Privacy Policy

Last updated 28 August 2026 · Valence Dynamics

This policy explains what personal data Valence Dynamics collects through this website, why we collect it, and what rights you have over it. It is written to meet our obligations under the UK GDPR and the Data Protection Act 2018, and it also reflects the position for visitors in the EEA and the United States.

The short version. This website does not collect anything from you. The enquiry form does not submit to a server. It builds an email and opens it in your own email application, and nothing leaves your device unless you press send. Once you do email us, we use what you sent to reply to you. We do not sell it, we do not advertise to you with it, and you can ask us to delete it at any time.

Who we are

Valence Dynamics is a technology procurement advisory practice operating as a sole trader established in the United Kingdom. For the purposes of data protection law, Valence Dynamics is the data controller for personal data submitted through this website.

Contact for any privacy matter: [email protected]

How the enquiry form works

This is important, because it is unusual and it works in your favour. The form on our contact page is not connected to a server, a database or a third-party form service. When you press the button, your browser assembles the text you entered into a draft email and hands it to your own email application. Nothing is transmitted to this website, and no record of what you typed exists anywhere until you choose to send that email yourself.

The practical result is that we receive your details in exactly the same way as if you had written to us directly, and only if you decide to.

What we collect

When you email us, whether through the form or directly, we receive the information you chose to include. Typically that is:

Your name
Your company name
Your work email address
Your job role, if you provide it
The annual technology spend range you select
Any free-text description of your situation you choose to write

We also receive whatever else your email naturally carries, such as your email address, your name as configured in your mail client, and the time you sent it.

We do not ask for and do not want special category data, financial account details, credentials, or confidential commercial documents through this website. Please do not submit them through the form.

Why we use it, and our lawful basis

We use your details for one purpose: to respond to your enquiry and, if relevant, to discuss and scope a possible engagement. Our lawful basis is legitimate interests under Article 6(1)(f) UK GDPR, specifically responding to a business enquiry that you initiated by contacting us. Once an engagement is agreed, we also rely on performance of a contract under Article 6(1)(b), and on legal obligation under Article 6(1)(c) for tax and accounting records.

We do not use your details for marketing, we do not add you to a mailing list, and we do not send unsolicited follow-up campaigns.

Who else is involved

There is no form processor, no CRM and no marketing platform in the path. The only processor involved in an enquiry is our email provider, which hosts the inbox your message arrives in. During a live engagement we may also use standard business tools such as cloud file storage and accounting software, each acting as a processor under contract.

Our email and file storage providers operate servers outside the United Kingdom, including in the United States. Where personal data is transferred outside the UK or EEA, that transfer is covered by the safeguards those providers have in place, such as Standard Contractual Clauses and the UK International Data Transfer Addendum.

We do not sell personal data. We do not share it with technology vendors, resellers, advertisers or any other third party for their own purposes. We take no commission, resale margin or referral fee from any vendor, so there is no commercial reason for your information to travel anywhere.

Client confidentiality

Where an engagement proceeds, we will handle commercially sensitive material such as contracts, invoices and licence records. That material is governed by the confidentiality terms in the signed engagement letter, which sit alongside this policy. In summary: it is used only to deliver the engagement, it is not disclosed to any third party without your written instruction, and it is never shared with technology vendors. Any case study or example we publish is anonymised so that neither the client nor the vendor is identifiable, and only with prior written permission.

How long we keep it

Enquiries that do not result in an engagement are deleted within 24 months. Where an enquiry leads to a signed engagement, records are retained for the duration of the engagement and for six years afterwards, in line with normal commercial and tax record-keeping requirements. You can ask us to delete your details sooner.

Cookies and analytics

This website sets no cookies at all. There is no advertising pixel, no tracking script and no third-party analytics tool.

Two things happen automatically that are worth naming. The site loads typefaces from Google Fonts, which means Google receives your IP address as part of serving those font files. And our hosting provider keeps standard server logs, which typically include IP address, browser type and pages requested, retained for a short period for security and diagnostics. Neither sets a cookie, and neither is used to profile you.

If we add analytics in future, this policy will be updated first and a cookie notice will be presented before any non-essential cookie is set.

Your rights

Under UK and EU data protection law you have the right to:

Ask what personal data we hold about you, and get a copy of it
Have inaccurate data corrected
Have your data erased
Restrict or object to how we use it
Receive your data in a portable format
Withdraw consent at any time, where consent is the basis we relied on

To exercise any of these, email [email protected]. We will respond within one month. There is no charge.

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority in the EEA.

California residents

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined under the CCPA and CPRA. To make a request, use the contact address above. We will not discriminate against you for exercising these rights.

Security

This site is served over HTTPS. Because the enquiry form does not transmit to a server, there is no submission endpoint and no stored form database to compromise. Email is held in an access-controlled inbox protected by multi-factor authentication, and engagement material is held in access-controlled storage.

No system is perfectly secure. Please do not send credentials, passwords, account numbers or highly confidential documents by email before an engagement and appropriate terms are in place.

Children

This is a business-to-business service. It is not directed at children and we do not knowingly collect data from anyone under 18.

Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Changes to this policy

If this policy changes materially, we will update the date at the top of this page. Continued use of the site after an update means you accept the revised policy.