Privacy Policy.

Sumon Hafizul Technical Services LLC (trading as "City Renovations") ("we", "us", "our") is the data controller for the personal data described here. We respect your privacy and handle your personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and its implementing regulations. This policy explains how we collect, use, store, share and protect information collected through this website and during the course of providing renovation, painting, landscaping and civil works services in the UAE. Questions? Reach us any time via our contact page or at hello@cityrenovations.ae. This policy works alongside our Terms of Service.

1. Information we collect

Information you give us — primarily through the enquiry form on our contact page, or by phone, WhatsApp or email:

• Contact details: name, phone/WhatsApp number, and email address (email is optional on the form).
• Enquiry details: area/location, property type, the service(s) you're interested in, and anything you write in the project message.
• Project details (later, if you engage us): property address, photos, measurements, design preferences and budget range.
• Payment information: handled by our banking partners; we do not store full card data on our servers.

Information collected automatically — unless you opt out of analytics (see section 3): pages visited, approximate (city-level, IP-truncated) location, device, browser and referring site. This is pseudonymous usage data; we do not use it to identify you personally. If you opt out, none of this is collected.

2. How we use your information, and our legal basis

Purpose	Legal basis under the PDPL
Respond to your enquiry, schedule and conduct a site visit, prepare a quote, and communicate with you about it	Taking steps at your request prior to / under a contract
Send you an automated confirmation that we received your enquiry	Your request / our legitimate interest in acknowledging contact
Execute work you commission, invoice, and provide warranty follow-up	Performance of a contract
Website analytics to understand and improve the site	Our legitimate interest in measuring and improving the site (anonymised data; you can opt out anytime — see section 3)
Keep tax, accounting and commercial records; respond to regulators	Compliance with a legal obligation

We do not sell or rent your information, and we do not use it for automated decision-making or profiling.

3. Cookies and analytics

This website uses only first-party analytics cookies to measure how the site is used. We do not use advertising cookies or third-party tracking pixels, and we do not sell or share your data for advertising.

We load Google Analytics 4 (provided by Google LLC) by default, which sets analytics cookies (e.g. _ga) to measure aggregate, anonymised site usage. IP addresses are truncated/anonymised by Google Analytics 4 by default, and we use this only to understand and improve the site — never to identify you personally. A one-time notice tells you this on your first visit and offers an immediate opt-out. If you opt out, Google Analytics is disabled and its cookies are cleared.

We also load Microsoft Clarity (provided by Microsoft Corporation) by default — a product-analytics tool that builds anonymised heatmaps and session replays of how visitors move through the site, so we can see where it can be improved. Clarity masks all text input by default, so anything you type into the contact form (your name, phone, email and message) is not recorded. It is covered by the same one-time notice and opt-out as Google Analytics — opting out stops Clarity too.

You can opt out — or change your mind — at any time using the "Cookie preferences" link in the site footer, which stops analytics and clears the analytics cookies for that session. You can also block or delete cookies in your browser settings. The contact form and other essential functions work without any analytics cookies.

4. Who we share your information with

We share personal data only with the following categories of recipients, under appropriate confidentiality and data-processing terms, and only as needed:

• Netlify (Netlify, Inc.) — hosts this website and processes contact-form submissions (lead storage and the notification email sent to us).
• Resend (Resend, Inc.) — sends the automated "we received your enquiry" confirmation email to the address you provide on the form.
• Google (Google LLC) — Google Analytics 4, for anonymised site-usage measurement, unless you have opted out (section 3).
• Microsoft (Microsoft Corporation) — Microsoft Clarity, for anonymised heatmaps and masked session replay, unless you have opted out (section 3).
• Suppliers and trade partners directly involved in delivering your project (e.g. specialised glaziers, custom joinery) — limited to what the work requires.
• Professional service providers (e.g. accounting) under confidentiality obligations.
• Authorities where legally required (Dubai Municipality, courts, regulators).

5. International data transfers

Netlify, Resend, Google and Microsoft are based outside the UAE and may process the relevant data (your form submission, your email address, or pseudonymous analytics data) on servers in other countries, including the United States and the European Union. Where personal data is transferred outside the UAE, we rely on the transfer mechanisms permitted under the PDPL and on these providers' contractual data-protection commitments to ensure an adequate level of protection.

6. Data retention

Enquiry submissions held in Netlify are retained while your request is active and for a reasonable follow-up period, then deleted. Confirmation emails sent via Resend are subject to that provider's standard logging retention. Project records (quotes, contracts, photos, warranty documents) are kept for at least the duration of the workmanship guarantee on the relevant scope, plus the period required by UAE tax and commercial law, after which they are securely archived or deleted. Analytics data is retained for the period configured in Google Analytics.

7. Your rights under the PDPL

Subject to the PDPL, you have the right to: access your personal data; have inaccurate data corrected; request erasure; restrict or object to certain processing — including the right to opt out of analytics at any time (via the footer "Cookie preferences"); data portability; and withdraw any consent you have given, without affecting prior lawful processing. To exercise any of these, contact us at hello@cityrenovations.ae — we will respond within 30 days. If you believe we have not handled your data lawfully, you may lodge a complaint with the UAE Data Office.

8. Security

We use industry-standard technical and organisational safeguards to protect your information. No system is perfectly secure, and we encourage you to keep any account credentials private.

9. Children

Our services are aimed at adults engaging us for property work. We do not knowingly collect personal data from children under 18.

10. Updates to this policy

We may revise this policy from time to time. The "last updated" date at the top of this page reflects the current version. Material changes will be communicated to active clients via email.

11. Contact

For questions about this policy or your personal data, contact our data controller:

• Entity: Sumon Hafizul Technical Services LLC (trading as "City Renovations")
• Email: hello@cityrenovations.ae
• Phone: +971 58 524 3632
• Address: Ginger Business Center, Al Khabaisi · Dubai

This policy is provided in good faith for informational purposes. It is not a substitute for tailored legal advice on your specific situation.