Privacy Policy

Who we are

Webvinora is a remote web design and digital marketing agency serving clients in the USA and worldwide. The website is operated by [LEGAL ENTITY NAME], registered at [REGISTERED ADDRESS] (company registration number [COMPANY REGISTRATION NUMBER]).

For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, [LEGAL ENTITY NAME] is the controller of the personal data described in this policy.

You can reach us about privacy at any time at contact@webvinora.com.

What data do we collect?

We only collect personal data that you choose to give us, plus limited technical data needed to run the website.

• Project brief form: your name, email address, phone number, company name, company size, project type, budget range, timeline and project description.
• WhatsApp conversations: if you choose to message us on WhatsApp, we receive your phone number, WhatsApp profile name and the messages and files you send.
• Emails: if you email us, we receive your email address, name and whatever you include in your message and attachments.
• Cookie choice: your answer to our cookie consent bar is stored in your own browser (see our Cookie Policy).
• Analytics data, only if you click Accept: Google Analytics 4 collects information such as pages viewed, approximate location, device and browser type, and how you arrived at the site.
• Server logs: our hosting provider, Vercel, processes technical data such as IP address and request details to deliver and secure the website.

How do we use your data?

We use your data to reply to your enquiry, prepare quotes and proposals, deliver and manage projects, send invoices, keep business records and, if you consent, understand how visitors use the site so we can improve it.

We do not sell your personal data, we do not use it for advertising or retargeting, and we do not make decisions about you based solely on automated processing.

Legal bases (EU and UK visitors)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:

• Steps before entering a contract, and performing a contract: handling your project brief, preparing proposals and delivering work.
• Legitimate interests: answering general emails and WhatsApp messages, keeping the website secure and keeping reasonable business records.
• Consent: Google Analytics, which only loads after you click Accept. You can withdraw consent at any time.
• Legal obligation: keeping financial and tax records where the law requires it.

Who do we share data with?

We share personal data only with service providers that help us run the website and our business, and only as far as they need it. Current and planned categories are:

• Website hosting: Vercel Inc.
• Analytics: Google LLC (Google Analytics 4), only if you consent.
• Email delivery: [EMAIL DELIVERY PROVIDER], used to deliver form submissions and our replies.
• Messaging: WhatsApp (Meta Platforms), only when you choose to message us there. WhatsApp’s own privacy policy applies to your use of WhatsApp.

International data transfers

We work remotely and some of our service providers are based in, or process data in, the United States and other countries outside the EEA and UK.

Where personal data from the EEA or UK is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or the EU-U.S. Data Privacy Framework where the provider is certified. You can ask us for more information about these safeguards.

How long do we keep data?

Enquiries that do not become projects are kept for up to [RETENTION PERIOD FOR ENQUIRIES] and then deleted.

Client and project records are kept for as long as the project runs and afterwards for as long as needed for legal, tax and accounting purposes, typically [RETENTION PERIOD FOR CLIENT RECORDS].

Google Analytics data, if you consent, is kept according to the retention setting in our Analytics account, [ANALYTICS RETENTION PERIOD].

Your rights in the EU and UK

Under the GDPR and UK GDPR you have the right to access your data, have it corrected or deleted, restrict or object to our processing, receive a portable copy, and withdraw consent at any time without affecting earlier processing.

You also have the right to complain to a data protection authority, such as the authority in your EU country or the Information Commissioner’s Office (ICO) in the UK. We would appreciate the chance to resolve your concern first.

Your rights in California and other US states

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) gives you the right to know what personal information we collect, use and disclose; to access and receive a copy of it; to correct it; to delete it; and to not be discriminated against for exercising these rights.

We do not sell personal information and we do not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes that would trigger a right to limit its use.

Residents of other US states with comprehensive privacy laws, such as Colorado, Connecticut, Virginia, Texas and others, may have similar rights. We will honor valid requests in line with the law that applies to you.

You or an authorized agent can make a request by emailing contact@webvinora.com. We may need to verify your identity before responding. If we decline a request, you may be able to appeal by replying to our decision.

How to exercise your rights

Email contact@webvinora.com with your request. We aim to respond within one month (GDPR/UK GDPR) or 45 days (CCPA/CPRA), and will tell you if we need more time as the law allows.

Children’s privacy

Our website and services are aimed at businesses and are not directed at children. We do not knowingly collect personal data from children under 13, or under 16 in the EEA and UK. If you believe a child has sent us personal data, contact us and we will delete it.

Security and changes to this policy

We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS) and limited access to client information. No system is completely secure, so please avoid sending highly sensitive information through the form or chat.

We may update this policy from time to time. The date at the top shows when it last changed. Questions? Email contact@webvinora.com or message us on WhatsApp at +44 7451 256085.