Last Updated: 25 June 2026 (Version 1.5.1)
This Platform acts as a data controller in relation to the personal data it collects and determines for Platform operation, user account management, marketplace functionality, communications, security, fraud prevention, compliance, billing, support, and legal purposes. We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data, and any applicable implementing regulations, decisions, or guidance issued by competent UAE authorities, as amended from time to time.
Use of the Platform does not constitute consent to every possible form of data processing. Where consent is required by applicable law, we will request it separately or through clear Platform controls.
1. PERSONAL DATA WE COLLECT
1.1 Account Data:We collect information needed to create and operate user accounts, including name, email address, phone number, role, company name, and authentication data. For Contractors, we collect trade licenses, corporate documentation, and identity verification metadata of authorized corporate signatories (such as Emirates ID details where legally required for corporate onboarding).
1.2 Project and Transaction Data:We collect project descriptions, locations, property details, budgets, proposals, quotes, attachments, comments, reviews, saved projects, and related platform transaction histories.
1.3 Communications Data:While a Project is active, we may collect and store messages, discussion threads, attachments, proposals, comments, and other communications sent through Platform tools. When a Client marks a Project as completed, or when an account is permanently deleted by administrative action, related official discussion content and chat attachments may be permanently deleted from active Platform systems and will no longer be available to the relevant Users.
1.4 Technical Data:We collect IP addresses, device types, browser types, diagnostic logs, session tracking data, and operational security metrics needed to secure and optimize the Platform Services.
2. WHY AND ON WHAT BASES WE PROCESS PERSONAL DATA
2.1 Platform Operation:We process Account Data, Project Data, Transaction Data, Communications Data, and Technical Data to create accounts, operate dashboards, match Clients with Contractors, manage project requests, support proposals, enable communications, display reviews, and provide core Platform features. Basis: performance of the Terms and provision of the Platform Services.
2.2 Security, Audit, and Anti-Fraud:We process technical logs, communication records, project activity, and transaction markers to prevent fraud, spam, fake accounts, abuse, security incidents, fee circumvention, and misuse of the Platform. Basis: operation and enforcement of the Terms, protection of the Company’s legal rights, security, fraud prevention, and compliance purposes.
2.3 Complaint Triage and Marketplace Governance:We may review communications, attachments, project records, proposals, and related data when a User submits a complaint or when we reasonably suspect fraud, abuse, safety risk, circumvention, unlawful conduct, or breach of the Terms. Basis: enforcement of the Terms, protection of Users and the Platform, legal claims, and compliance purposes.
2.4 Legal, Tax, Accounting, and Regulatory Compliance:We process and retain records where necessary to comply with applicable UAE laws, tax obligations, accounting rules, corporate record-keeping duties, regulator requests, court orders, law-enforcement requests, and legal claims.
2.5 Consent-Based Processing:Where required by applicable law or Platform functionality, we may request specific consent, including for optional marketing communications, certain cookies or tracking technologies, public showcase publication, use of before/after photos, or display of Client identity in verified project showcases.
3. COMMUNICATION MONITORING AND TRANSACTION LOGS
3.1 Monitoring Scope:Communications sent through Platform tools, including messages, attachments, proposals, project files, and discussion records, may be monitored, audited, read, stored, and reviewed by authorized Platform personnel.
3.2 Monitoring Purposes:Monitoring is conducted based on our legitimate interests for security, anti-fraud, dispute triage, platform governance, non-circumvention enforcement, and user safety.
3.3 Completed Project Discussions:When a Client marks a Project as completed, the related official Client-Contractor discussion history, comment thread, messages, and chat attachments will no longer be available to either the Client or the Contractor. Users must export or save any information they wish to keep before completing the Project. After completion, the Platform may permanently delete the official discussion content and chat attachments from active systems.
4. COOKIES, ANALYTICS, AND SIMILAR TECHNOLOGIES
4.1 Usage Scope:We may use cookies, local storage, pixels, analytics tools, session tracking, and similar technologies to operate the Platform, maintain login sessions, remember preferences, measure performance, detect fraud, improve user experience, and understand Platform usage.
4.2 Notice and Controls:Where required by applicable law, we will provide appropriate notice or consent controls for non-essential cookies, analytics, advertising, or marketing technologies.
5. SHARING, DISCLOSURE, AND CROSS-BORDER DATA TRANSFERS
5.1 Other Users:We share relevant project, proposal, profile, review, and communication information between clients and contractors as needed to operate the Platform.
5.2 Service Providers:We may use independent third-party service providers for data hosting, infrastructure support, analytics, authentication, and platform security.
5.3 Legal Requests:We may disclose data if required by law, court order, regulator request, or to protect corporate rights, safety, and operational security.
5.4 No Sale of Personal Data:We do not sell personal data.
5.5 Showcase Project Consent:When a Client approves the conversion of a completed contract into a public Showcase Project, data visibility is strictly managed by the Client's selection. Choosing "Approve with Name" authorizes the public display of the Client's platform identity alongside the review. Choosing "Approve Anonymously" legally requires the Platform to permanently mask the Client's personal identity markers in the public display, replacing them with a verified user indicator.
