01 PRIVACY POLICY
What we collect, why, and what you can do about it
This policy covers revneura.com and the enquiries that reach us through it — the forms on this site, WhatsApp, and email. It is written in plain language on purpose. If anything here is unclear, ask us and we will answer in writing.
Last updated: 21 September 2026 · Version 1.0
02 WHO WE ARE
Who is responsible for your data
Revneura is operated by Walieldin Taher from Riyadh, Saudi Arabia. Revneura decides what is collected on this site and why, which makes it the party responsible for it.
If we are required to appoint a named data protection officer, their details replace the privacy contact line above.
03 WHAT WE COLLECT
What we collect, and how it reaches us
What you type into a form
The booking form on our contact page asks for your name, your business name, your WhatsApp number, your email address, one line describing what your business does, which of our services you are interested in, and — optionally — what you are trying to fix. The partner application asks for your name, your company or brand, your WhatsApp number, your email address, the kind of clients you serve, and anything else you choose to add.
Both forms also carry a hidden field that records which page or which pricing plan you came from, and a hidden anti-spam field that should stay empty. Neither collects anything about you personally. We do not ask for a national ID number, a payment card, or any health, financial or religious information anywhere on this site. Please do not send those to us through a form.
What reaches us when you message on WhatsApp
The WhatsApp buttons on this site open a chat with our business number and pre-fill a first message. When you send it, we receive your phone number, the profile name you have set on WhatsApp, and whatever you write. Sending that first message is your choice; nothing is sent by opening the chat.
WhatsApp is operated by Meta, not by us. The message itself travels over Meta’s infrastructure and Meta holds its own record of the exchange under its own terms. We keep the conversation in our WhatsApp business inbox and use it only to answer you.
What is collected without you typing anything
- Server logs. Our hosting provider records the IP address, browser and device string, requested page, referring page and timestamp of every request. This is how any web server works; it is what lets us find an outage or block an attack.
- Your cookie choice. When you answer the banner, we store that answer in a cookie on your own device so we do not ask again on every page.
- Analytics — only after you allow it. If you accept analytics, Google Analytics 4 records which pages you viewed, how you arrived, roughly where you are (city level, derived from your IP address), your device and browser, and a small set of interactions such as scrolling, clicking a call-to-action, and starting or submitting a form.
This is a brochure site. There is no account to create, no login, no comments, and no shopping cart, so there is no order history, password or payment record held here.
04 COOKIES AND MEASUREMENT
Cookies, tags and consent
Tags on this site are loaded through Google Tag Manager. Google Tag Manager is a container: it decides which measurement tags run and when. It does not, on its own, store anything about you.
We use Google Consent Mode v2. In practice that means the analytics and advertising signals — analytics_storage, ad_storage, ad_user_data, ad_personalization and personalization_storage — are set to denied before you answer the banner, and stay denied unless you switch them on. Only the strictly necessary signals are granted by default. If you decline, no analytics cookie is written and Google receives no measurement for your visit beyond, at most, a cookieless ping that carries no identifier.
No advertising or remarketing runs on this site today. The advertising category exists in the banner so it can be switched on transparently if that ever changes — and if it does, this policy and the banner text change with it, and you will be asked again.
| Cookie | Set by | What it does | How long | Needs consent |
|---|---|---|---|---|
rv_consent |
Revneura | Remembers the choice you made in the cookie banner, so you are not asked again on every page. | 180 days | No — it exists only to honour your answer |
_ga |
Google Analytics | Distinguishes one browser from another so repeat visits are not counted as new people. | 2 years | Yes |
_ga_<measurement id> |
Google Analytics | Holds the state of the current session for the specific Analytics property. | 2 years | Yes |
wordpress_*, wp-settings-* |
WordPress | Only set if someone signs in to administer the site. A visitor never receives these. | Session to 1 year | No — strictly necessary for the signed-in administrator |
You can change your answer at any time: open the cookie settings. You can also delete cookies in your browser, or block them entirely — the site works without them.
05 WHY
Why we hold any of it
- To answer you. If you send a form or a WhatsApp message, we use your details to reply, to prepare the written diagnosis we promised, and to follow up on that conversation. That is the whole purpose you gave it to us for.
- To do the work, if you become a client. Contact details move into the project record and are used to run the engagement and invoice it.
- To keep the site up and safe. Server logs are used to diagnose faults and to block abuse.
