Privacy Policy
Last updated: 1 August 2026
This policy explains what personal data Virtual Support collects when you use this website or get in touch, how we use it, and the rights you have.
Virtual Support is established in France. Our processing is therefore governed primarily by the EU General Data Protection Regulation (Regulation (EU) 2016/679) and the French Loi Informatique et Libertes. Because we also offer our services to people and businesses in the United Kingdom, the UK GDPR and the Data Protection Act 2018 apply in addition where you are located in the UK. Where the two regimes differ, we apply whichever gives you the stronger protection.
This policy is maintained by Virtual Support. It is not an independent certification.
1. Who we are
Virtual Support is a sole trader business operated by Emma Dumel, registered in France as an entrepreneur individuel (auto-entrepreneur).
| Data controller | Emma Dumel, trading as Virtual Support |
| Address | Salles d'Aude, 11110, France |
| SIREN / SIRET | [SIRET NUMBER] |
| VAT | [VAT NUMBER OR EXEMPTION WORDING] |
| team@virtualsupport.world | |
| Website host | [HOST NAME AND ADDRESS] |
We are not required to appoint a Data Protection Officer and have not appointed one. All privacy questions come directly to the email address above.
2. What we collect
2.1 When you submit the contact form
- Your first and last name
- Your email address
- The platform you use (HighLevel or Systeme.io)
- The service you are interested in (Health Check, Reset, or unsure)
- Your website address, if you provide one
- The message you write
- A record of the consent statement shown to you, whether you ticked it, and the timestamp
2.2 Automatically, when you visit the site
Our hosting provider records standard server log data, including your IP address, browser type, the pages you request and the time of the request. This is generated automatically by the infrastructure and is used only to keep the site running securely.
2.3 What we do not do
We do not run third-party advertising trackers on this site. We do not buy, sell or rent contact lists. We do not profile you or make any decision about you by automated means.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and discussing the service you asked about | Article 6(1)(b) - steps taken at your request before entering into a contract |
| Keeping a record of the enquiry afterwards, so we can follow up and meet our own administrative needs | Article 6(1)(f) - our legitimate interest in running and evidencing our business, balanced against your interests |
| Keeping the consent record itself | Article 6(1)(c) - compliance with our accountability obligations |
| Sending you marketing emails or a newsletter | Article 6(1)(a) - consent, which we only ever rely on if you separately and specifically ask to receive these |
The tickbox on the contact form is a record that you were told what would happen to your details. It is not, by itself, the legal basis for replying to you - we reply because you asked us to.
Where we rely on legitimate interests, you can object at any time (see section 7) and we will stop unless we have compelling grounds to continue.
We do not send marketing emails to people who simply filled in the enquiry form.
4. Who can see it, and where it goes
| Recipient | Role | Location |
|---|---|---|
| Supabase | Database hosting for form submissions | European Union |
| [EMAIL PROVIDER NAME] | Sends the notification email to our inbox | [LOCATION] |
| [WEBSITE HOST] | Website and asset hosting, server logs | [LOCATION] |
These providers act as our processors. They may only process your data on our instructions and under a written contract.
We do not share your details with anyone else, except where we are legally required to.
International transfers
Where a provider processes data outside the EEA or the UK, we rely on the European Commission's adequacy decisions where one exists, or on Standard Contractual Clauses with supplementary measures where one does not. You can ask us for details of the safeguards in place for any specific transfer.
5. Links to other services
The quiz linked from our homepage is hosted on pretaquiz.com, a separate service. When you click through, you leave this site and any data you enter is handled under PretaQuiz's own privacy policy, not this one. We receive only the result you choose to share with us.
6. How long we keep it
| Data | Retention |
|---|---|
| Enquiry form submissions | Up to 24 months after our last contact with you, then deleted |
| Consent records | For as long as we hold the related enquiry |
| Server logs | As set by our hosting provider, typically no more than 30 days |
| Invoices, contracts and project records, if we work together | For the periods required by French commercial and tax law (generally 10 years) |
7. Your rights
You have the right to:
- Access the personal data we hold about you
- Rectify data that is inaccurate or incomplete
- Erase your data ("right to be forgotten")
- Restrict our processing
- Object to processing based on legitimate interests
- Portability - receive a copy of your data in a structured, machine-readable format
- Withdraw consent at any time, where we rely on it
- Give directives about what happens to your data after your death (Article 85, Loi Informatique et Libertes - applies to data subjects in France)
To exercise any of these, email team@virtualsupport.world. We will respond within one month. There is no charge.
If you are unhappy with how we have handled your data
Please tell us first - we would rather fix it. You also have the right to complain to a supervisory authority:
- In France or elsewhere in the EU: the Commission Nationale de l'Informatique et des Libertes (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 - cnil.fr
- In the United Kingdom: the Information Commissioner's Office (ICO) - ico.org.uk/make-a-complaint
8. Automated decision-making
We do not carry out automated decision-making or profiling that produces legal effects concerning you, or that similarly significantly affects you, within the meaning of Article 22 GDPR. Every enquiry we receive is read and answered by a person.
9. Our use of artificial intelligence
We use AI tools to help draft and structure documents and to speed up routine analysis in our own work.
- We do not use AI to make any decision about you.
- We do not put enquiry form submissions into AI tools.
- Where we use AI tools in the course of delivering work for a client, that use is disclosed to the client in advance and governed by our Data Processing Agreement, including a list of the specific tools involved. See section 10.
10. Client account data - when we act as a processor
This policy covers people who visit this website or contact us.
It is not the policy that applies when we work inside a client's system. When a client gives us access to their HighLevel or Systeme.io account, that account contains personal data belonging to the client's own contacts. In that situation:
- The client is the data controller.
- We are a processor, acting only on the client's documented instructions.
- Our handling of that data is governed by a written Data Processing Agreement under Article 28 GDPR, which we provide to every client before access is granted.
If you are a contact of one of our clients and want to know how your data is used, please contact that business directly. We will support them in responding to you.
A copy of our standard Data Processing Agreement is available on request from team@virtualsupport.world.
11. Cookies and similar technologies
This site uses only cookies and local storage that are strictly necessary for it to function. We do not set advertising or analytics cookies, and we do not use any tracker that identifies you personally.
Strictly necessary cookies are exempt from the consent requirement under Article 82 of the Loi Informatique et Libertes and the equivalent UK rules, which is why you are not shown a cookie banner. If we ever add analytics or marketing cookies, we will ask for your consent first.
12. Security
Form submissions are transmitted over HTTPS and stored in an access-controlled database. Access is restricted to those who need it in order to reply to you. Accounts used to access client systems are protected by multi-factor authentication.
13. Changes to this policy
If we make material changes we will update the date at the top of this page. Where the change materially affects how we use data you have already given us, we will tell you directly.