Privacy Policy

1. Introduction

V and Bruno LLC ("V and Bruno", "we", "us", or "our") is a web design and development company based in the United Arab Emirates. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and the choices and rights you have.

It applies to our website, vandbruno.net, including its enquiry form; to our client portal; and to the documents we share with you through secure links, such as proposals, contracts, invoices, and receipts. We are responsible for the personal information we collect through them.

2. Information We Collect

• When you send us an enquiry. Your name, company or organisation, phone number, email address, the service you are interested in, your project timeline, your budget range, anything you tell us about your project, and which page or button you used to open the form. Your enquiry is saved in our client portal as a lead, and our team is notified so we can reply.
• When you become a client. Your contact details, your company's details (such as its name, address, and licence or tax registration details where they appear on documents), and the records of our work together: proposals, contracts, invoices, receipts, project plans, and the comments exchanged on your projects.
• When you use the client portal. Your name and email address. You sign in with a password or with a one-time sign-in link that we email to you. Passwords are stored only in a protected (hashed) form that cannot be read back. Each sign-in session records the IP address and browser it was started from, to keep your account secure.
• When you accept a proposal or sign a contract. The full legal name and email address you enter, the date and time, your IP address and browser details, and a copy of the document exactly as you accepted it. We keep this as the record of our agreement.
• Automatically. Like most websites, our servers and hosting provider receive your IP address and technical details such as your browser and device type. We also use IP addresses briefly to limit how many times a form can be submitted, which protects it from abuse. With your consent, analytics tools collect information about how you use our website (see section 4).

3. How We Use Your Information

We use your information to:

• Reply to your enquiry and discuss your project, because you asked us to.
• Prepare proposals, deliver our services, issue invoices and receipts, and give you access to the client portal, because this is necessary to enter into and perform our agreement with you.
• Keep our website, portal, and documents secure, prevent fraud and abuse, and improve our services, because we have a legitimate interest in doing so.
• Understand how visitors use our website through analytics, only when you have agreed to analytics cookies.
• Keep accounting, tax, and contract records, and respond to lawful requests, because the law requires it.

We do not sell your personal information, and we do not use it for automated decisions that have legal or similarly significant effects on you.

4. Cookies and Similar Technologies

We use a small number of cookies and similar technologies:

• Strictly necessary. A sign-in cookie that keeps you signed in to the client portal; a cookie that keeps a password-protected document open for 24 hours after you enter its password; and a record in your browser of your cookie choice. These do not need your consent, because the portal and documents cannot work without them.
• Analytics (only with your consent). We use Google Tag Manager to load Google Analytics, which tells us which pages are visited and how, and Microsoft Clarity, which shows us how visitors interact with our pages, for example where they click and how far they scroll, so we can improve them. Until you accept, Google's tags run in a consent mode that does not store analytics or advertising cookies.

When you first visit our website, you are asked to accept or reject non-essential cookies. You can change your choice at any time using the preferences below.

5. Service Providers

We use trusted providers to run our website and business. They process personal information on our behalf, only as needed to provide their service:

• Cloudflare, which hosts our website, portal, and database, and protects them from attacks.
• Resend, which delivers the emails our portal sends, such as invitations and sign-in links.
• Google (Tag Manager and Analytics) and Microsoft (Clarity), for analytics, only with your consent.

These providers have their own privacy policies. Our website's fonts and images are served from our own site, not by third parties.

6. When We Share Information

Besides the providers above, we share personal information only where the law requires it, to protect our rights or the safety of others, with professional advisers such as accountants and lawyers under a duty of confidentiality, as part of a sale or reorganisation of our business, or with your consent.

7. International Transfers

Our providers may store or process information outside the United Arab Emirates. Where they do, we rely on their contractual commitments and security measures to protect it as this policy describes.

8. How Long We Keep Information

• Enquiries are kept while we discuss a possible project and follow up. If nothing comes of it, we delete them when they are no longer needed, or sooner if you ask.
• Client records, including proposals, contracts and their acceptance records, invoices, and receipts, are kept for as long as we work together and afterwards for as long as the law requires us to keep accounting, tax, and contract records.
• Deleted portal content is moved to an archive before it is removed for good, so mistakes can be undone. Deleted project comments are kept in the archive for one year.
• Sign-in links expire after 24 hours, and expired sessions and links are removed.
• Analytics data is kept according to the retention settings of Google Analytics and Microsoft Clarity.

9. How We Protect Information

Our website and portal are served only over encrypted connections. Portal access is limited to you and our authorised team, documents shared by link are protected by a password, and passwords are never stored in readable form. No system is completely secure, but we work to protect your information and to fix any weakness we find.

10. Your Rights

Depending on where you live, you may have the right to access the personal information we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive a copy of it in a portable format, and to withdraw your consent at any time (for cookies, using the preferences above). Withdrawing consent does not affect anything done before you withdrew it.

To exercise any of these rights, contact us using the details below. We may need to confirm your identity first. Some information, such as invoices and signed contracts, we may have to keep for legal reasons even if you ask us to delete it. You also have the right to complain to the data protection authority where you live.

11. Children's Privacy

Our website and services are not directed at children, and we do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your information, or want to exercise your rights, please contact us at vladimir@vandbruno.net.