- To see which pages work. Analytics tells us which pages get read and where people leave. We look at it in aggregate; we are not trying to identify you.
- To meet legal and tax obligations. Invoices and contracts are kept for as long as Saudi tax and commercial rules require.
We do not sell your data. We do not rent it, trade it, or hand it to an advertising network. We do not send marketing email to people who only enquired — if you filled in a form, you get a reply about that enquiry, not a newsletter you did not ask for.
For the analytics and advertising categories, the basis we rely on is your consent, which you give or refuse in the banner and can withdraw at any time. For replying to an enquiry you sent us, the basis is that you asked us to. For server logs, security and tax records, the basis is our own legitimate operation of the business and the legal obligations that come with it.
06 THIRD PARTIES
Who else can see it
These are the only companies involved in running this site and answering your enquiry. Each one sees only what its job requires.
| Who | What for | What they see | Where processed |
|---|---|---|---|
| Hostinger | Hosting this website | Server logs, and any form submission stored on the server | France (European Union) |
| Google (Tag Manager) | Loading measurement tags | The request for the container file, including your IP address | Outside Saudi Arabia |
| Google (Analytics 4) | Counting visits and page performance, after you consent | Page views, device, referrer, approximate location, interaction events | Outside Saudi Arabia |
| Meta (WhatsApp) | Carrying the WhatsApp conversation | Your number, your WhatsApp profile name, the messages | Outside Saudi Arabia |
| Google (Gmail) | Sending and receiving our email | Your email address and the contents of the exchange | Outside Saudi Arabia |
Some of these companies process data outside Saudi Arabia. Where that happens, it happens under the transfer conditions that Saudi data protection law sets out, and we only use providers who publish their own data-processing terms. We will also disclose data if a Saudi court, regulator or law enforcement body lawfully requires it — and we will tell you if we are permitted to.
If we ever add another processor — a CRM, a scheduling tool, a chat platform — this table gets updated before that tool goes live, not after.
07 RETENTION
How long we keep it
| What | Kept for | Then |
|---|---|---|
| An enquiry that did not become a client | 24 months from the last message | Deleted |
| Client records, contracts and invoices | For the engagement, then as long as Saudi tax and commercial record-keeping rules require | Deleted |
| WhatsApp conversations | 12 months from the last message | Deleted from our inbox. Meta’s own copy is governed by Meta’s terms |
| Server logs | 30 days | Overwritten by the host |
| Google Analytics event and user data | 14 months | Deleted by Google automatically |
| Your cookie choice | 180 days, or until you clear it | You are asked again |
08 YOUR CHOICES
What you can ask us to do
Saudi data protection law gives you a set of rights over your own data. In practice, here is what you can ask us for and what will happen.
- Ask what we hold. We will send you a copy of the enquiry record we have for you.
- Ask us to correct it. Wrong number, wrong company name, wrong spelling — tell us and we fix it.
- Ask us to delete it. We delete it, unless a tax or contractual record has to be kept. If something has to stay, we will tell you exactly what and why.
- Withdraw your consent to measurement. Open the cookie settings and switch analytics off. It stops immediately and nothing you have already done is held against you.
- Tell us to stop contacting you. Reply “stop” on WhatsApp or email us. We stop.
- Complain. If we handle a request badly, you can raise it with the competent Saudi supervisory authority for data protection. We would rather you told us first so we can fix it.
Send any of these to walieldintaher@gmail.com or message the WhatsApp number on our contact page. We answer within 30 days. We may ask one question to confirm you are the person the record belongs to — usually that you can receive a message on the number you originally gave us. We do not charge for any of this.
09 SECURITY AND CHANGES
Keeping it safe, and telling you when this changes
The site is served over HTTPS, so what you type into a form is encrypted in transit. Access to the enquiry inbox and the site’s administration is limited to the people who need it and is protected by multi-factor authentication. No system is perfect; if a breach affects your data, we will notify you and the supervisory authority as the law requires, and we will tell you what happened rather than what we wish had happened.
This site is aimed at business owners and is not directed at children. We do not knowingly collect data from anyone under 18. If you think we have, tell us and we will delete it.
We update this policy when what we actually do changes — a new tool, a new processor, a new purpose. The date at the top always reflects the current version. If a change materially affects you, for example if advertising measurement is switched on, we will reset the consent banner so you are asked again rather than quietly opted in.
Questions about any of this go to walieldintaher@gmail.com. You will get a person, not a form letter.