Privacy notice.
Who we are
The data controller for the personal data described in this notice is Nature Value Pathways LLC, a company incorporated in New York, NY, USA. You can contact us about anything in this notice, including any of the rights set out below, at privacy@naturevp.com.
What we collect
From the enquiry form, only what you type into it: your first name, last name, email address, organisation, and the text of your enquiry. We also record that you confirmed you had read this notice, and the wording shown to you when you did, so there is a record of what you were told.
From your visit to the site, aggregate traffic data collected by Vercel Web Analytics. No cookie is set and nothing is stored on your device; the short-lived hash used to count a visit is discarded after 24 hours and is never linked to your enquiry. How that works is set out below.
Cookies and analytics
This site sets no cookies. The enquiry form posts directly to our CRM with cookies explicitly disabled on the request, so none are sent and none are stored.
Traffic on this site is measured using Vercel Web Analytics. It works without cookies or persistent identifiers: each visit is identified by a short-lived hash generated from the incoming request, which is discarded after 24 hours, and the data is aggregated so it cannot be used to single you out or track you across other websites. No cross-site tracking is involved.
Because nothing is stored on your device, this does not fall under the cookie-consent rules, and we rely on legitimate interest, measuring how our site is used, as the legal basis.
HubSpot’s site-wide tracking script, the one that would set analytics cookies, is deliberately not installed.
Why we collect it
To read your enquiry and reply to it, to keep a record of the correspondence so a later conversation can pick up where the last one left off, to follow up with you afterwards about matters relevant to your enquiry or our work, and to understand overall traffic to this site so we can maintain and improve it.
This form is intended for professional contacts engaging with us in a business capacity, not individual consumers. We do not build behavioural profiles from these details, and we do not sell or share them with anyone beyond the processors named below.
Legal basis
Legitimate interest (Article 6(1)(f) UK/EU GDPR), for both the enquiry handling and the analytics described above. Replying to an enquiry you have initiated, following up as a professional contact about matters relevant to it, and measuring aggregate site traffic without identifying visitors, are all proportionate uses that you would reasonably expect. We have weighed this against your right to privacy and concluded our interest is not overridden by it.
You can object to this processing at any time, and in particular to any use of your details for marketing purposes, by writing to privacy@naturevp.com. An objection to marketing is an absolute right, and we will stop, no justification needed. An objection to the processing more generally will also be honoured unless we have compelling legitimate grounds to continue (for example, an enquiry already underway that you haven’t asked us to close).
Who processes it
Enquiries are stored in HubSpot, a customer relationship management provider acting as our processor. HubSpot, Inc. is based in the United States, and your details are transferred to and stored there.
Site traffic is measured by Vercel, our hosting provider, acting as a processor for the analytics data described above. Vercel, Inc. is based in the United States.
Both of these are international transfers outside the UK and EEA. HubSpot and Vercel are each certified under the EU–U.S. Data Privacy Framework, recognised by the European Commission (and the equivalent UK extension) as providing an adequate level of protection. Both companies’ Data Processing Agreements additionally incorporate Standard Contractual Clauses as a fallback, should that certification ever be withdrawn or invalidated.
How long we keep it
If your enquiry doesn’t lead to an ongoing relationship with us, we keep your details for 3 years from your last contact with us, then delete them. If it does lead to an ongoing commercial relationship, we keep your details for the life of that relationship, and for 3 years afterwards for record-keeping and to deal with any claims arising from it, after which they are deleted or anonymised.
Aggregate analytics data is discarded automatically after 24 hours by Vercel’s own process and is never linked back to you.
You can ask us to delete your enquiry details sooner. See below.
Your rights
You can ask us at any time to:
- Give you a copy of the details we hold about you.
- Correct anything that is wrong or out of date.
- Erase your details.
- Object to our processing, including any use for marketing, which we will stop on request.
Write to privacy@naturevp.com and we will respond within one month. If you are not satisfied with how we have handled it, you can complain to your data protection supervisory authority.