Privacy Policy
What we collect, why, how long we keep it, and how to make us delete it.
1. Who we are
This website is operated by ValueInfinity Digital Services ("ValueInfinity", "we", "us"), the data controller for the personal data described below.
Contact for any privacy question or request: contact@valueinfinity-ds.com.
Note for the site owner: replace this paragraph with your registered legal entity name, company registration number and registered address before publishing. Those details are legally required in France and under Article 13 GDPR, and only you can supply them.
2. What this policy covers
This policy covers valueinfinity-ds.com and its subdomains.
Our mobile applications each carry their own privacy notice, published on
the relevant app store listing, because they process different data.
3. What we collect
3.1 Information you give us
When you submit the contact form, we collect:
- Name — so we can address a reply to you.
- Email address — so we can send that reply.
- Company (optional) — context for the enquiry.
- Project type (optional) — routing and context.
- Your message — whatever you choose to write.
Please do not include sensitive personal data (health, biometric, political, religious or similar special-category data) in the message field. We have no need for it and no facility to protect it appropriately.
3.2 Information collected automatically
- Server logs. Our infrastructure provider records standard request metadata — IP address, timestamp, requested URL, user agent — for security and abuse prevention.
- Anti-spam signals. When the contact form is protected by Cloudflare Turnstile, Turnstile collects technical signals from your browser to distinguish humans from bots. It does not use tracking cookies and does not build an advertising profile.
- Rate-limiting counters. To stop the contact form being abused, your IP address is combined with a secret salt and hashed (SHA-256) before it reaches our rate limiter. Only that irreversible hash is used as a counter key; we never store the address itself, and the counter is discarded within minutes.
3.3 Analytics
If analytics is enabled on this site, it uses Cloudflare Web
Analytics, which is privacy-first by design: no cookies, no
localStorage, no cross-site tracking, no fingerprinting, and
no data sold to third parties. It reports aggregate page views and
referrers only. Because it sets no cookies and stores nothing on your
device, no consent banner is required for it under the ePrivacy Directive.
3.4 Cookies
This website sets no cookies — not for analytics, not for advertising, not for anything else. Cloudflare Turnstile may set a short-lived technical cookie strictly necessary to complete the anti-bot check on the contact form; that is exempt from consent requirements because it is strictly necessary for a service you requested.
4. Why we process it, and on what legal basis
| Purpose | Data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Replying to your enquiry | Name, email, company, project type, message | Consent — Art. 6(1)(a). You give it via the checkbox on the form. |
| Preventing spam and abuse | Turnstile signals, hashed IP, request metadata | Legitimate interests — Art. 6(1)(f): keeping the service usable. |
| Security and availability | Server logs | Legitimate interests — Art. 6(1)(f): protecting the service. |
| Aggregate audience measurement | Non-identifying page-view counts | Legitimate interests — Art. 6(1)(f): understanding demand. |
We do not use your details for marketing, do not add you to a mailing list, and do not sell or rent personal data to anyone.
5. Who else processes it
We keep the list of processors deliberately short. Each is bound by a data processing agreement and may only act on our instructions.
| Processor | Role | Where |
|---|---|---|
| Cloudflare, Inc. | Website hosting, edge API, DNS, Turnstile anti-bot, analytics | Global edge network; EU data localisation available |
| Resend | Delivering contact-form submissions to our inbox | United States, under Standard Contractual Clauses |
Where a processor is outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses or an equivalent adequacy mechanism.
We may also disclose data where we are legally required to — a valid court order or a binding request from a competent authority.
6. How long we keep it
- Contact form submissions: up to 24 months from your last contact with us, then deleted.
- Rate-limiting records: under one hour.
- Server logs: as retained by our infrastructure provider, typically under 30 days.
- Analytics: aggregate only; no personal data to retain.
If we enter a commercial relationship, records related to that engagement are kept for as long as accounting and tax law requires.
7. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify anything inaccurate.
- Erase it ("right to be forgotten").
- Restrict how we process it.
- Port it — receive it in a structured, machine-readable format.
- Object to processing based on legitimate interests.
- Withdraw consent at any time, without affecting processing already carried out.
To exercise any of these, email contact@valueinfinity-ds.com. We respond within one month, as Article 12(3) requires. There is no charge.
If you are not satisfied with our response, you may lodge a complaint with your local supervisory authority. In France that is the CNIL.
8. Security
All traffic to this site is served over HTTPS. Form submissions are validated and rate-limited at the edge before reaching any storage. Access to submissions is limited to the people who need it to reply to you. No system is perfectly secure, but we keep the amount of data we hold small enough that a breach would have limited consequences.
9. Children
This website is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we will delete it.
10. Changes to this policy
If we change how we handle personal data, we will update this page and move the "last updated" date. Material changes affecting data we already hold will be notified by email where we have an address for you.
11. Contact
Questions about this policy or about your data: contact@valueinfinity-ds.com.