Privacy notice
What we know about you, and what we don’t.
This notice explains how Averra handles personal data on this website and in correspondence with us. We try to collect as little as possible.
Who we are
This website is operated by Gateway Global, which develops Averra (“Averra”, “we”, “us”). Gateway Global is the controller of the personal data described in this notice. You can contact us about anything in it at privacy@averrahealth.ae.
Full company registration details will be published here shortly.
This notice covers this website and direct correspondence. The Averra app will have its own privacy notice, shown before anyone creates an account.
What we collect
| Category | Examples | Source |
|---|---|---|
| Contact details | Name, email address, phone number if you give it, organisation, the role you write in, and whether you want occasional updates from us. | You, when you write to us. |
| Correspondence | The content of your messages and our replies. | You. |
| Chat conversations | What you write or say to our AI assistant, the page the chat started on and, if you allow analytics, the campaign or site that first brought you here. Your browser asks before the chat can use your microphone. | You, when you use the chat. |
| Technical data | IP address, browser and device type, and security signals needed to deliver the site and protect it from abuse. | Your browser, through our hosting and security provider. |
| Usage data | Pages visited, and the links and buttons used, recorded against a random ID for your browser and, through Microsoft Clarity, how you click, scroll and move through a page, with the text on it hidden. | Salesforce, Google Analytics and Microsoft Clarity, only if you allow analytics. |
| Marketing data | How you found us (the campaign, ad or site that brought you here, and the first page you saw), how you engaged with our outreach and, if you allow marketing, which of our ads you saw or clicked and whether you then got in touch. | Your browser and Salesforce, if you allow analytics; Google, Meta, Microsoft and LinkedIn, if you allow marketing. |
We only use analytics or marketing tools if you agree to them (see cookies and local storage). We do not ask for health information through this website. Please don’t include it in a message to us, through our contact form or by email.
How we use it
- To reply to your message and continue a conversation you started.
- To answer what you ask our AI assistant, and to arrange what you ask it for, such as a briefing.
- To consider a partnership, investment or research enquiry.
- If you ask for them, to send you occasional updates about Averra. You can unsubscribe at any time.
- To keep this website available, secure and free from abuse.
- If you agree, to understand how the site is used, and to measure our outreach and advertising and follow up on it.
- To meet our legal obligations.
We do not sell personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
Lawful basis
Where data protection laws such as the UK GDPR and EU GDPR apply, we rely on:
- Legitimate interests: replying to messages you send us, running and securing this website.
- Contract: where processing is needed to take steps towards an agreement with you or your organisation.
- Consent: for analytics and marketing cookies, and for updates you ask for. You can withdraw it at any time, in cookie settings or by unsubscribing.
- Legal obligation: where the law requires us to keep or disclose information.
Who we share it with
We share personal data with service providers acting on our instructions, under written terms, and only as far as needed:
| Provider | Purpose |
|---|---|
| Website hosting and security | Delivering this website and protecting it from attacks and automated abuse (Cloudflare). |
| Receiving and sending our email (Microsoft). | |
| Tag management | Starting the analytics and marketing tools you allow (Google Tag Manager, which loads only once you allow one). |
| Enquiries and chat | Receiving and managing the messages you send through our contact form or website chat, running our AI assistant, and sending the updates you ask for (Salesforce). |
| Analytics and marketing providers | Only if you agree. Each one is listed in the cookies section before it is switched on: Salesforce, Google Analytics and Microsoft Clarity for analytics; Google, Meta, Microsoft Advertising and LinkedIn for marketing. |
| Professional advisers | Legal, accounting and audit, where needed. |
Some providers also use data for their own purposes, as separate controllers under their own privacy policies: Google and Microsoft some of the analytics data, and, if you allow marketing, Google, Meta, Microsoft and LinkedIn what their tags collect about your visit, including for advertising. We may also disclose data where the law requires it. We do not sell personal data.
International transfers
Our providers may process data in other countries. Where data leaves a country whose law restricts transfers, we rely on an adequacy decision or on recognised safeguards such as standard contractual clauses.
How long we keep it
| Category | Retention |
|---|---|
| Correspondence | Up to 24 months after our last contact, unless a continuing relationship needs it for longer. |
| Security logs | Kept by our hosting provider for short periods, typically days to weeks. |
| Analytics and advertising data | Held by the providers named in the cookies section, for the periods each one sets. The lifetimes of their cookies are listed there. |
| Records we must keep by law | As long as the law requires. |
Security
We use appropriate technical and organisational measures to protect personal data. This website is served only over encrypted connections (HTTPS), and access to correspondence is limited to the people who need it.
Your rights
Depending on where you live, you may have the right to:
- access a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to how we use it;
- receive your data in a portable format;
- complain to a data protection authority.
Making a data request
To exercise any of these rights, email privacy@averrahealth.ae with the subject “Data request”. Tell us what you’d like us to do, and write from the email address you used with us so that we can confirm it’s you.
We reply within one month. If we need more information to verify your identity, we’ll tell you. There is no charge.
To delete an Averra app account, see Delete your account.
Cookies and local storage
Strictly necessary storage is always on, because the site needs it to work. Analytics and marketing cookies are optional and are only used if you agree. You choose in the cookie banner, and you can change your mind at any time in , which is also linked in the footer of every page. We keep your choice for 12 months, then ask again.
