Privacy notice

Last updated 2026

Who we are

Rvvup Tech Ltd is a company incorporated in the Dubai International Financial Centre (DIFC), registration number 5910. We decide how the personal data described here is used, which makes us the controller of it. In this notice "we" and "us" mean Rvvup Tech Ltd.

For anything to do with your data, email david@rvvuptech.ltd.

What we collect and why

When you email us. Your name, email address, the content of your message and anything else you choose to share. We use it to reply, to judge whether we can help and, if we go on to work together, to set up and run the engagement. We rely on our legitimate interest in answering enquiries and on the steps needed before entering into a contract with you.

When you visit this site. We use PostHog to understand how the site is used: which pages and sections are viewed, which links are clicked, the referring website, device and browser type, and an approximate location (city and country) worked out from your IP address. We may also record how the page is used during a visit, such as scrolling and clicks, to spot where it is unclear. The site has no forms, so no text you type is captured. Analytics runs without cookies and stores nothing on your device, so separate visits are not linked to each other and we cannot identify you from it. We rely on our legitimate interest in understanding and improving the site.

Technical delivery. Our hosting provider, Vercel, processes technical data such as IP addresses in server logs to deliver the site and keep it secure. Fonts are loaded from Google Fonts, which receives your IP address when the page loads.

Client work. Information shared with us during an engagement is covered by the confidentiality and data protection terms in that engagement's letter of engagement, not by this notice. Where we handle personal data on a client's behalf, we do so only on that client's instructions.

Who we share it with

We use a small number of providers to run the business, each bound by its own data protection terms: Google Workspace for email and documents, PostHog for site analytics, and Vercel for hosting. We may also share information with professional advisers, or where the law requires it. We never sell personal data or use it for advertising.

Where it is processed

Our providers process data in the United States and other countries outside the DIFC, the UK and the EU. Where that happens, we rely on the safeguards in those providers' terms, such as standard contractual clauses, to protect it.

How long we keep it

Enquiry emails are kept for as long as the conversation or any resulting engagement needs, and after that only for as long as legal, tax or accounting rules require. Site analytics is kept for no more than 24 months.

How we protect it

Access is limited to the people who need it, every account is protected by two-step verification, and our providers encrypt data in transit and at rest. No system is perfectly secure, but if something goes wrong that affects your data, we will tell you and the relevant regulator where the law requires it.

Your rights

Depending on where you live, you can ask us to:

• give you a copy of the personal data we hold about you
• correct anything that is wrong or incomplete
• delete it, or restrict how we use it
• stop using it on the basis of our legitimate interests
• send it to you or another organisation in a portable format

Email david@rvvuptech.ltd and we will respond within one month. If you are unhappy with how we have handled your data, you can complain to the DIFC Commissioner of Data Protection. If you are in the UK you can also contact the Information Commissioner's Office, and if you are in the EU your local data protection authority.

Changes

If this notice changes, the new version will be posted here with a new date.