1. Data Controller

Valenvia ("we", "us", "our") is the data controller responsible for the personal data collected through this website (www.valenvia.com). We are an independent insurance comparison service for expats living or relocating across Europe.

We are committed to protecting your personal data and processing it in accordance with the EU General Data Protection Regulation (GDPR) and applicable national data protection laws.

2. What We Collect

Information you provide directly

When you submit an enquiry or use our comparison form, we may collect:

• Name and email address
• Country of residence and nationality
• Information about your insurance needs (coverage type, budget, family situation)
• Visa or residency status (where you choose to provide it)
• Any additional information you include in your message

Information collected automatically

When you visit our website, we and our third-party analytics partners collect certain technical data, including:

• IP address and approximate location (country or city level)
• Browser type and operating system
• Pages visited, time on page, and navigation behaviour
• Referring URL and search terms (where available)
• Device type (desktop, mobile, tablet)

This data is collected through cookies and similar technologies. See Section 9 for more detail.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• To respond to your enquiry and provide you with insurance comparison information relevant to your situation
• To follow up if you have not received a response or requested further information
• To pass your details to relevant insurance providers with your explicit consent, where you have indicated you wish to receive a quote
• To improve our website by understanding how visitors use it, which pages are most useful, and where the experience can be improved
• To send educational content about expat insurance, if you have opted in to receive it
• To comply with legal and regulatory obligations applicable to insurance distribution in the EU

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR Article 6:

• Consent (Art. 6(1)(a)): Where you have actively submitted a form, opted in to communications, or accepted cookies that enable analytics or personalisation.
• Legitimate interests (Art. 6(1)(f)): For analytics, website improvement, and fraud prevention, where our interests do not override your fundamental rights and freedoms.
• Performance of a contract (Art. 6(1)(b)): Where processing is necessary to respond to your request for insurance comparison services.
• Legal obligation (Art. 6(1)(c)): Where we are required to retain or process data to comply with EU or national law, including Insurance Distribution Directive (IDD) requirements.

5. Third Parties We Share Data With

We use the following third-party services on this website. Each acts as a data processor under an appropriate agreement:

Web3Forms

Our enquiry form is processed by Web3Forms (web3forms.com). When you submit a form, your data is transmitted via their API to our email inbox. Web3Forms does not store your form submissions beyond the transmission period. Their privacy policy is available at web3forms.com/privacy.

Google Analytics 4

We use Google Analytics 4 (Google LLC, USA) to understand how visitors use our site. This service collects anonymised usage data via cookies. Google may transfer data to the USA under the EU-US Data Privacy Framework. You can opt out via Google's opt-out browser add-on. Google's privacy policy is at policies.google.com/privacy.

Microsoft Clarity

We use Microsoft Clarity (Microsoft Corporation, USA) to record anonymised session data including mouse movements, clicks, and scroll behaviour. This helps us understand how to improve the user experience. Clarity does not capture personal information such as passwords or payment details. Microsoft's privacy statement is at privacy.microsoft.com.

Botpress

Our website chat assistant is powered by Botpress (botpress.com). If you interact with the chatbot, messages you send are processed by Botpress infrastructure. We recommend not sharing sensitive personal data (such as health details or financial information) via the chat widget. Botpress's privacy policy is available at botpress.com/privacy.

Insurance providers

If you request a quote or proceed to apply for a policy, we may share your information with one or more of our partner insurance providers (Cigna Global, AXA International, Allianz Care, April International, SafetyWing, Foyer Global Health). We will always obtain your consent before sharing data with a specific provider for quoting purposes.

Email marketing

Where you have opted in to receive educational emails, your email address and name may be stored with our email marketing provider. You can unsubscribe at any time using the link in any email we send.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purpose for which it was collected, subject to legal requirements:

• Enquiry and contact form data: Up to 24 months from the date of last contact, unless you have entered into an insurance arrangement through us (in which case records may be retained for up to 7 years for regulatory compliance purposes).
• Analytics data: Retained by Google Analytics for 14 months; Microsoft Clarity retains session recordings for up to 90 days.
• Email marketing: Until you unsubscribe or request deletion.

After the applicable retention period, data is deleted or anonymised.

7. Your Rights Under GDPR

If you are located in the European Economic Area or the United Kingdom, you have the following rights regarding your personal data:

• Right of access (Art. 15): Request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): Request deletion of your data where there is no compelling reason for us to continue processing it.
• Right to restriction (Art. 18): Request that we restrict processing of your data in certain circumstances.
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
• Right to object (Art. 21): Object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at hello@valenvia.com with the subject line "Data Privacy Request". We will respond within 30 days.

You also have the right to lodge a complaint with your national supervisory authority. A list of EU data protection authorities is available at edpb.europa.eu.

8. International Data Transfers

Some of our third-party processors (including Google and Microsoft) are based in the United States. Transfers of personal data to the USA are carried out under the EU-US Data Privacy Framework (adequacy decision) or, where applicable, Standard Contractual Clauses approved by the European Commission. We take reasonable steps to ensure that international transfers comply with GDPR requirements.

9. Cookies

We use cookies and similar tracking technologies to operate and improve our website. Our Cookie Policy provides a full breakdown of the cookies used, their purpose, and how to manage or disable them.

In summary, we use:

• Essential cookies: Required for the website to function (e.g., language preference).
• Analytics cookies: Google Analytics 4 and Microsoft Clarity, to understand site usage.
• Chat widget cookies: Set by Botpress when you interact with the chat assistant.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child, please contact us immediately at hello@valenvia.com and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this page periodically.

For material changes that affect how we process your data, we will notify you by email (if you have provided one) or by placing a prominent notice on our website.

12. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us: