We built this site to collect almost nothing. No analytics, no advertising pixels, no cookies of ours, no accounts. What we do collect is what you choose to type into the contact form — and this page says exactly where that goes.
Virtuosity, LLC ("Virtuosity," "we," "us") operates virtuosity.io. Questions about anything here: [email protected].
What we collect
Three things, each only when it happens:
- What you send us — If you use the contact form: your name, email, and whatever you put in the optional title, company, and message fields. Submitting is the only way this data exists — reading the site sends us nothing.
- Hosting logs — The site is served by Cloudflare, which keeps standard server logs (IP address, browser type, pages requested) to run and protect the service, as almost every website's host does.
- Font requests — The site's typefaces load from Google Fonts, so your browser requests those files from Google's servers. Google sees the request (including your IP address) but sets no cookies through it.
What we deliberately do not do
- No analytics or tracking scripts. We do not measure you.
- No advertising pixels, and no sale or sharing of personal data for marketing — ours or anyone else's.
- No cookies of our own. The site works without asking you to accept anything.
- No accounts, no logins, no profiles.
Where a form submission goes
A submission is checked by Cloudflare Turnstile (its bot check runs in your browser and sees your IP address), passed through our form endpoint on Cloudflare, and delivered as an email via Resend, our email provider, to our inbox. Processing happens in the United States.
There is no database. Your message exists as the email it becomes, and we keep it the way correspondence is kept — for as long as the conversation and our legal obligations require, then it is deleted.
If you book a call instead, the scheduler is Calendly. Its software loads only if you open the booking tab, and what you enter there is governed by Calendly's own privacy policy.
The legal footing
Where the GDPR or UK GDPR applies: we process what you send us because you asked us to respond (performance of steps you initiated), and we run bot protection and hosting logs on legitimate interests — keeping the site working and abuse out. Where data moves outside the EEA or UK — our processing is in the United States — we rely on recognized safeguards such as Standard Contractual Clauses.
Your rights
Depending on where you live, you can ask us to:
- Access — tell you what personal data we hold about you, and give you a copy.
- Correct — fix data that is wrong or incomplete.
- Delete — erase your data, subject to narrow legal exceptions.
- Restrict or object — limit or stop certain processing.
- Complain — raise it with your local data protection authority (EEA/UK), or exercise the equivalent rights your law provides — California's CCPA/CPRA, Brazil's LGPD, Canada's PIPEDA, and others. We do not sell or share personal information as those laws define it.
Write to [email protected]. We may need to verify you are you before acting, and we will never treat you worse for asking.
Security
The site is static — there is no application database to breach. The form path is protected end to end: bot verification before anything is processed, a strict allowlist on what the endpoint accepts, and secrets held in Cloudflare's infrastructure, not in code. No system is perfectly secure, and we will not pretend otherwise; we keep the attack surface as small as the architecture allows.
Children
The site is written for a professional audience and not directed at children under 13. We do not knowingly collect children's data; if you believe a child has sent us some, tell us and we will delete it.
Changes
When this policy changes, the change appears on this page with a new date at the top. If a change is material and the law requires more notice than that, we will give it.
Who we are
Virtuosity, LLC · virtuosity.io · [email protected]