Legal
Privacy Policy
This policy explains how VALTRENO SYSTEMS LTD collects, uses, and protects personal data when you visit this website or contact us, in line with the UK GDPR and the Data Protection Act 2018.
Last updated: September 2026
1. Who we are
VALTRENO SYSTEMS LTD (“Valtreno”, “we”, “us”) is a company registered in England & Wales under company number 17455787, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
We are the data controller for personal data processed through this website. For any privacy question, contact us through our contact form.
2. What personal data we collect
- Enquiry data — the name, email address, company name, and message you submit through our contact form.
- Correspondence — the content of emails and other messages you send us, and our replies.
- Technical data — IP address, browser type, and request metadata recorded in server logs by our hosting provider for security and reliability purposes.
- Client project data — where we deliver services, any personal data contained in systems we are engaged to build or maintain. In that context we usually act as a processor on your instructions, under a separate agreement.
We do not collect special category data through this website, and we ask that you do not include it in enquiry messages.
3. Why we process it, and our lawful basis
- To respond to your enquiry — lawful basis: legitimate interests (responding to a request you initiated), or steps taken at your request prior to entering a contract.
- To provide our services — lawful basis: performance of a contract.
- To keep the site secure and available — lawful basis: legitimate interests in preventing abuse and maintaining service.
- To meet legal and accounting obligations — lawful basis: compliance with a legal obligation.
Where we rely on legitimate interests, we have assessed that our interest in operating and securing our business does not override your rights and freedoms. You may object to this processing at any time.
4. How long we keep it
- Enquiries that do not become projects: up to 24 months from last contact, then deleted.
- Client records: for the duration of the engagement and for 6 years afterwards, to meet UK statutory accounting and limitation periods.
- Server logs: typically 30 days, as retained by our hosting provider.
5. Who we share it with
We do not sell personal data. We share it only with service providers who process it on our behalf under written terms:
- Vercel Inc. — website hosting and server logs.
- Resend (Plus Five Five, Inc.) — transactional delivery of contact form enquiries to our inbox.
- Email and business software providers — for correspondence and record-keeping.
We may also disclose data where required by law, or to establish, exercise, or defend legal claims.
6. International transfers
Some of our providers process data outside the UK, including in the United States. Where that happens, transfers are covered by UK adequacy regulations, the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or another safeguard permitted under Article 46 of the UK GDPR.
7. Your rights
Under the UK GDPR you have the right to:
- access a copy of the personal data we hold about you;
- have inaccurate data corrected;
- request erasure, where we have no overriding reason to keep it;
- restrict or object to processing;
- data portability, where processing is automated and based on consent or contract;
- withdraw consent at any time, where processing is based on consent.
To exercise any of these, contact us through our contact form. We respond within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113, though we would appreciate the chance to resolve the matter first.
8. Security
We apply technical and organisational measures appropriate to the risk, including encryption in transit (TLS), access control on a need-to-know basis, and vetting of the processors we use. No system is perfectly secure, and we cannot guarantee the security of data in transit to us.
9. Cookies
This website uses only what is strictly necessary to serve pages. See our Cookie Policy for detail.
10. Changes to this policy
We may update this policy to reflect changes in our practices or the law. The date at the top of this page shows when it was last revised. Material changes will be highlighted on this page.