Your information.
Handled with care.

Who is responsible

BRAVOO HUB COMMERCIAL BROKERS - L.L.C is the controller for the processing described here. We are a UAE mainland company based in Abu Dhabi. Our registered correspondence address is:

TRN: 105150942800003. For privacy requests, write to privacy@bravoohub.com. We prefer digital correspondence; postal requests are also accepted.

Information and purposes

• Website delivery and security: technical information such as IP address, browser/device details, requested pages and connection times may be processed by the hosting platform. Sites also provides automatic traffic statistics, including visitor and page-view counts.
• Enquiries and business relationships: we use names, professional roles, company details, contact information, messages and relevant documents to answer requests, assess a project, prepare proposals and manage agreed work.
• Sources: you may provide information directly, or it may come from a colleague, an introduction, a business meeting or relevant public professional sources. Where required, we also inform people whose details we receive indirectly.
• We do not sell contact details or add enquiries to a newsletter. Current follow-up relates to the request or relationship. Future promotional activities would need their own appropriate arrangements.

Providing business contact information is voluntary, but we may be unable to answer or prepare a proposal without it. Please do not send health records, identity documents, banking details or other sensitive personal information.

Why we may use information

Under applicable UAE data protection law, we rely on consent where required, or a relevant statutory exception, such as processing necessary for a contract or requested pre-contractual steps, or compliance with a legal obligation. Simply visiting this site is not consent to unrelated processing.

Where the GDPR applies, grounds depend on the purpose: requested pre-contractual steps or a contract with the individual (Article 6(1)(b)); legitimate interests in handling corporate enquiries, maintaining business relationships and protecting systems, subject to balancing individual rights (6(1)(f)); legal obligations (6(1)(c)); or consent for an activity that requires it (6(1)(a)). A corporate contract does not automatically make every employee’s data necessary for a contract with that individual.

Email and WhatsApp

The website has no contact submission form. Topic selections remain in your browser until you open WhatsApp; the link then passes the selected text to WhatsApp. You can edit or discard it. Bravoo receives a message only after you send it. Email links open your chosen email application.

The selected provider processes information under its own terms. You can use email instead of WhatsApp. No HubSpot CRM or marketing integration is currently connected.

Contact card and animations

The Save contact button downloads a vCard file containing Bravoo Hub’s business details. You decide whether to import it into your contacts. The website does not access your address book and does not receive confirmation that you saved the contact. The hosting platform may log the file request, like other requests to the site.

AI as a working tool

We use ChatGPT to compare information, analyse documents and develop content, visual ideas and language adaptations. Under the operating rule adopted on 24 October 2026, we use material free of personal data and do not enter messages or documents containing directly or indirectly identifiable people. Information available publicly is not automatically free of personal data.

The current individual account has model training switched off. Before any future use involving personal data, we will assess the relevant contractual arrangements, legal grounds, international safeguards and retention, and update this notice as needed. The website does not automatically send your enquiries to ChatGPT.

This rule applies to new uses and does not mean that any information previously entered has already been deleted. You can contact our privacy address about any such earlier processing.

We review AI output across all activities and remain responsible for our decisions. We do not use AI to make decisions about people that have legal or similarly significant effects.

Who may receive information

Access within Bravoo Hub is limited to Mariacristina and Davide according to their work. Mariacristina is the current user of AI tools. The services involved are:

• OpenAI / ChatGPT Sites for website hosting. Its Sites DPA governs hosted personal data within its scope; OpenAI may separately process service data under its applicable terms.
• Hostinger for business email, with its data processing terms where applicable. Hostinger does not host this version of the website.
• WhatsApp when you choose that channel, and OpenAI / ChatGPT for work with material free of personal data, as described above. Roles and terms differ by service; they are not all treated as identical processors.
• Professional advisers or specialists when necessary for agreed work, legal duties or a claim, with the required confidentiality and data protection arrangements. An introduction does not authorise unrestricted sharing.

International processing

Bravoo is based in the UAE, and its team may access business communications while travelling. Providers and their subprocessors may process information in other countries. We do not promise storage exclusively in the UAE or the EEA.

Where a restricted international transfer occurs, the applicable legal conditions and safeguards must be met, for example a relevant adequacy decision or approved contractual clauses where appropriate. For website hosting, the Sites DPA addresses EEA/Swiss transfers through adequacy decisions or standard contractual clauses, and UK transfers separately. It does not cover ChatGPT conversations. You can request details of relevant safeguards at our privacy address.

How long we keep information

• Simple enquiries: up to 12 months from the last meaningful interaction if no relationship develops.
• Qualified opportunities that become inactive: up to 24 months from the last meaningful interaction.
• Active clients and partners: for as long as needed for the relationship, with an annual review of continued need.
• Contracts, invoices and disputes: relevant records are kept separately for the applicable legal or claims period. They are not retained indefinitely for marketing.
• Unnecessary attachments and working copies should be removed earlier. Provider logs, backups and any earlier AI conversation copies follow their applicable deletion and retention arrangements. The Sites DPA links hosted-data retention to the agreement and remaining obligations, including deletion. Specific log and statistics retention still needs confirmation.

These limits also guide our review of email and WhatsApp records. A new meaningful exchange may justify continued retention; an automated message or mere possession of a contact is not sufficient.

Your choices and rights

Write to privacy@bravoohub.com to request access, correction or deletion, or information about our handling of your data. Depending on the applicable law, you may also have rights to portability, restriction, objection and withdrawal of consent. Withdrawal does not undo earlier lawful processing. We assess requests within the applicable time limits and may seek proportionate identity verification.

You may complain to the competent data protection authority under the law that applies to you. Where GDPR complaint rights apply, this may be the authority in your habitual residence, place of work or the place of the alleged infringement; for Italy, the Garante per la protezione dei dati personali. The business licensing authority is not identified here as a privacy regulator.

Security, languages and updates

We limit access to people who need it and use the security controls available for our accounts and devices. No internet service can be guaranteed risk-free. We review the notice when tools, purposes or providers change.

English, Italian and Spanish versions describe the same processing. The language you select does not determine which law applies. If a translation appears inconsistent, please tell us; your mandatory legal rights remain unaffected.