Skip to content
Nawraah

Legal

Privacy notice

This notice describes what this website actually collects. It does not invent a legal entity, office, or processor that has not been configured.

Who we are

This site is operated under the brand name Nawraah. A registered legal name, company number, and postal address will appear here only after they are configured. Until then, treat the brand name as the public identity of the trade desk.

What we collect

The trade enquiry form collects: your name, company, country, work email, WhatsApp number, product interest, indicative quantity, Incoterm preference, optional notes, and your consent. The server also stores the page you sent the form from, your browser user agent, and any utm_ campaign fields present on that page. Your IP address is used only in memory to limit repeat submissions and is not written into the stored enquiry record.

Why we collect it

We store enquiries so the trade desk can reply with lot notes, packing, and commercial terms. Consent is required before a submission is accepted. We do not sell enquiry data or share it with other traders.

Where it is stored

Every accepted enquiry is appended as a JSON line on the server, in a private directory that is not published on this website. If optional delivery is configured, a copy may also be sent to Formspree, a private webhook, or an inbox over SMTP. Those adapters run only when their settings are present. Delivery success or failure is logged; a failed adapter does not erase a record that was already stored.

How long we keep it

Enquiry records are kept for up to 365 days, then deleted.

How to request deletion

Send a new trade enquiry asking us to delete your previous submission. Name the company and email you used so the desk can find the record.

Analytics

No analytics script is configured on this deployment, so this site does not load Google Analytics or Plausible.

Security checks on the form

The enquiry endpoint validates fields on the server, rejects empty required answers, uses a hidden honeypot field, ignores submissions that arrive too quickly, and rate-limits repeat posts from the same network. Cloudflare Turnstile runs only when both site and secret keys are configured.