Categories
| Category | Purpose | Default |
|---|---|---|
| Strictly necessary | Security, remembering your theme and your cookie choices, and keeping a chat you open running as you move between pages. | Always on |
| Analytics | Understanding how the site is used and how you found it, so we can improve it and offer the chat at the right moment, and linking your visits to any enquiry or chat you start. | Off until you agree |
| Marketing | Measuring which of our ads, on Google, Meta, Microsoft Advertising and LinkedIn, bring visitors and enquiries. | Off until you agree |
Tools we use
| Tool | What it does | When it runs |
|---|---|---|
| Website chat (Salesforce) | Our website chat. It loads only when you open it, and keeps your conversation open as you move between pages. | Only after you open the chat |
| Salesforce (website analytics and marketing engagement) | Records the pages you visit and the links and buttons you use against a random ID for your browser, notes how you found us, and links your visits to any enquiry you send us. | Only after you allow analytics |
| Google Tag Manager | Starts the tools below that you allow. It sets no cookies of its own. | Only after you allow analytics or marketing |
| Google Analytics | Counts visits, the pages seen and the contact links and enquiries that follow, against a random ID for your browser, and how you arrived. | Only after you allow analytics |
| Microsoft Clarity | Records how pages are used (clicks, scrolling and mouse movement), with all text on the page hidden, so we can see where the site is unclear. It does not run on this notice or on the account deletion page. | Only after you allow analytics |
| Meta Pixel | Tells Meta when someone who saw or clicked our ads on Facebook or Instagram visits the site or gets in touch, so we can measure and improve those ads. | Only after you allow marketing |
| Microsoft Advertising (UET) | The same for our ads on Bing and Microsoft’s advertising network. | Only after you allow marketing |
| LinkedIn Insight Tag | The same for our ads on LinkedIn. | Only after you allow marketing |
Our contact form and website chat are provided by Salesforce and load from Salesforce’s servers whatever your cookie choices: the form because it is how you write to us, and the chat only when you open it.
What this site stores
| Name | Purpose | Type and duration |
|---|---|---|
| averra-consent | Remembers your cookie choices. | Local storage, 12 months |
| averra-motion | Remembers if you paused the site’s animations. | Local storage, until you clear it |
| averra-theme | Remembers if you chose the light or dark theme. Set only when you use the theme switch. | Local storage, until you clear it |
| av_attr_v1 | Remembers how you found the site on this visit (the campaign, ad click ID or referring site, and the first page you saw), so it can go with an enquiry you send. Set only if you allow analytics. | Session storage, until you close the tab |
| Website chat | Keeps your chat with our AI assistant open as you move between pages. Set by Salesforce, only when you open the chat. | Browser storage in the chat window |
| averra_chat_… | Website chat prompts: remember whether you have dismissed the chat prompt, how many times you have visited, and the campaign or site that brought you here. Set only if you allow analytics. | Local and session storage, kept on your device for up to 90 days |
| averra_chat | Remembers that you opened the chat, so each page you visit in this tab loads it again. | Session storage, until you close the tab |
| _sfid_… | Set by Salesforce: a random ID for your browser and your tracking choice. Set only if you allow analytics. | Cookie, 2 years |
| _ga, _ga_… | Set by Google Analytics: a random ID for your browser, and the current visit. Set only if you allow analytics. | Cookie, 2 years |
| _clck, _clsk, _cltk | Set by Microsoft Clarity: a random ID for your browser, and the current recording. Set only if you allow analytics. | Cookies, 1 year and 1 day; session storage, until you close the tab |
| _gcl_au | Set by Google: connects clicks on our Google ads with visits. Set only if you allow marketing. | Cookie, 90 days |
| _fbp, _fbc | Set by Meta: a random ID for your browser and, after a click on one of our ads, that click. Set only if you allow marketing. | Cookie, 90 days |
| _uetsid, _uetvid | Set by Microsoft Advertising: random IDs for your visit and your browser. Set only if you allow marketing. | Cookie and local storage, 1 day and 13 months |
| li_fat_id, li_sugr | Set by LinkedIn: after a click on one of our LinkedIn ads, that click, and a random ID for your browser. Set only if you allow marketing. | Cookie, 30 and 90 days |
| __cf_bm, cf_clearance | May be set by our hosting provider, Cloudflare, to distinguish people from automated traffic and keep the site secure. | Cookie, 30 minutes to 1 year |
Before we switch on any analytics or marketing tool, we will list it here with its cookies, purpose and duration. Tools in those categories load only after you agree.
If you allow marketing, Meta, Microsoft and LinkedIn may also set cookies on their own domains where your browser allows it, such as fr, MUID and bcookie; their privacy policies list them. When you withdraw consent, the page reloads without those tools and we remove the cookies they set on this site; cookies on the providers’ own domains can be removed in your browser.
You can also block or delete cookies in your browser settings. If you block the security cookies, some protections may ask you to complete a check.
The Averra app
The Averra app will have its own privacy notice covering account and health data, shown before an account is created. As a principle, health data in the app will never be used to set a member’s price, decide their cover or assess a claim.
Children
This website is not intended for children under 16, and we do not knowingly collect their personal data. If you think a child has sent us personal data, contact us and we will delete it.
Changes to this notice
We update this notice when our practices change. The effective date and version at the top show the current version.
Contact and complaints
For any privacy question, request or complaint, write to privacy@averrahealth.ae. You also have the right to complain to the data protection authority where you live or work.