Privacy Policy

This document is provided for transparency and general information. It is not legal advice. GRUVAS recommends review by qualified counsel before relying on it for compliance.

GRUVAS Information Technology Solutions LLC, doing business as GRUVAS IT Solutions (“GRUVAS,” “we,” “us”), respects your privacy. This policy explains what personal information we collect through this website, why we collect it, how we handle it, and the choices you have.

Information You Provide

You enter the following information yourself, primarily through our contact and assessment-request form:

• Name
• Business email address
• Company or organization name
• Phone number (optional)
• Company size (optional)
• Region (optional)
• Preferred language (optional)
• Engagement or service interest (optional)
• The message and any details you include about your organization and needs

Information Automatically Attached to an Inquiry

To understand the context of an inquiry, the form also attaches the following technical context, which is collected automatically rather than typed by you:

• The address (URL) of the page you submitted the form from
• The referring page or original source, where your browser provides it
• Campaign parameters in the address you arrived with (utm_source, utm_medium, utm_campaign)
• The site language you were using when you submitted the form
• Where you have accepted optional cookies, the HubSpot visitor token for your browser (the value of the hubspotutk cookie), so the inquiry can be associated with your earlier visits to this website. If you have not accepted, no token is attached.

Technical and Security Data

This website is hosted and protected by Cloudflare. As part of delivering and protecting the site, Cloudflare processes technical and security data such as your IP address, request details and device or browser information. Where the anti-spam challenge (Cloudflare Turnstile) is enabled on the contact form, Cloudflare also processes the data needed to confirm that the submission is not automated. GRUVAS does not use this infrastructure data to build profiles of visitors.

We do not sell personal information. We do not require you to create an account.

How We Use Your Information

• To respond to your inquiry and provide the information or services you request
• To prepare and discuss a potential engagement or assessment
• To maintain records of our business communications
• To keep the website available and to prevent spam and abusive submissions
• Where you consent, to measure the effectiveness of our advertising
• Where you consent, to understand website traffic and page views through HubSpot website analytics

We use your information for the purposes described above and not for unrelated purposes.

Legal Bases

Where data protection law such as the GDPR applies, we generally rely on the following legal bases: your request and our steps toward a possible contract, for handling your inquiry; our legitimate interest, for operating, securing and improving the website and keeping business records; and your consent, for advertising and measurement storage. This is a general description rather than a legal determination for your specific situation.

Service Providers and Recipients

We use a small number of service providers, and each processes only what it needs:

• Cloudflare: website hosting, delivery, security and the anti-spam challenge
• HubSpot: our customer relationship management system, which receives contact-form inquiries when the form endpoint is configured, and which also provides the website tracking code used for traffic and page-view analytics
• Google: the Google tag for Google Ads conversion measurement, governed by Google Consent Mode v2
• Microsoft 365 (Outlook): our business email

How Your Information Is Handled

• When the contact-form endpoint is configured, submissions are delivered to our CRM (HubSpot) and reach us at info@gruvas.com. When it is not configured, the form does not claim to have sent anything: it opens a pre-filled message in your email application so you can review and send it to GRUVAS yourself.
• Our business email is operated on Microsoft 365 (Outlook).
• This website is hosted on Cloudflare Pages.
• We limit access to your information to the people who need it to respond to you.

Cookies, Advertising, and Measurement

See our Cookie Policy for details. This website uses the Google tag (Google Ads, AW-18366412685) to measure conversions from the contact form, together with Google Consent Mode v2. Whether advertising and measurement cookies or identifiers are used depends on your consent choices and your region. For visitors in the EU, EEA, the United Kingdom, and Switzerland, advertising and measurement storage is denied by default until consent is given.

The site also stores small preferences in your browser: your theme choice under gruvas.theme, your site language under gruvas.lang, and your consent decision under gruvas.consent. They stay on your device and are not used to track you across other websites. You can reopen the consent dialog at any time with the Cookie Settings link in the footer.

HubSpot Website Tracking and CRM

HubSpot is the GRUVAS customer relationship management system. It receives contact-form submissions when the form endpoint is configured, and its website tracking code is installed on this website, which remains hosted externally on Cloudflare Pages. GRUVAS uses HubSpot for website traffic and page-view analytics.

Where you consent, HubSpot may use cookies and similar identifiers, including the hubspotutk cookie, to recognize your browser across visits to this website. Where you consent and then submit an inquiry, the HubSpot visitor token for your browser may be included with the submission so that your earlier activity on this website can be associated with your inquiry.

When you decline optional cookies, HubSpot analytics consent and HubSpot advertising consent are set to false and HubSpot tracking cookies are not intentionally authorized, and no visitor token is attached to an inquiry. The HubSpot tracking code may still load in a limited mode while optional consent is denied; in that state it does not have consent to set identifying analytics cookies.

The GRUVAS consent manager controls both Google and HubSpot consent. HubSpot's own separate cookie banner is disabled for this website, so the GRUVAS consent dialog is the only banner, and you can change your decision at any time with the Cookie Settings link in the footer.

Data Retention

We keep inquiry and engagement records only as long as needed for the purpose described above and to meet ordinary business and legal recordkeeping needs, after which we delete or anonymize them.

Retention is decided by criteria rather than a fixed period: whether a conversation or engagement is still active, what business and tax recordkeeping requires, and how long we may need records to handle a legal claim.

Security

The website is served over encrypted connections, access to inquiry data is limited to the people who need it, and the contact form is protected against automated submissions. No method of transmission or storage is completely secure, so we do not guarantee absolute security.

Your Rights

Depending on where you are located, you may have rights to access, correct, or request deletion of your personal information, or to object to certain processing. This can include rights under the EU/EEA General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA). To make a request, contact us at info@gruvas.com. We will respond within a reasonable time and as required by applicable law.

If you are in the EU or EEA, you also have the right to lodge a complaint with your local data protection supervisory authority.

International Visitors

GRUVAS is based in the United States. If you contact us from outside the United States, your information will be processed in the United States.

Our service providers may also process data in the United States and other countries. Where required, transfers are intended to rely on the standard safeguards those providers make available, such as the European Commission standard contractual clauses.

Children

This website is intended for business audiences and is not directed to children under 16. We do not knowingly collect information from children.

Changes

We may update this policy from time to time. The “last updated” date reflects the current version.

This is policy version 1.2.1. When a material change is published, the consent dialog is shown again so you can review your choice.

Contact

Questions about this policy: info@gruvas.com or +1 813-419-1468.