Privacy Policy

1. Scope

This policy applies to visitors, prospective customers, customers, suppliers, job or partnership applicants and other people who interact with RAFAVENT through this website, its forms, email, phone, WhatsApp, social links or the MxChat digital assistant. When you follow a link to another service, that provider’s own privacy terms apply.

2. Information we may collect

Information you provide

• name, company, job title, country and contact details;
• project, product, airflow, pressure, installation, commercial or support requirements;
• messages, correspondence and feedback;
• files you choose to upload, such as technical specifications, drawings, PDF or Word documents;
• information required to prepare an offer, perform a contract, provide warranty or after-sales service.

Technical and security information

• IP address, browser and device type, requested pages, timestamps, referring page and diagnostic logs;
• security events, rate-limit data and information necessary to prevent abuse, fraud or attacks;
• consent preferences stored by the cookie-consent system.

Website analytics

We use Independent Analytics within our WordPress environment to understand aggregated website use. It is designed to operate without analytics cookies and processes visit information on our website server. A privacy-preserving identifier may be derived from IP address and browser information for counting purposes; reports are used in aggregate and not to build advertising profiles.

3. MxChat digital assistant and Google Gemini

When you use the RAFAVENT digital assistant, the text you submit and any files you intentionally upload may be processed by MxChat and transmitted through an API to Google Gemini so that an answer can be generated. Technical request metadata may also be processed for security, availability and troubleshooting.

• Do not submit passwords, payment-card information, national identification numbers, health information or other highly sensitive data.
• Only upload confidential project documents when you are authorised to do so and the information is necessary for your request.
• AI-generated responses may be incomplete or incorrect. Technical selections, quotations, compliance statements and commercial commitments are valid only when confirmed by an authorised RAFAVENT representative.
• The assistant is not used to make legal or similarly significant automated decisions about individuals.

Because Google and other service providers may operate infrastructure in different countries, chat information can be processed outside your country. We limit this processing to what is needed to provide the requested feature and describe safeguards in our service arrangements where applicable.

4. Why we use information

• Enquiries and pre-contract steps: to answer questions, evaluate requirements and prepare proposals or quotations;
• Contract and service delivery: to manufacture, supply, document, support and service products;
• Consent: for optional cookies, services or communications where consent is required;
• Legitimate business and security interests: to improve services, operate the website, measure aggregate use, protect systems and prevent misuse;
• Legal obligations: to maintain records and respond to lawful requests.

The legal basis available to us depends on the context and the law that applies to you. Where we rely on consent, you may withdraw it at any time without affecting earlier lawful processing.

5. Who may receive information

Access is limited to authorised RAFAVENT personnel and service providers that need the information for the purposes described above. These may include website hosting and maintenance providers, security services, email delivery, form processing, MxChat, Google Gemini, professional advisers, logistics or after-sales partners. We may also disclose information where required by law, to protect rights and safety, or in connection with a legitimate corporate transaction. We do not sell personal information.

6. International processing

RAFAVENT is based in Iran and serves international customers. Some technology providers may process information in countries different from yours. Where applicable, we use contractual, technical and organisational measures intended to provide appropriate protection and minimise the data transferred.

7. Retention

We retain information only for as long as reasonably necessary for the purpose collected, including to respond to an enquiry, maintain project or warranty records, perform a contract, resolve disputes, secure systems and meet accounting or legal obligations. Retention depends on the nature of the record, the customer relationship, legal requirements and operational need. When information is no longer needed, we delete, anonymise or securely archive it as appropriate.

8. Cookies and similar storage

Essential storage is used to operate security, remember consent choices and provide functions you request. Optional categories are activated only according to your choice where consent is required. You can accept, reject or manage these settings from the banner and later reopen “Privacy settings”. For current details, see our Cookie Policy.

The first-visit welcome screen uses short-lived browser session storage only to avoid repeating the introduction during the same browsing session; it is not used for advertising or cross-site tracking.

9. Your rights

Depending on the law applicable to you, you may have rights to request access to your personal information, correction, deletion, restriction, objection, portability, withdrawal of consent and information about processing. You may also have the right to complain to a competent data-protection authority.

To exercise a right, email info@rafavent.com. We may need to verify your identity and clarify the scope of your request. Some information may need to be retained where the law or a valid business obligation requires it.

10. Security

We use proportionate administrative, technical and organisational safeguards, including access controls, security monitoring, backups, software updates and encrypted transport where supported. No internet transmission or storage system is completely risk-free, so please avoid sending information that is not necessary for your request.

11. Children

This is a business and industrial website and is not directed to children. We do not knowingly request personal information from children. If you believe a child has provided information, please contact us so we can review and remove it where appropriate.

12. External communication channels

If you contact us through WhatsApp, LinkedIn, Instagram or another third-party platform, that provider may independently process your account and communication data under its own terms. Please use email or phone if you prefer not to use a social platform.

13. Changes to this policy

We may update this policy when our services, technologies or legal obligations change. The effective date and version at the top of this page identify the current publication. Material changes will be highlighted where appropriate.