Privacy notice
Collect less. Explain the purpose. Protect the handoff.
This notice explains how Novarra AI handles information associated with the public website and business enquiries. It is written for the website's current operating mode and will be updated before any materially different data collection is enabled.
Who is responsible
Zaidan GROUP OÜ operates the Novarra AI brand.
Registry code 17303561. Registered office: Tartu mnt 67/1-13b, 10115 Tallinn, Estonia.
Minimal mode
Current website collection
Direct website enquiry capture is not enabled. First-party conversion-event capture is not enabled.
Business enquiries
The website prepares an email; it does not submit the form to Novarra.
When you press the email CTA, the form prepares a message in your own email application. Nothing is transmitted to Novarra by the website until you choose to send that email.
Information you may provide
- Name
- Business email
- Requested topic
- Brief context supplied by the visitor
- Optional organization and timing
- Campaign tags or landing-path information if present in the session
Do not send at first contact
Sensitive material
Do not send deal documents, credentials, repository contents, special-category or other sensitive personal information through the opening email. If documents are needed, an appropriate handling route can be agreed first.
Purpose and basis
Use the information to respond to the request — not to build a hidden profile.
Depending on the context and applicable law, responding to an enquiry may involve steps requested before a contract or legitimate interests; website security may involve legitimate interests; legal and accounting obligations may involve legal obligations or legitimate interests; optional processing that legally requires consent depends on withdrawable consent. The specific legal-basis mapping requires counsel approval.
- Respond to a business enquiry and assess whether Novarra AI may be able to help.
- Prepare a requested discussion, scope or proposal and maintain related business correspondence.
- Protect the website, investigate misuse and maintain reasonable operational and security records.
- Understand high-level source attribution when first-party conversion-event measurement is enabled on this website.
Website and security data
Hosting infrastructure may process standard request metadata.
Web hosting, network and security providers may process information such as IP address, request time, user agent and requested URL to deliver and protect the site. Novarra's business-development application does not intentionally use that information to create an IP-based lead profile or visitor fingerprint.
Need-to-know
Recipients
Information may be handled by Novarra personnel and approved service providers needed to operate email, hosting, security and business systems. Professional advisers may receive information where necessary for legal, accounting or other legitimate business purposes. We do not sell personal information.
Estonia / service providers
International processing
The Novarra AI brand is operated by an Estonian legal entity. Business correspondence may therefore be processed in the EEA and in locations used by approved service providers. Any transfer outside the EEA or Saudi Arabia must be assessed against the law actually applicable to that processing. An EEA adequacy decision, standard contractual clauses or other lawful EEA mechanism may be appropriate; Saudi transfer requirements must be evaluated separately. Actual providers and safeguards remain to be confirmed.
Retention
Keep ordinary enquiry data only while it remains useful or required.
The website itself does not retain an email-only form submission. Once an email is sent, it becomes ordinary business correspondence. Where no engagement follows, prospective-enquiry correspondence is scheduled for review for deletion or anonymisation within 24 months of the last substantive interaction. This is a review target, not a claim of automatic deletion. Active engagements, legal obligations, security records or disputes may require longer retention.
Your rights
Ask us about personal information connected to your enquiry.
Rights vary by jurisdiction and may be subject to statutory conditions or exceptions. Where Saudi Arabia's Personal Data Protection Law applies, the applicable data-subject rights are respected alongside other applicable privacy requirements.
- Ask what personal information we hold about you and request access or a copy where applicable.
- Ask us to correct inaccurate or incomplete personal information.
- Ask us to delete or destroy personal information where applicable and subject to lawful exceptions.
- Withdraw consent where processing is based on consent, without affecting earlier lawful processing.
- Request restriction of or object to processing where available, and request data portability where the legal requirements are met.
- Raise a privacy concern with us and, where applicable, complain to a competent supervisory authority.
Send a request to support@novarraai.com. We may need enough information to verify the request before acting on it.
Last revised: 18 October 2026; independent legal review pending. This notice describes the current public website and ordinary business-enquiry handling. Client engagements may require additional confidentiality, security, retention or data-processing terms agreed for the specific matter.