Privacy Policy
How Vortex Web Innovate collects, uses, and protects your personal information on our website, in our services and in our relationship with you as a client.
Last updated: 19 August 2026. Effective from: 19 August 2026.
1. Who We Are
Vortex Web Innovate is a Massachusetts entity operating from Union Street, Easthampton, MA 01027, United States. We are the data controller for personal information collected through this website and for the information you send us when you inquire about our services.
For any privacy question, including a request to exercise the rights in clause 9, write to info@vortexwebinnovate.com and put “Privacy” in the subject line.
2. Scope
This policy covers this website, the forms on it, any marketing we send from it, and your relationship with us as a prospective or current client.
It does not govern personal information we process inside a client engagement. Where we build or operate a system for you, we act as your processor and the terms in that engagement — the master services agreement and the data protection agreement signed with it — take precedence over this page.
3. Information Collected
Grouped by where it comes from:
- Contact form: name, work email, company, job title, phone, what you need help with, where you are in the process, timeline, budget range, whether you asked us to sign an NDA, how you heard about us, and the description you write.
- Project estimate forms: name, work email, phone, which calculator you used, budget range, and the project details you describe.
- Website analytics: where analytics is enabled, aggregate page and device information. This site runs no analytics tag unless one is configured; when Plausible is used it sets no cookies, and when Google Analytics 4 is used it runs with IP anonymization and both advertising signals switched off.
- Cookies: a session cookie and a CSRF token cookie, both strictly necessary. See our Cookie Policy.
- Email: if you write to us, your message and address.
- Client relationship: contract, billing and engagement records, and anything covered by a signed data protection agreement.
4. Legal Basis (GDPR)
Where the GDPR or UK GDPR applies to you, we rely on:
- Legitimate interests — responding to an inquiry you sent us, and keeping a record of that exchange. You can object at any time.
- Contract — everything necessary to negotiate, agree and deliver an engagement.
- Consent — analytics and marketing where consent is required, and only until you withdraw it.
- Legal obligation — tax, accounting and records we are required to keep.
5. Use of Information
We use what you send us to answer your inquiry, to prepare an estimate or a proposal, to deliver and support an engagement, to meet our legal and accounting obligations, and to keep this site secure and working.
We do not use it for anything else. In particular, we do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not enrich it against third-party data brokers.
6. Disclosure and Sub-processors
We disclose personal information only to service providers who process it on our instructions, under contract, and only for the purposes above. The categories are: cloud hosting and storage, transactional email delivery, and — where enabled — website analytics.
The categories and the named tools this site runs are listed on our sub-processors page. For a vendor review we send the full named list with the security package: ask at info@vortexwebinnovate.com. We will also disclose information where the law requires it.
7. International Transfers
We operate from the United States, and personal information you send us is processed there.
Where personal information originates in the EEA, the United Kingdom or Switzerland, we transfer it under appropriate safeguards, including the European Commission Standard Contractual Clauses with the UK Addendum where those apply.
8. Retention
Inquiries and estimate requests that do not become engagements are kept for 24 months from our last contact with you, then deleted.
Engagement records are kept for the life of the engagement and for as long afterwards as our contract, tax and accounting obligations require.
Anything covered by a data protection agreement is retained and deleted on the schedule that agreement sets, not this one.
9. Your Rights
Under the GDPR and UK GDPR you have the right to access your personal information, to have it corrected, to have it erased, to restrict or object to processing, to portability, and to withdraw consent at any time.
Under the CCPA and CPRA you have the right to know what we collect and why, to have it deleted, to have it corrected, to opt out of sale or sharing (we do neither), to limit the use of sensitive personal information, and not to be discriminated against for exercising any of these.
To exercise any right, write to info@vortexwebinnovate.com. We answer within 30 days and will tell you if we need longer and why. We do not charge for this.
10. Cookies
This site sets a session cookie and a CSRF token cookie. Both are strictly necessary: the first keeps your form entries attached to you, the second stops another site submitting our forms in your name. Neither is used for advertising.
Analytics cookies are set only where an analytics tag is configured, and the analytics we use is chosen to minimize them. You can block or delete cookies in your browser; the forms on this site will stop working if you block the two above.
The Cookie Policy sets this out in full.
11. Security
How we handle data, code and production environments — access control, encryption, change management, and the evidence a security review asks for — is documented separately in our security posture, which is public.
12. Children
This site is a business-to-business site. It is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has sent us personal information, write to info@vortexwebinnovate.com and we will delete it.
13. Changes
We update this policy when what we do changes, or when the law does. The updated version carries a new effective date at the top of this page and applies from that date.
Where a change materially affects how we handle information you have already sent us, we will tell the people affected directly rather than relying on this page.
14. Contact
Vortex Web Innovate, Union Street, Easthampton, MA 01027, United States. Email info@vortexwebinnovate.com.
If you are in the EEA or the United Kingdom and are not satisfied with our answer, you may complain to your local supervisory authority. In the United Kingdom that is the Information Commissioner's Office.
