breach affecting your data occurs, we will notify you and the relevant authorities where the law requires us to.

Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you, and receive a copy;
• correct data that is inaccurate or incomplete;
• delete your data;
• restrict or object to our use of it, including for direct marketing at any time;
• receive your data in a portable format and have it sent to someone else;
• withdraw consent where we rely on it;
• not be subject to decisions based solely on automated processing that significantly affect you;
• nominate another person to exercise your rights if you die or become unable to, under India's DPDP Act;
• know, delete and correct your personal information, and not be discriminated against for exercising these rights, under California law.

To exercise any of these rights, email hello@aventraglobal.com. We may need to verify your identity before acting on a request. We respond within one month, or sooner if the law that applies to you requires it, and we do not charge a fee unless a request is clearly unfounded or excessive. If you are in California, you may use an authorised agent to make a request on your behalf.

You also have the right to complain to a data protection authority. Depending on where you are, that may be the UAE Data Office, the supervisory authority in your EU country, the UK Information Commissioner's Office, the Data Protection Board of India, the Saudi Data and AI Authority, or the California Privacy Protection Agency. We would appreciate the chance to resolve your concern first, so please contact us.

Children

This website and our services are for businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.

Links to other websites

This website links to other sites, such as the platforms where you can share our articles. Their operators control how they handle your data, and their own privacy policies apply.

Changes to this policy

We will update this policy when our practices or the law change, and show the new date at the top of the page. If a change significantly affects how we use your data, we will take reasonable steps to tell you before it takes effect.

Contact us

For any question about this policy or your personal data, email hello@aventraglobal.com, or write to Aventra Global LLC, Dubai, United Arab Emirates.