5.6 Verified Review Display and Modification:Once a Client provides verified project approval, whether public or anonymous, the Client grants the Platform a non-exclusive right to display the textual review and verification data. Subject to the Client's statutory data privacy rights, a previously public review display may be updated to an anonymous display upon contacting support via info@renov.at. Users acknowledge that underlying historical transaction markers, contract values, and verification indicators are structurally retained in an unalterable format to preserve anti-fraud controls and platform-wide transactional auditability.
5.7 Cross-Border Transfers:Personal data collected through the Platform may be transferred to, stored in, or processed in countries outside the UAE where our hosting providers, cloud infrastructure, technical service providers, analytics providers, support tools, or security vendors operate. Where required by applicable law, we use appropriate contractual, organisational, and technical safeguards designed to protect personal data, including access controls, encryption in transit, encryption at rest where applicable, confidentiality obligations, vendor due diligence, and data-processing terms.
6. CONTRACTOR DOCUMENTS AND CLIENT RESPONSIBILITY
6.1 Document Uploads:Contractors may upload trade license or similar corporate compliance documents. Uploading a document does not mean that the Platform has verified, certified, guaranteed, or approved the contractor's legal status, insurance, permits, or suitability.
6.2 Client Verification:Clients must independently verify contractor licenses, insurance, permits, approvals, and suitability before entering into any contract.
7. DATA RETENTION, SECURITY MEASURES, AND ACCOUNT DELETION
7.1 Retention, Account Deletion, and Project Completion:When a User requests account deletion, we will remove or disable the User’s public profile and publicly visible account data from front-end Platform interfaces, subject to technical processing time.
When a Client marks a Project as completed, the related official Client-Contractor discussion board, comment thread, messages, and chat attachments will no longer be available to the Client or Contractor and may be permanently deleted from active Platform systems.
When an account is permanently deleted by administrative action following account deletion, we may remove active official discussion content and chat attachments connected to that account from active Platform systems, while retaining review records, completed-project records, accepted proposal records, showcase approval records, invoice records, and limited non-content records where reasonably necessary or legally required. Reviews or showcase approvals that were approved for display with the Client's name may continue to display the approved name attribution, while anonymous approvals remain attributed to an anonymous platform client label.
We retain tax, accounting, invoice, commission, payment, accepted proposal, transaction, platform fee, VAT, corporate tax, and related financial records for at least seven (7) years following the end of the relevant tax period, or for any longer period required under applicable UAE tax, accounting, corporate tax, VAT, audit, or record-keeping laws and regulations.
We may also retain limited non-content records where reasonably necessary or legally required, including project identifiers, user identifiers, timestamps, completion records, accepted proposal records, platform invoice records, review records, showcase approval records, deletion logs, message counts, attachment counts, Terms acceptance logs, Privacy Policy acceptance logs, security logs, fraud-prevention records, legal-claim records, complaint records, consent records, and compliance records.
Unless required by applicable law, court order, regulator request, or active legal/security investigation, completed-project official discussion message content and chat attachments are not retained as a user-accessible archive after Project completion.
When data is no longer required, we will delete, anonymise, or securely archive it in accordance with our internal retention procedures and applicable law.
7.2 Technical Security Measures:We apply appropriate technical and organisational safeguards designed to protect personal data against unauthorised access, accidental loss, misuse, alteration, disclosure, or destruction. These measures may include Transport Layer Security (TLS) for data transmission, encryption at rest where supported by our infrastructure, access controls, authentication controls, audit logs, internal permission restrictions, secure cloud hosting, backup procedures, vulnerability management, and vendor security review. No electronic platform can guarantee absolute security, and Users are responsible for keeping their login credentials secure.
8. FULL USER RIGHTS AND DESIGNATED CONTACT
8.1 Comprehensive User Rights:Under the UAE PDPL, users possess full statutory rights over their data, including: (i) the right to access and receive copies of processed personal data; (ii) the right to request immediate correction or modification of inaccurate information; (iii) the right to request deletion or erasure of personal data, subject to the statutory retention boundaries in Section 7.1; (iv) the right to restrict or object to automated processing or profiling; (v) the right to data portability; (vi) the right to withdraw previously given consent at any time without retroactive impact; and (vii) the right to lodge a formal complaint with the UAE Data Office in the event of an unresolved processing dispute.
8.2 Privacy Contact:For privacy inquiries, data subject rights requests, account deletion requests, correction requests, withdrawal of consent, or security incident reports, Users may contact Guestr Technologies FZ-LLC at info@renov.at. If the Company appoints a formal Data Protection Officer or other legally designated privacy representative, the relevant contact details will be made available through the Platform or this Privacy Policy.
9. SECURITY INCIDENTS
9.1 Incident Response:If we become aware of a security incident affecting personal data, we will investigate the incident and take steps we consider appropriate under the circumstances. Where required by applicable law, we will notify the relevant authority, affected Users, or other parties within the required timeframe and in the required manner.
10. SEARCH RESULTS, RANKINGS, AND RECOMMENDATIONS
10.1 Automated Tool Usage:The Platform may use automated or semi-automated tools to sort, rank, display, recommend, or filter Contractors, projects, proposals, reviews, badges, portfolios, or search results. These tools may consider factors such as profile completeness, availability, ratings, responsiveness, project category, location, user preferences, compliance signals, platform activity, and safety indicators.
10.2 Disclaimers of Endorsement:Such rankings are provided for convenience only and do not constitute a guarantee, certification, endorsement, legal verification, technical verification, insurance confirmation, or quality assurance of any Contractor or Project.
