Vintaflow

Policy

Privacy Policy

Effective date: March 26, 2026

Vintaflow LLC (Vintaflow, we, us) is a supply chain software company headquartered in Raleigh, North Carolina, United States. This Privacy Policy explains what personal data we collect through this website (www.vintaflow.com), why we collect it, how we use it, and what rights you have over your data.

For visitors in the European Economic Area (EEA), the United Kingdom, or Switzerland, Vintaflow LLC acts as the data controller under the General Data Protection Regulation (GDPR) and equivalent laws.

What data we collect

Contact form submissions. If you submit a message through our contact form, we collect your name, email address, company name (if provided), and the content of your message. We use this data to respond to your inquiry. The legal basis under GDPR is our legitimate interest in responding to business inquiries, or performance of pre-contractual steps at your request.

Analytics data. With your consent, we use Google Analytics 4 to collect anonymized information about how visitors use this website, including page views, session duration, general geographic region (country/city level), browser type, and device type. IP addresses are anonymized. Analytics cookies are only set after you accept them via our cookie consent banner. The legal basis is your consent (GDPR Article 6(1)(a)).

Technical data. When you visit any website, your browser automatically transmits technical information such as your IP address, browser type, and the page you requested. This information is processed by our hosting infrastructure (Microsoft Azure) for the purpose of serving the site and maintaining security. We do not retain server logs beyond standard hosting retention periods.

How we use your data

  • To respond to contact form inquiries
  • To understand how visitors use our website and improve its content (analytics, with consent only)
  • To maintain the security and performance of the website

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Third-party processors

We rely on the following third-party services that may process data on our behalf:

  • Google Analytics 4 (Google LLC) — website analytics, loaded only with your consent. Google may process data in the United States. Google participates in the EU–US Data Privacy Framework.
  • Microsoft Azure (Microsoft Corporation) — hosting infrastructure and contact form email routing. Data may be processed in the United States or EU depending on the Azure region in use.
  • Crisp (Crisp IM SAS) — chat support tool. Currently not loaded on the website; if reintroduced, it will only activate with your explicit consent.

Data retention

Contact form submissions are retained only as long as necessary to manage the inquiry or as required by applicable law, and no longer than 24 months unless there is an ongoing business relationship. Analytics data is retained in Google Analytics for 14 months. We do not maintain a separate database of website visitor data.

Your rights

If you are located in the EEA, UK, or Switzerland, you have the following rights under the GDPR:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data where there is no compelling reason to retain it
  • Restriction — ask us to restrict processing of your data in certain circumstances
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interests
  • Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, please use the contact form on our contact page. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority. In the EEA, a list of supervisory authorities is available at edpb.europa.eu.

Cookies

We use cookies and similar technologies as described in our Cookie Policy. You can manage your preferences at any time via the cookie settings control.

Children's privacy

This website is not directed at children under 16. We do not knowingly collect personal data from children.

Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect any changes. We encourage you to review this policy periodically.

Contact

For privacy questions or to exercise your rights, use the contact form on our contact page.

Vintaflow LLC — Raleigh, North Carolina, United States