Privacy Policy
Effective date: November 1, 2025
Your privacy is important to us. This Privacy Policy explains how Vruht (“we”, “us”, or “our”) collects, uses, and protects personal information through our website vruht.com in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data-protection laws.
1. Who we are
Vruht
Email: info@vruht.com
2. What information we collect
- Contact information – name, email address, and message content when you use our contact form.
- Email address – if you sign up for updates or newsletters.
- Business details – if you request a quote or proposal.
- Technical data – anonymous information automatically collected by our hosting provider, such as IP address, browser type, and referring website, used only for security and performance monitoring.
We do not collect sensitive personal data.
3. How we use your information
- To respond to inquiries submitted via our forms.
- To send you updates or newsletters (only with your consent).
- To maintain business communications with clients and partners.
- To improve our website and prevent abuse or security issues.
We will never sell, rent, or share your personal information for marketing purposes.
4. Legal basis for processing
We process your data based on:
- Legitimate interest – to respond to inquiries or operate our website securely.
- Consent – when you voluntarily subscribe to updates or newsletters.
- Contractual necessity – when communication is required to deliver requested services.
You can withdraw your consent at any time by contacting us.
5. How forms are processed
When you submit a form on our website, your data is securely transmitted and processed by Basin (operated by Moonshot Ventures Inc., Canada). Basin acts as our Data Processor under a signed Data Processing Agreement (DPA) that includes EU Standard Contractual Clauses (SCCs) to ensure lawful and secure data transfers.
- Form submissions are encrypted in transit and at rest.
- Data is retained for up to 365 days, then automatically deleted from Basin’s systems.
- Relevant inquiries may be transferred securely to our CRM or email platform for continued communication.
- You can request deletion of your submission at any time.
6. Newsletter and email updates
If you subscribe to receive updates from us, we will use your email address solely for that purpose. You can unsubscribe at any time using the link provided in each email or by contacting us directly. We will use a GDPR-compliant email or CRM provider for managing our mailing list and client communication.
7. Data retention
| Data type | Retention period |
|---|---|
| Contact-form submissions | 365 days (auto-deletion via Basin) |
| CRM contact records | As long as the relationship remains active |
| Newsletter subscriptions | Until you unsubscribe |
| Website analytics (if any) | 14–26 months (aggregated, non-personal) |
8. Data sharing and processors
We only share data with trusted third parties that help us operate our website and communications. These include:
- Hosting provider: Namecheap, Inc. – our website is hosted on servers located in the European Union (Amsterdam).
- Form processor: Basin (Moonshot Ventures Inc., Canada) – processes form submissions under a signed GDPR DPA.
- CRM or email provider: (to be specified once selected) – used for ongoing communication and newsletter management.
9. International data transfers
Where personal data is transferred outside the European Economic Area (EEA), it is protected under one of the following:
- An adequacy decision by the European Commission (e.g., Canada’s PIPEDA).
- EU Standard Contractual Clauses (SCCs) with the recipient.
- Other lawful safeguards under GDPR.
10. Your rights under GDPR
You have the following rights:
- Access – obtain a copy of your data.
- Rectification – correct inaccurate or incomplete data.
- Erasure (“right to be forgotten”) – request deletion of your data.
- Restriction of processing – limit how your data is used.
- Data portability – receive your data in a machine-readable format.
- Objection – withdraw consent or object to processing based on legitimate interest.
To exercise these rights, contact info@vruht.com. We will respond within 30 days.
11. Data security
- HTTPS encryption on our website.
- Encrypted storage and transfer through Basin.
- Access controls and two-factor authentication on internal accounts.
- Regular security reviews of hosting and processors.
12. Cookies and analytics
Our website may use strictly necessary cookies for performance and security. If we implement analytics in the future, we will use privacy-friendly, cookieless tools such as Plausible.io or Fathom Analytics, which do not identify individual visitors. You will be notified of any changes to cookie usage.
13. Changes to this Privacy Policy
We may update this Privacy Policy periodically. Any significant changes will be posted on this page with an updated “effective date.”
14. Contact
For any questions or requests regarding this Privacy Policy or your data rights, please contact:
Vruht
Email: info@vruht.com
Last updated: November 1, 2025
This Privacy Policy was prepared in accordance with the EU GDPR (2016/679) and other applicable data-protection laws.