Privacy policy

01Introduction

Covalent Bond LLC ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who interacts with our services, website, marketing channels, or WhatsApp Business account. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights available to you under the General Data Protection Regulation (GDPR), the Personal Data Protection Law of Georgia, and Israeli data protection legislation.

By using our services or providing your data, you confirm that you have read and understood this Policy.

02Data Controller

The data controller responsible for processing your personal data is:

03Personal Data We Collect

We collect personal data that you provide directly, data generated through your use of our services, and limited data from third parties such as Meta (Facebook, Instagram, WhatsApp) when you interact with our advertisements or business profile.

Category	Examples
Identity data	Full name, date of birth, nationality, identification number where required for transactions
Contact data	Email address, phone number, WhatsApp number, postal address
Financial data	Bank account details for invoicing, budget range, source of funds (where legally required)
Property preferences	Location, type, size, price range, intended use, viewing history
Communications	Email correspondence, WhatsApp messages, call logs, meeting notes
Technical data	IP address, browser type, device information, pages visited, referral source
Marketing data	Preferences for marketing communications, ad-engagement signals from Meta platforms

04Purpose and Legal Basis for Processing

We process your personal data only when we have a lawful basis under Article 6 of the GDPR:

• Contract performance — to deliver brokerage, renovation, or marketing services you have engaged us for
• Legal obligation — to comply with anti-money-laundering, tax, and real estate regulations in Georgia and Israel
• Legitimate interest — to manage our business, prevent fraud, and improve our services
• Consent — for marketing messages, WhatsApp communication beyond the customer-care window, non-essential cookies, and any other processing where consent is the appropriate basis

You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

05Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies to operate, secure, analyse, and personalise your experience.

Type	Purpose
Strictly necessary	Required for the site to function (security, session, load balancing). Cannot be disabled.
Analytics	Help us understand how visitors interact with the site (e.g. Google Analytics). Used only with consent.
Marketing	Used by Meta Pixel and similar tools to measure ad performance and show relevant property listings. Used only with consent.
Preference	Remember language, region, and display choices.

You can manage cookie preferences via the cookie banner displayed on first visit, through your browser settings, or by writing to support@covalentb.com. Disabling certain cookies may affect site functionality.

06WhatsApp Communication and Consent

We use the official WhatsApp Business API to communicate with clients and prospects who have opted in. By sharing your WhatsApp number with us — through our website, a lead form, a sign-up box on a Meta advertisement, or any other clearly labelled opt-in channel — you consent to receive messages from Covalent Bond LLC regarding:

• Property listings and viewing arrangements
• Transaction updates and document delivery
• Renovation project coordination
• Customer support and follow-up
• Promotional and marketing messages, where you have separately opted in to marketing

We comply with Meta and WhatsApp Business Messaging Policies. You may opt out at any time by replying STOP to any of our messages, by emailing support@covalentb.com, or by following the instructions in our WhatsApp Messaging Policy.

07Sharing With Third Parties

We do not sell your personal data. We share data only with carefully selected partners and only when necessary:

• Service providers — payment processors, hosting providers, CRM, email service providers, analytics tools
• Communication platforms — Meta Platforms Ireland Ltd. (WhatsApp, Facebook, Instagram) for messaging and advertising
• Professional advisors — notaries, banks, legal counsel, auditors
• Authorities — public registries and government bodies where required by Georgian or Israeli law
• Contractors — vetted renovation contractors and suppliers, where engagement requires it

All third parties are bound by contractual confidentiality and data-protection obligations.

08Data Storage and Protection

Your personal data is stored on secure servers operated by reputable cloud providers, primarily within the EEA. We apply technical and organisational measures appropriate to the risk:

• TLS encryption for all data in transit
• Encryption at rest for sensitive databases and backups
• Role-based access control and the principle of least privilege
• Multi-factor authentication for staff accessing personal data
• Regular security reviews, vulnerability scanning, and staff training
• Incident response procedures with notification to authorities and affected individuals where required

09Retention Period

We retain personal data only for as long as necessary for the purpose for which it was collected, plus any period required by law:

• Active client records — duration of engagement plus 6 years (statutory limitation in Georgia)
• Transaction and financial records — 6 years from the end of the relevant tax period
• Marketing data — until you withdraw consent or after 24 months of inactivity
• Website analytics — typically 14 to 26 months depending on the tool

10Your Rights Under GDPR

Specifically, you may:

• Access the personal data we hold about you and receive a copy
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten") where there is no compelling legal reason to retain it
• Restrict processing in certain circumstances
• Receive your data in a portable, machine-readable format
• Object to processing based on legitimate interest, including direct marketing
• Withdraw consent at any time where processing relies on consent
• Lodge a complaint with the Personal Data Protection Service of Georgia, the Israeli Privacy Protection Authority, or your local supervisory authority in the EU

To exercise any right, write to support@covalentb.com. We will respond within thirty (30) days.

11International Data Transfers

Some of our service providers — including Meta Platforms — process data outside the EEA. As we operate between Georgia and Israel, data may also be transferred between these jurisdictions. Where transfers occur, we rely on appropriate safeguards: EU Commission adequacy decisions (Israel benefits from an EU adequacy decision), Standard Contractual Clauses, or equivalent mechanisms recognised under GDPR.

12Contact and Complaints

For any privacy-related question, request, or complaint, contact support@covalentb.com. Full contact details are on our Contact page.

• Email: support@covalentb.com
• Israel · Call & WhatsApp: +995 593 170 163
• Georgia · WhatsApp only: +995 555 190 271

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Service of Georgia (personaldata.ge), the Israeli Privacy Protection Authority, or with the data protection authority in your country of residence.