Privacy Policy

Last updated: 2 August 2026

This policy explains what personal data valhguard.com collects, why, on what legal basis, who it reaches, and how you can control it. It is written to Regulation (EU) 2016/679 (GDPR) and Ley Orgánica 3/2018 (LOPDGDD).

Who is responsible

Valhguard is the data controller for the processing described here. For anything relating to this policy or your data, write to contact@valhguard.com.

Valhguard is currently being incorporated. Registered name, CIF and registered office will be published in our Legal Notice once that completes, and this policy will be updated on the same day.

What we collect

What you send us. The contact form asks for your name, company, email address, phone number and your message. Nothing on this site requires you to identify yourself unless you choose to write to us.

Technical data. Our host keeps standard server logs, which include IP address, browser user agent and the pages requested. Third-party resources the site loads also receive your IP address, because that is unavoidable when your browser fetches a file from another server. Those are listed in the Cookie Policy.

Please do not send sensitive technical detail through this form. Do not include log samples, network diagrams, host names, credentials or incident detail in a web form. Tell us you have something to discuss and we will agree a secure channel before you send anything. We do not ask for, and do not want, special category data under Article 9 GDPR.

Why, and on what legal basis

PurposeLegal basis
Reading and answering your enquiryArt. 6(1)(b) GDPR, steps taken at your request before entering into a contract
Filtering spam submissionsArt. 6(1)(f), our legitimate interest in keeping the form usable
Keeping the site available and secureArt. 6(1)(f), our legitimate interest in operating the service
Aggregate audience measurementArt. 6(1)(f), our legitimate interest in knowing which content is read. No cookies are set and no cross-site profile is built

Where we rely on legitimate interest you have the right to object at any time, and we will stop unless we can show compelling grounds that override your interests.

Who else sees it

We do not sell personal data, and we do not share it for anyone else’s marketing. It reaches the following processors purely so the site and our email can function:

  • Automattic Inc. (United States) for hosting, the Jetpack statistics and content delivery, and Akismet spam filtering. Form submissions are checked for spam, which involves sending the submission and your IP address to Akismet.
  • Google LLC (United States) for delivery and storage of the email your enquiry becomes.
  • Cloudflare, Inc. (United States) which serves some front-end libraries used by the site.
  • ipapi for IP-based geolocation used by site functionality.

International transfers. Several of those are established outside the European Economic Area, principally in the United States. Those transfers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework where the recipient is certified under it, and otherwise on Standard Contractual Clauses. You may request information about the safeguards that apply.

We will also disclose data where a law, a court or a competent authority requires it.

How long we keep it

Enquiries are kept for twelve months from our last exchange with you, then deleted. If your enquiry becomes an engagement, the data moves to that contractual relationship and is retained for as long as commercial and tax law requires. Server logs are kept for the period our host applies. You can ask us to delete your enquiry sooner and we will, unless we are required to keep it.

Your rights

You can ask us for access to your data, correction of it, deletion of it, restriction of how we use it, a portable copy of it, and you can object to processing based on legitimate interest. Where processing rests on consent you can withdraw it at any time without affecting what was lawful beforehand.

Write to contact@valhguard.com. We answer within one month, and will tell you if we need longer. There is no charge. We may ask you to confirm your identity before acting, so that we do not disclose your data to someone else.

If you are not satisfied with how we handle it, you can complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos, without contacting us first.

Automated decisions, and minors

We do not make decisions about you by automated means and we do not profile you. This site sells professional services to organisations and is not directed at children. We do not knowingly collect data from anyone under 14, the age of consent set by Spanish law.

Changes

When this policy changes we update the date at the top. The most recent version is always the one on this page.