Privacy Policy & Data Integrity.
Effective Date: January 2025 • Last Audited: October 2026
1. Data Minimization & Necessary Collection Only
Studio Valore enforces strict data minimization principles. We collect only the information strictly necessary to deliver custom architectural proposals, answer technical inquiries, or provide contracted services.
- Direct contact submissions: Your name, business email address, requested technical scope, and project brief.
- Commercial transactions: Encrypted payments processed directly through Stripe API rails. We do not store or process raw credit card numbers.
- Zero invasive telemetry: We do not log behavioral tracking cookies, cross-site pixels, or biometric data.
2. GDPR (European Union) & UK Compliance
If you reside within the European Economic Area (EEA) or United Kingdom, your data is processed in accordance with the General Data Protection Regulation (GDPR). Our lawful basis for processing is contractual necessity and legitimate interest in delivering engineering proposals. You retain rights to access, rectify, restrict, or erase your personal records upon request.
3. CCPA / CPRA (California) & State Laws Compliance
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), as well as consumer laws in Virginia (VCDPA), Colorado (CPA), and Connecticut (CTDPA):
- No Sale or Sharing: We do not sell, rent, monetize, or share your personal data with third-party data brokers or marketing networks.
- Right to Know & Delete: You may request full disclosure or deletion of all personal details provided to us without penalty or discriminatory pricing.
4. Cookies & Local Storage
This site operates using strictly necessary functional cookies (theme mode preference and session security tokens). Optional analytical preferences are governed by our on-site Cookie Preferences Banner, where users may select “Essential Only” at any time.
5. Data Retention & Secure Transport
All communications and form data are encrypted in transit via Transport Layer Security (TLS 1.3/HTTPS). Records are retained solely for the duration of the active client engagement or prospective evaluation, after which inactive inquiry records are purged.
6. Contact the Data Controller
To exercise any privacy rights, request data deletion, or query our data governance policies, contact lead architect Pratham Verma directly at: contact@valorewebdesign.com