Privacy Policy

Ventura Decision Systems (“we”, “our”, or “us”) operates venturadesisionsystems.com. This Privacy Policy explains what information we collect when you visit our website or submit an enquiry, how we use that information, and the choices you have.

We keep our data practices minimal by design. We do not run advertising networks, sell data to third parties, or build behavioural profiles. The information we collect serves one purpose: to assess fit and respond to inbound enquiries.

We collect only what you choose to give us. This falls into two categories:

We use the information we collect for the following purposes only:

• Respond to your enquiry. We use the contact details you provide to reply and discuss next steps.
• Evaluate fit. The intake information (channel, order volume, main pain) helps us understand whether our service is a good match before we invest time on both sides.
• Improve our service. Aggregated, anonymised patterns in enquiries help us improve our messaging and offering over time. No individual is identified in this process.

We do not use your data for advertising targeting, automated profiling, or any purpose not listed above. We do not send unsolicited marketing emails. If you receive a follow-up from us, it is because you submitted the intake form.

We do not sell, rent, or trade your personal information. Sharing is limited to the minimum necessary to operate:

• Tally — our intake form provider. Form responses are stored on Tally's infrastructure and transmitted to us. Tally's own privacy policy applies to data held on their platform.
• Hosting infrastructure — our website is hosted on a Linux VPS via a cloud provider. Server logs pass through this infrastructure.
• Legal requirement — we will disclose information if required to do so by law, court order, or regulatory authority.

No other third parties receive your information. We do not use advertising networks, behavioural analytics platforms, or data brokers.

We retain personal information only for as long as needed to fulfil the purposes described in this policy.

• Intake form responses are retained for up to 12 months from submission, or until you request deletion — whichever comes first.
• If an engagement commences, relevant contact details are retained for the duration of the engagement plus a reasonable administrative period.
• Server logs are retained for up to 90 days for security and diagnostic purposes, then deleted.

You may request deletion of your information at any time by contacting us at the address in Section 9.

We take reasonable technical and organisational steps to protect information against unauthorised access, disclosure, and loss. Specific measures include:

• Encrypted transport. All traffic between your browser and our website is encrypted via HTTPS / TLS. Intake form data is transmitted over encrypted channels.
• Access control. Access to hosting infrastructure and form responses is restricted to authorised personnel only, protected by strong authentication.
• Least privilege. Individuals are granted only the minimum access rights needed to perform their role. Access is reviewed and revoked when no longer required.
• Secure hosting practices. Our server environment follows hardening guidelines: SSH key-based authentication, firewall rules limiting exposed ports, automated security updates, and regular configuration reviews.
• No unnecessary attack surface. This website loads no third-party analytics or advertising scripts. The reduced number of external dependencies limits the risk of supply-chain exposure.

No security measure is absolute. We cannot guarantee that our systems will never be compromised, but we commit to notifying affected individuals promptly if a breach occurs that is likely to affect their rights or interests.

Our website is hosted in infrastructure that may be located outside your country of residence. Tally, our form provider, may also process data in jurisdictions other than your own.

Where data is transferred internationally, we rely on the safeguards provided by the service providers we use (including their data processing agreements and applicable standard contractual clauses) to ensure an adequate level of protection.

If you have specific concerns about cross-border data transfers, please contact us and we will address them directly.

Depending on where you are located, you may have rights regarding the personal data we hold about you. These commonly include:

• Access. Request a copy of the personal information we hold about you.
• Correction. Ask us to correct inaccurate or incomplete information.
• Deletion. Ask us to delete your personal information. We will do so unless we have a legal obligation to retain it.
• Objection. Object to us processing your information in a particular way.
• Portability. Request that we provide your data in a structured, machine-readable format where technically feasible.

To exercise any of these rights, email us at contact@venturadesisionsystems.com. We will respond within 30 days. There is no fee for a reasonable request.

If you believe we have not handled your information appropriately, you have the right to lodge a complaint with the data protection authority in your jurisdiction.

For any questions, concerns, or requests relating to this policy or your personal data, please contact us: