Privacy Policy

The NurvaDev Privacy Policy explains how we collect, use, store, and protect personal data when you visit nurvadev.com, contact our team, or use our services.

NurvaDev processes personal data in accordance with applicable Tunisian law, including Organic Law No. 2004-63 on the protection of personal data. In addition, the General Data Protection Regulation (GDPR) may apply when our services involve individuals located in the European Union or when applicable law requires it.

1. Data Controller

The data controller responsible for personal data collected through this website is:

NurvaDev
Digital studio specializing in web applications, advanced WordPress solutions, and scalable SaaS platforms.

Website: https://nurvadev.com
Email: contact@nurvadev.com
Postal address: Independence Square, 5121 Rejiche Mahdia

2. Personal Data We Collect

Depending on how you use the website and the information you choose to provide, we may collect the following categories of personal data:

first and last name;
email address;
telephone number;
company, organization, or project name;
information submitted through contact or quote request forms;
estimated budget, preferred deadlines, and expected features;
IP address;
browser type and device information;
operating system;
pages viewed and technical browsing data;
date, time, and approximate duration of visits;
information included in comments when comments are enabled;
files, documents, or images voluntarily submitted for a project;
any other information required to process your request.

Please avoid sending sensitive, confidential, or unrelated information that is not necessary for your request.

3. How NurvaDev Uses Personal Data

We may use the personal data we collect to:

respond to requests submitted through the contact form;
review and process quote requests;
communicate with prospects, clients, and partners;
prepare commercial or technical proposals;
assess project feasibility;
manage and follow up on services or contracts;
provide technical assistance or support;
improve website functionality, content, and performance;
measure audience activity and understand website usage;
personalize selected features;
prevent fraud, abuse, spam, and cyberattacks;
protect the website, user accounts, and infrastructure;
comply with legal, administrative, tax, or accounting obligations;
protect or defend our rights in the event of a dispute.

We do not use personal data for purposes that are incompatible with the reasons for which we originally collected it.

4. Legal Bases for Processing

Depending on the nature of your request and the processing involved, we may rely on the following legal bases:

your consent, when you voluntarily submit a form or accept certain cookies;
pre-contractual steps, especially when you request a quote or project assessment;
performance of a contract, when NurvaDev provides a service under an agreement;
NurvaDev’s legitimate interests, including security, website operation, service improvement, and reasonable promotion of our services;
compliance with a legal or regulatory obligation;
protection of our rights, when necessary in connection with a dispute or legal procedure.

When processing relies on your consent, you can withdraw that consent at any time.

5. Contact Forms

When you complete a contact form, we collect only the information needed to understand your request and respond to you.

This information may include:

your first and last name;
your email address;
your telephone number;
the subject of your request;
the content of your message;
information about your activity or business.

We use this information to answer your message, arrange further communication, and follow up on your request.

6. Quote Requests and Projects

When you submit a quote request, we may collect additional information such as:

the type of project requested;
project objectives;
expected features;
estimated budget;
expected timeframe;
relevant technologies or services;
files or documents you provide;
contact details of people involved in the project.

We use this information to understand your requirements, assess feasibility, and prepare an appropriate proposal.

Submitting a form does not automatically create a contractual commitment. A commitment becomes effective only after approval of a quote, proposal, or contract.

7. Comments

When comments are enabled and you publish a comment, we may collect:

the information entered in the comment form;
your IP address;
technical information about your browser;
the date and time of publication.

We may use this data to detect unwanted comments, spam, and abuse.

An anonymized string created from your email address may be sent to Gravatar to check whether you use that service. After we approve the comment, your profile picture may appear publicly next to it.

8. Media and Uploaded Files

If you upload or send an image through the website, we recommend removing embedded location information, including EXIF GPS data.

People who have access to uploaded files may be able to view or extract certain technical information stored within them.

We use documents submitted for a project only to review your request, prepare a proposal, or perform the agreed service.

9. Cookies

The website may use cookies and similar technologies to:

support technical website functionality;
maintain session security;
remember selected preferences;
manage forms;
measure audience activity;
analyze website performance;
integrate content from third-party services.

Strictly necessary cookies may be used without prior consent when they are essential for the website to function.

Analytics, advertising, or tracking cookies generally require clear information and, depending on how they are configured, your consent.

You can accept, reject, or customize selected cookies through the consent management tool available on the website when that tool is enabled.

For more information, please read our Cookie Policy.

10. Comment Cookies

When you leave a comment, you may choose to save your name, email address, and website in cookies.

These cookies make future visits more convenient because you do not need to enter the same information again. They may remain stored for up to one year.

11. Login Cookies

When you visit a login page, the website may create a temporary cookie to check whether your browser accepts cookies.

This cookie does not contain directly identifiable personal data and is generally removed when you close your browser.

When you log in to an administration area or user account, the website may use several cookies to:

keep your session active;
save display preferences;
strengthen connection security;
remember your choice when you use an option such as “Remember Me.”

When you log out, the website removes or invalidates login cookies.

12. Analytics

NurvaDev may use an analytics tool to better understand how visitors use the website, identify technical problems, and improve the user experience.

Depending on the tool used, we may collect information such as:

pages viewed;
approximate visit duration;
device type;
browser;
screen resolution;
general traffic source;
country or approximate geographic area;
a full or partially anonymized IP address;
interactions with selected website features.

Analytics tools can qualify for a consent exemption only when they meet strict requirements, including use limited to producing anonymous statistics.

13. Embedded Content From Third-Party Websites

Some pages may contain embedded content from third-party services, such as:

videos;
interactive maps;
social media posts;
images;
forms;
external tools;
sharing buttons.

Embedded content may behave in the same way as if you visited the relevant third-party website directly.

