Privacy Policy

1. Scope, controller, and contact

ALUVELLO is the public-facing brand responsible for information collected through aluvello.com. If a project moves forward, the contracting party and its business details will be identified in the written quotation or order documents.

To ask a privacy question, request the controller’s applicable business details, or exercise a privacy right, use the dedicated privacy-request form. It asks only for a name, reply email, and the request details needed to respond.

2. Information we collect

For a project enquiry, we collect information you choose to submit, which may include your name, company, role, email address, phone or messaging details, country or region, project location, project information, dimensions, drawings, photographs, uploaded files, and correspondence. A privacy request uses only the reduced fields described in section 1. The site and Cloudflare security services may also create technical records such as IP address, browser and device data, requested pages, referring page, timestamps, challenge results, consent choices, and security logs.

3. How information is used

Information is used to review and respond to enquiries, clarify product and project requirements, prepare or discuss quotations, administer an agreed business relationship, operate and secure the site, prevent abuse, maintain records, comply with legal obligations, and establish or defend legal claims. Information is not used for unrelated email marketing unless a separate, valid permission and a working opt-out are in place.

4. Basis for processing

Depending on your location and the context, processing may be necessary to take steps you request before a contract, perform a contract, comply with legal obligations, pursue legitimate interests such as responding to business enquiries and securing the site, or act on consent where consent is required. You may withdraw consent for future processing when consent is the basis used.

5. Cookies and site technology

The site uses technologies necessary to deliver pages, protect forms, remember essential settings, and prevent abuse. Cloudflare supports DNS, content delivery, and transport security. If Cloudflare Turnstile bot protection is enabled on a form, the form presents that protection and related notice when required. Optional analytics or marketing technologies should be activated only with an appropriate notice and consent controls where required. If such tools are added, this policy and the site’s controls will be updated to identify their purpose.

6. Service providers and project review

Information may be shared with providers that support hosting, security, forms, file storage, communications, document review, professional advice, logistics, or other work needed to evaluate or fulfil a requested project. Cloudflare processes technical requests to secure and deliver the site and, when Turnstile is enabled, processes challenge data for form protection. Information may also be disclosed when required by law or in connection with a legitimate business reorganization. Recipients should receive only the information reasonably needed for their role.

7. International processing

A project enquiry may involve hosting, support, review, or fulfilment resources in countries other than your own. Where the law requires a transfer safeguard, the responsible party will use an appropriate contractual or legal mechanism.

8. Retention

Enquiry and project information is kept only as long as reasonably needed for enquiry follow-up, quotation and contract records, legal obligations, dispute handling, security, and consent records. Records that are no longer needed are deleted or anonymized when reasonably practicable, subject to backup cycles and legal duties.

9. Security and file handling

Reasonable technical and organizational measures are used to reduce the risk of unauthorized access, loss, misuse, or alteration. No online system can guarantee absolute security. Do not upload information that is not necessary for review, and protect commercially sensitive drawings before submission where appropriate.

10. Your choices and rights

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, objection, or a copy of personal information, and to withdraw consent. You may also have a right to complain to a relevant data protection authority. Use the dedicated privacy-request route in section 1; proportionate identity verification may be required.

11. Third-party links

This site may link to external websites. Their privacy practices are governed by their own policies.

12. Children

This website is intended for business and project enquiries and is not directed to children. We do not knowingly seek personal information from children.

13. Changes to this policy

This policy may be updated when the site, enquiry process, providers, or legal requirements change. The current version and update date will remain available on this page.