1. Who we are
Ovirtis (“Ovirtis”, “we”, “us” or “our”) operates this website and provides technology consultancy services. Questions about this policy can be sent to privacy@ovirtis.com.
2. Information we collect
When you send an enquiry, we collect the information you choose to provide, such as your name, work email address, organisation and message. We also process limited technical signals needed to protect the form, such as IP address, browser metadata used by the security check, and submission timing. We do not ask for sensitive personal data through this form.
If you allow analytics, we receive limited technical and usage information through Vercel Web Analytics. Vercel describes Web Analytics as anonymised, cookie-free measurement designed to report visits, page views, referrers and broad device or location information.
3. How we use information and our lawful bases
We use personal information only where we have a lawful basis. For business enquiries and the operation and security of this website, we generally rely on our legitimate interests in communicating with prospective clients and running a secure consultancy website. We rely on your consent before loading Vercel Web Analytics. Where an enquiry asks us to take steps before entering into a contract, we may process the information for that purpose. We may also process information where necessary to meet a legal obligation.
- To read and respond to enquiries.
- To send a short automated confirmation that your enquiry was received.
- To operate, secure and protect this website against automated abuse.
- To understand aggregate website usage and performance.
- To comply with applicable legal obligations.
The confirmation email is transactional only. We do not add you to a marketing list from this form.
4. Service providers and international transfers
We use Vercel to host this website and provide Web Analytics. We use Resend to transmit contact enquiries to the Ovirtis inbox and to send the automated confirmation email to the address you provide. We use Cloudflare Turnstile to help prevent automated abuse of the enquiry form. Enquiry content and confirmation delivery may therefore be processed by Resend, and limited technical signals may be processed by Cloudflare as part of the security check. API keys remain server-side and are never sent to the browser.
These providers may process information outside the United Kingdom or European Economic Area. Where international data-transfer rules apply, we expect the relevant provider arrangements to use an applicable adequacy mechanism or contractual safeguards. Provider terms and processing locations can change, so they should be reviewed as part of the production account configuration.
5. Cookies and analytics
We set one essential first-party cookie named ovirtis_privacy to remember whether you selected analytics or essential-only use. It contains only that choice, expires after 180 days and is not used to identify you.
Vercel Web Analytics is designed to operate without analytics cookies, but its script loads only after you choose “Allow analytics”. Choosing “Essential only” prevents it from loading. You can review or change your choice at any time through “Cookie settings” in the footer. We do not use advertising cookies or sell personal information.
If we add a different analytics, advertising or cookie-based service, this policy and the consent controls will be updated before it is enabled.
6. Retention
We keep enquiry information only for as long as reasonably necessary to respond, manage the relationship and meet legal or accounting requirements. Retention depends on the nature of the enquiry, whether a working relationship develops and any applicable record-keeping duties. Automated confirmation emails are not used for ongoing marketing retention. Analytics retention is governed by the selected Vercel plan and account settings.
7. Your rights
Depending on where you live and the circumstances, you may have rights to request access to, correction of, deletion of or restriction of your personal information, to object to certain processing and to receive information you provided in a portable format. Contact privacy@ovirtis.com to make a request. You may also have the right to complain to your local data protection authority; in the United Kingdom this is the Information Commissioner’s Office.
8. Security
Contact submissions are sent to a server-side endpoint over HTTPS. Before any email is sent we apply input validation and sanitisation, origin checks, a honeypot field, timing checks, per-IP and per-email rate limiting, and a Cloudflare Turnstile challenge verified on the server. No API key is exposed in page code. No online system is risk-free, so do not send passwords, payment details or other sensitive information through this form.
9. Changes
We may update this policy when the website, services or legal requirements change. The date above shows when this version was last updated.