Data Protection Policy - Valutus

Data Protection Policy: Valutus (DBA of Daniel Aronson)

Effective Date: March 9, 2026
Last Updated: March 9, 2026

1. Scope and Accountability

This Policy describes how Valutus DBA of Daniel Aronson (doing business as Valutus), based in Montclair, New Jersey, manages personal information worldwide, including residents of the United States, Canada, the EU, Latin America, APAC, and the Middle East. We adhere to the principle of "Data Minimization," only collecting information necessary to provide professional services.

Primary Privacy Contact:
Daniel Aronson (Privacy Officer)
30 Walnut Parkway, Floor 2, Montclair, NJ 07042, United States
Email: daronson@valutus.com

2. Information We Collect

We only collect personal information you voluntarily provide. We do not collect passive identifiers like IP addresses or device IDs.

  • Identifiable Information: Name and Email Address.
  • Professional Information: Job Title (used for B2B communication and professional context, not required).
  • Optional Information: Phone Number (not required).
  • Descriptive Information: Any text you provide to describe your business request.

Children's Privacy: We do not knowingly collect or process data from individuals under 18 years of age.

3. Lawful Basis and Global Consent

  • Double Opt-In: We use a Double Opt-In process for all marketing. By clicking the confirmation link, you provide explicit, informed, and unambiguous consent.
  • B2B Context: In certain jurisdictions (e.g., Canada and Mexico), we use your job title and business contact information solely to communicate regarding your profession or employer, which may be exempt from certain privacy restrictions.
  • Right to Withdraw: You may revoke consent or unsubscribe at any time.

4. No Cookies and No Data Sales

  • No Cookies: Our website does not use cookies, tracking pixels, or behavioral tracking.
  • No Sales: We do not sell or share your personal data with third parties for monetary or other valuable consideration.

5. Third-Party Processors

We engage trusted service providers who are contractually prohibited from using your data for any other purpose.

  • Email Platforms: Alchemer and SendGrid (U.S.-based).
  • Web Hosting: WPX Hosting (U.S.-based).

6. International Data Transfers

Personal data is stored and processed on secure servers in the United States.

  • Argentina: Transfers are deemed "adequate" under the U.S.–Argentina ARTI Agreement (Feb 5, 2026).
  • EU & Brazil: Transfers are managed via Standard Contractual Clauses (SCCs) or equivalent safeguards. Note that as of 2026, the EU and Brazil recognize each other as adequate jurisdictions.
  • Global Access: We provide a level of protection consistent with PIPL (China), DPDP (India), and PDPL (Saudi Arabia) standards.

7. Data Retention and Security

  • Retention: We delete data after 24 months of inactivity or immediately upon request.
  • Security: We use Two-Factor Authentication (2FA) for internal system access and HTTPS (SSL) encryption for all web communications.

8. Your Universal Privacy Rights

Regardless of location, you may exercise rights including Access, Correction, Deletion, and Opposition (ARCO Rights). We respond to verified requests within:

  • 15 Days: Residents of New Jersey and Brazil.
  • 20 Business Days: Residents of Mexico.
  • 30 Days: EU, Canada, and Australia residents.

To exercise your rights, contact Daniel Aronson at daronson@valutus.com.