Privacy Policy

1. Information we collect

Information you provide directly: when you use the contact form or email us, we collect your name, email address, the brand or project name if you include it, and the content of your message. We do not request sensitive categories of personal information and ask that you do not include them in your message.

Technical data: our hosting infrastructure automatically records limited technical information in server logs, such as IP address, browser and device type, requested pages, referring page and timestamps. These logs exist for security, abuse prevention and troubleshooting.

Consent record stored in your browser: when you answer the cookie consent banner, your choice is stored on your own device under the localStorage key va_consent for up to 12 months. It contains only the choice you made and the date; it includes no identifier and is never transmitted to us or to anyone else. This website does not use analytics trackers, advertising pixels or non-essential cookies. See the Cookie Policy for the complete storage inventory.

In summary, the categories of personal data we process are: identification and contact data (name, email address), professional data you volunteer (brand or project name, links you include), the content of your communications, and technical connection data (IP address, user-agent, requested URLs). We do not process special categories of data, we do not build profiles, and we make no automated decisions producing legal or similarly significant effects.

2. How we use information

We use the information you submit to respond to your inquiry, assess whether our services fit your needs, schedule calls, prepare proposals, maintain business correspondence records, secure the website and comply with legal obligations.

We do not use contact form submissions to send marketing communications unless you separately and explicitly request or consent to them.

3. Legal bases

Where the EU/UK General Data Protection Regulation or similar laws apply, we process personal data on the following bases: your consent (Art. 6(1)(a) GDPR) when you submit the contact form after accepting this policy; steps taken at your request prior to entering a contract (Art. 6(1)(b)); our legitimate interests in operating, securing and improving our business (Art. 6(1)(f)); and compliance with legal obligations (Art. 6(1)(c)).

You may withdraw consent at any time with effect for the future by contacting us at info@enterprisesva.com.

4. Sharing

We do not sell personal information, and we have not sold or shared personal information for cross-context behavioral advertising.

We share data only with service providers needed to operate this website and our correspondence, such as web hosting and email infrastructure, under appropriate contractual and security safeguards, and with authorities where disclosure is legally required. In the event of a legitimate corporate transaction (such as a merger or asset sale), business records may transfer subject to this policy.

5. International transfers

We are a US company and process inquiries in the United States. Where data of visitors from the European Economic Area, the United Kingdom or Switzerland is processed, and where required, we rely on appropriate safeguards such as contractual protections. By submitting the form you acknowledge that your inquiry is processed in the USA.

6. Retention

Inquiry correspondence is retained for as long as reasonably needed to respond, manage follow-up and document business communications, and no longer than 24 months after the last contact unless a business relationship follows or law requires longer retention. Server security logs are retained for short rotating periods. Records related to actual client engagements are retained as required for accounting, tax and legal purposes.

As a concrete schedule: contact form submissions that lead nowhere are deleted within 24 months of the last exchange; the consent record in your browser expires by itself after 12 months; rotating server logs are overwritten within weeks; and engagement records follow the statutory retention periods for US business and tax documentation. When a retention period ends, data is deleted or irreversibly anonymized.

7. Security

We use reasonable administrative, technical and organizational safeguards appropriate to the low-risk nature of the data we handle: HTTPS/TLS encryption for every connection to this website, transport encryption for email where the receiving server supports it, access to inquiry correspondence restricted to the people who need it to respond, hardened and updated hosting infrastructure, and — above all — minimal collection, because data we never collect cannot be breached. No online system can be guaranteed completely secure; if a breach ever affects your personal data in a way that creates a risk to you, we will notify you and the competent authorities as applicable law requires.

8. Your rights

Depending on your jurisdiction, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information; to restrict or object to certain processing; and to withdraw consent for future processing.

For visitors covered by the GDPR or UK GDPR, this means specifically: the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection to processing based on legitimate interests (Art. 21), and the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal (Art. 7(3)). You also have the right to lodge a complaint with your local supervisory authority; a directory of EU authorities is published by the European Data Protection Board, and the UK authority is the Information Commissioner's Office (ico.org.uk).

For California residents (CCPA/CPRA): in the preceding 12 months we have collected the categories of personal information described in section 1 (identifiers, professional information, and internet activity in server logs), solely from you directly or from your device, for the business purposes in section 2. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use or disclose sensitive personal information beyond what is permitted without a right to limit. You have the rights to know, access, correct, delete, and to non-discrimination for exercising them. Comparable rights under the privacy laws of Virginia, Colorado, Connecticut, Utah and other states are honored through the same contact channel.

Do Not Track and Global Privacy Control: because this site performs no tracking and sells no data, there is nothing for these signals to switch off; the site behaves as though they were always on.

To exercise any right, email info@enterprisesva.com. We will verify your request using the email address associated with the data and respond within the timeframe required by applicable law (one month under the GDPR, extendable where permitted; 45 days under the CCPA). Exercising your rights is free of charge except where the law allows a fee for manifestly unfounded or excessive requests.

9. Children

This website addresses business and professional audiences and is not directed to children under 13 (or under 16 where a higher threshold applies). We do not knowingly collect personal information from children.

10. Third-party links

This site may link to third-party websites and platforms. Their privacy practices are their own; we are not responsible for their policies.

11. Changes

We may update this policy as the website or the law evolves. The current version, with its effective date, is always published on this page.

12. Contact

Privacy contact: VA ENTERPRISES LLC, 1209 Mountain Road Pl NE Ste R, Albuquerque, NM 87110, USA — info@enterprisesva.com.