Privacy Policy

The data controller for this Website is Pro Voice Glow Kft., registered in Hungary.

• Address: 1161 Budapest, Pálya utca 129 4/8, Hungary
• Email: [email protected]
• Website: https://www.provoiceglow.com
• Legal Notice (Impressum): https://www.provoiceglow.com/impressum

For privacy-related requests, contact us at the email above. We will respond within the time limits required by applicable law (generally within one month under GDPR).

This policy applies to personal data processed when you browse our marketing Website. It does not govern:

• Data you provide directly to third parties — for example, when you book a call through Calendly (see Section 6).
• Custom voice-automation or integration projects we deliver under separate contracts.
• Employee or vendor relationships.

The Website is a marketing site with an optional contact form. We do not offer user accounts or login areas.

We keep data collection to what is needed to operate, secure, and improve the Website.

• Technical and usage data: IP address, browser type and version, operating system, referring URL, pages viewed, date and time of access, and similar server or network log data.
• Security data: request metadata used for rate limiting, abuse prevention, and incident response (for example, repeated requests from the same IP within a short window).
• Contact form data: name, email address, phone number, optional company name, and your message when you submit the contact form.
• Communications: if you email us directly, we process the content of your message and your email address.

We do not intentionally collect special categories of personal data (such as health or biometric data) through this Website, and we do not require you to create an account to browse it.

• Automatically when you visit the Website (server logs, hosting infrastructure, and security layers).
• When you submit the contact form on this Website.
• From your device and browser when fonts or other resources are loaded from third-party providers (see Section 6).
• Directly from you if you contact us by email.

• To deliver and display the Website.
• To maintain security, prevent abuse, and protect our infrastructure.
• To respond to contact form submissions and inquiries you send us.
• To diagnose technical issues and improve reliability.
• To comply with legal obligations.

We do not use this Website for behavioural advertising, and we do not sell personal data.

We rely on trusted providers to host and deliver the Website. They may process personal data on our behalf or under their own policies:

• Railway (hosting): serves the Website and may process IP addresses and request logs in the United States.
• Cloudflare (CDN and security): may process IP addresses, request headers, and security-related signals globally to protect and accelerate the site.
• Supabase (database): stores contact form submissions securely on our behalf.
• SMTP email provider: sends internal notifications when a new contact form submission is received.
• Google Fonts (typography): when you load the site, your browser may request font files from Google; Google may receive your IP address and technical data. See Google's privacy policy at https://policies.google.com/privacy.
• Calendly (scheduling): "Book a call" links take you to Calendly, where Calendly acts as an independent controller for booking data you submit. See https://calendly.com/privacy.

We choose providers with appropriate safeguards. Where required, we use data processing agreements and standard contractual clauses for international transfers.

This Website does not set first-party analytics or advertising cookies. Our own JavaScript is limited to basic site functionality (for example, the mobile navigation menu) and does not use cookies for tracking.

Third parties may still use cookies or similar technologies:

• Cloudflare may set strictly necessary security cookies (such as bot-management cookies) to protect the Website.
• Google Fonts may involve technical requests that some regulators treat as personal data processing by Google.
• Calendly sets its own cookies only when you visit Calendly's domain, not while browsing our pages alone.

You can control cookies through your browser settings. Blocking essential security cookies may affect site availability.

Where GDPR or UK GDPR applies, we rely on the following legal bases:

• Legitimate interests (Art. 6(1)(f)): operating, securing, and improving the Website, and communicating with prospective clients — balanced against your rights.
• Contract / pre-contractual steps (Art. 6(1)(b)): responding to business inquiries you initiate.
• Legal obligation (Art. 6(1)(c)): where retention or disclosure is required by law.
• Consent (Art. 6(1)(a)): only where we explicitly ask for it (for example, non-essential cookies if we add them in the future).

We are based in the European Union. Some providers process data in the United States or other countries outside your jurisdiction. When personal data is transferred from the EEA, UK, or Switzerland to countries without an adequacy decision, we implement appropriate safeguards — typically the EU Standard Contractual Clauses and, where relevant, the UK International Data Transfer Addendum.

You may request more information about transfer mechanisms by contacting us.

• Server and security logs: generally up to 30 days, unless needed longer for security investigations or legal compliance.
• Rate-limiting data: held in memory for short periods (typically up to one minute per IP window) and not stored long term.
• Contact form submissions: kept as long as needed to respond and manage the business relationship, then deleted or anonymised unless retention is required by law.
• Email correspondence: kept as long as needed to handle your inquiry and for legitimate business or legal record-keeping, then deleted or anonymised.

If you are in the EEA, UK, or Switzerland, you may have the following rights, subject to conditions and exceptions in law:

• Access — request a copy of personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion where there is no compelling reason to continue processing.
• Restriction — ask us to limit processing in certain circumstances.
• Data portability — receive data you provided in a structured, machine-readable format where applicable.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, without affecting prior lawful processing.
• Automated decision-making — we do not use automated decisions with legal or similarly significant effects on this Website.

To exercise these rights, email [email protected]. You also have the right to lodge a complaint with a supervisory authority, including:

• Hungary: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) — https://naih.hu
• UK: Information Commissioner's Office (ICO) — https://ico.org.uk
• Your local EU/EEA data protection authority if you reside outside Hungary.

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, may grant you rights to know what personal information we collect, request deletion, and correct inaccurate information. We do not sell or share personal information for cross-context behavioural advertising as defined under California law.

Categories collected in the last 12 months on this Website may include identifiers (IP address), internet or network activity (browsing on our site), and professional information if you include it in an email to us. Sources: directly from you and automatically from your device. Purposes: as described in Sections 5 and 7. We disclose data to service providers listed in Section 6 under written contracts.

To submit a verifiable request, email [email protected] with "California Privacy Request" in the subject line. We will not discriminate against you for exercising privacy rights. You may use an authorised agent where permitted by law.

Residents of Colorado, Connecticut, Virginia, Utah, and other U.S. states with comprehensive privacy laws may have similar rights. Contact us using the same email and we will honour applicable requests.

If you are in Brazil (LGPD), Canada (PIPEDA and provincial laws), Australia, or other jurisdictions with privacy legislation, you may have rights to access, correct, or delete personal data. Contact us and we will respond according to applicable local requirements.

Where local law requires a legal representative or DPO appointment, we will update this policy accordingly. We do not currently appoint a Data Protection Officer because our Website processing is limited in scope; privacy inquiries are handled by the contact in Section 1.

The Website is directed at businesses and professionals. We do not knowingly collect personal data from anyone under 16 (or the applicable age of digital consent in your country). If you believe a child has provided us data, contact us and we will delete it.

We apply technical and organisational measures appropriate to the risk, including HTTPS, security headers, rate limiting, and restricted hosting access. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

We may update this Privacy Policy when our practices, providers, or legal requirements change. The "Last updated" date at the top reflects the latest revision. Material changes will be posted on this page. We encourage you to review it periodically.

Questions about this Privacy Policy or our data practices:

Company and provider information is published in our Legal Notice (Impressum) at /impressum.

• Pro Voice Glow Kft.
• 1161 Budapest, Pálya utca 129 4/8, Hungary
• Email: [email protected]