Last updated: 5 July 2026
This policy explains how we process personal data when you visit this website, apply for a website, use the client area, or communicate with us. We process data in accordance with Regulation (EU) 2016/679 ("GDPR").
CVR LLC FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.
Contact: info@cvrsnt.com · EU contact point: Ludovica Dagna (Italy), same email.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Application form: name, WhatsApp number, Instagram handle (optional), discipline, goals, whether you have a website, consent timestamp | Contacting you about our website services and managing your enquiry | Consent (Art. 6(1)(a)) and pre-contractual steps (Art. 6(1)(b)) | Up to 24 months from last contact, then deleted |
| Client area: access-code use, messages in the project chat, files you upload (images, bio, documents) | Delivering your website project and supporting you during it | Contract (Art. 6(1)(b)) | Project duration and up to 24 months after completion |
| Payment data (when paying online): processed by Stripe; we never see or store full card numbers | Processing deposits and payments | Contract (Art. 6(1)(b)); legal obligation for accounting | Accounting records as required by law (up to 10 years) |
| Technical data: IP address and request logs kept by our hosting provider | Security, abuse prevention, service operation | Legitimate interest (Art. 6(1)(f)) | Short rotation per hosting provider policy |
Messages sent in the client-area chat are handled by our team with the support of an AI coordinator (a language-model assistant operated via our hosting provider's AI gateway, with Anthropic as model provider). The AI answers using only the facts of your project; our team is notified of every message and personally reviews each project. If you ask whether you are talking to an AI, it will tell you honestly. Your messages are not used to train AI models, and no decision producing legal or similarly significant effects is made solely by automated means.
We do not sell personal data and we do not share it with third parties for their own marketing.
Some providers process data outside the EU/EEA (including the USA, and the UAE where the controller is established). Where required, transfers rely on adequacy decisions (including the EU-U.S. Data Privacy Framework where the provider is certified) and/or Standard Contractual Clauses with supplementary measures.
This site currently uses only technical storage strictly necessary for its operation (language preference, client-area access, your cookie choice). If marketing tools (such as Meta Pixel) are enabled, they run only after your consent via the cookie banner, and can be refused with one click. Full details: Cookie Policy.
You may access, rectify, erase, restrict and port your data, object to processing based on legitimate interest, and withdraw consent at any time (without affecting prior processing). Write to info@cvrsnt.com; we reply within 30 days. You may also lodge a complaint with your supervisory authority — in Italy, the Garante per la Protezione dei Dati Personali (garanteprivacy.it).
Images and texts you upload for your project remain yours; we use them solely to design and build your website. You confirm you hold the rights to the material you send us.
We may update this policy; the date above reflects the latest version. Substantial changes will be highlighted on this page.