These services may:

collect your IP address;
use cookies;
store technical information about your device;
track your interaction with embedded content;
associate this information with your account when you are logged in to their service.

Therefore, we recommend reviewing the privacy policies of the relevant third-party providers.

14. Spam and Fraud Protection

Automated tools may analyze forms, comments, and login attempts to:

detect spam;
identify suspicious behavior;
prevent cyberattacks;
limit fraudulent login attempts;
protect users and website infrastructure.

These tools may process technical information such as your IP address, browser, request date, and form content.

15. Who Can Access Your Data?

Only people and service providers who need personal data to operate the website or process your request can access it.

We may share data with:

the NurvaDev team;
our website hosting provider;
technical providers involved in maintenance, security, or email services;
form management services;
spam detection services;
backup providers;
payment or billing providers when necessary;
legal, accounting, or administrative advisers;
competent authorities when the law requires disclosure.

NurvaDev does not sell or rent your personal data to advertisers or other third parties.

16. International Data Transfers

Some technical service providers may process or host data outside Tunisia or the European Union.

When such transfers occur, NurvaDev aims to select providers that offer appropriate confidentiality and security safeguards.

These safeguards may include:

appropriate contractual clauses;
confidentiality commitments;
technical security measures;
limits on the data transferred;
selection of recognized service providers.

However, using an external service may result in data processing in the country where that provider operates or hosts its infrastructure.

17. Data Retention

We keep personal data only for as long as necessary for the purposes for which we collected it.

As a general indication:

contact requests with no follow-up: up to 12 months;
quote requests and pre-contractual discussions: up to 24 months;
prospect data: for as long as necessary to follow up the request;
client data: during the contractual relationship and then according to applicable legal retention periods;
invoices and accounting documents: according to applicable legal obligations;
technical logs and security data: for a limited period appropriate to security needs;
comments and related metadata: for as long as necessary to manage them and detect spam;
cookies: according to their purpose and the duration shown in the consent management tool;
user account data: until the account is deleted, subject to applicable legal obligations;
project files: for as long as necessary to review or complete the project.

We may keep data longer when a legal obligation, dispute, or need to defend a right requires it.

18. How We Protect Your Personal Data

NurvaDev uses reasonable technical and organizational measures to protect personal data against:

unauthorized access;
loss;
alteration;
disclosure;
accidental destruction;
cyberattacks;
fraudulent use.

These measures may include:

HTTPS encryption;
access restrictions;
secure passwords;
regular backups;
security updates;
monitoring of suspicious login activity;
malware protection;
protection of forms and databases.

No information system can guarantee absolute security. However, if we identify an incident, we aim to respond as quickly as reasonably possible.

19. Personal Data Breaches

If NurvaDev identifies a personal data breach, we may take steps to:

analyze the nature and scope of the incident;
secure the affected systems;
limit the impact of the breach;
document the incident;
inform affected individuals when required;
notify competent authorities when the law requires it.

20. User Accounts

If a user account is created, we may store the information provided in the profile.

You may view, update, or request deletion of your personal information, except where we need to keep selected information for legal, administrative, or security reasons.

For technical or security reasons, you may not be able to change your username.

You are responsible for keeping your login credentials confidential. Please inform us promptly if you notice suspicious use of your account.

21. Your Privacy Rights

Depending on applicable law, you may have the right to request:

access to your personal data;
correction of inaccurate or incomplete data;
deletion of your data when no legal obligation requires us to keep it;
restriction of selected processing activities;
objection to selected processing activities;
withdrawal of your consent;
a copy of your data in an accessible format where this right applies;
information about the recipients of your data;
information about how long we retain your data.

We may limit these rights when a legal obligation, website security requirement, fraud prevention measure, or need to defend a right requires us to keep selected information.

22. How to Exercise Your Rights

To exercise your privacy rights, contact us at:

contact@nurvadev.com

Your request should include:

your identity;
the nature of your request;
the data or processing activity concerned;
the email address you used when contacting us.

We may request additional information only when necessary to verify your identity and prevent unauthorized access to your personal data.

We aim to respond within a reasonable period and in accordance with applicable law.

23. Withdrawal of Consent

When we rely on your consent to process personal data, you may withdraw that consent at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

You may also update cookie preferences through the consent management tool available on the website.

24. Protection of Minors

NurvaDev primarily provides its website and services to professionals, businesses, entrepreneurs, and project owners.

We do not intentionally seek to collect personal data from minors.

If we identify such data, we may delete it as soon as reasonably possible unless a legal obligation requires us to keep it.

25. Links to Other Websites

The website may contain links to external websites.

NurvaDev does not control their privacy practices and cannot be responsible for:

their content;
their availability;
their security measures;
their processing of personal data.

Therefore, we recommend reviewing their privacy policies before providing personal information.

26. Automated Decision-Making

As a general rule, NurvaDev does not make decisions that produce legal effects based solely on automated processing of your personal data.

However, we may use automated tools to detect spam, fraudulent behavior, or security threats.

27. Changes to the NurvaDev Privacy Policy

NurvaDev may update this NurvaDev Privacy Policy to reflect:

changes to the website;
the addition or removal of services;
technical changes;
changes to laws or regulations;
recommendations from competent authorities;
changes to our service providers.

The date of the latest update should appear at the top of this page.

Therefore, we recommend reviewing this Privacy Policy regularly so you remain informed about any changes.

28. Related Documents

For more information about website use and cookies, you can also read:

29. Contact NurvaDev About Your Personal Data

If you have questions about the NurvaDev Privacy Policy or how we process your personal data, you can contact us:

NurvaDev
Website: https://nurvadev.com
Email: contact@nurvadev.com
Postal address: Independence Square, 5121 Rejiche Mahdia

You can also consult the website of Tunisia’s National Authority for Personal Data Protection for additional information about your privacy rights.