Data Handling Policy
Effective date: 1 March 2026
This Data Handling Policy explains in practical detail how Alffy (Alfinega) collects, processes, stores, and protects data. It supplements our Privacy Policy and is intended to give you clear, plain-language information about our data practices.
1. Cookies
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| alffy-cookies | Essential | Stores your cookie consent preference | Session |
| _ga | Analytics | Google Analytics — distinguishes users | 2 years |
| _ga_* | Analytics | Google Analytics — session persistence | 2 years |
We use a cookie consent banner on your first visit. Analytics cookies are only set after you click “Accept”. You can change your preference by clearing your browser cookies and revisiting the site.
2. Analytics
We use Google Analytics 4 (GA4) to understand website traffic. GA4 collects anonymised data including: pages visited, session duration, device type, browser, approximate location (country/city level), and referral source. IP addresses are anonymised and we do not enable any advertising features in GA4.
GA4 data is retained for 14 months in Google Analytics. You can opt out of Google Analytics tracking using the Google Analytics opt-out browser add-on.
3. Contact Form Data
When you submit the contact form, your name, email address, and message are sent directly to our team via encrypted email. This data is:
- →Stored in our email inbox, which is protected by 2-factor authentication
- →Not added to any marketing list without your explicit opt-in
- →Retained for up to 24 months for record-keeping purposes
- →Permanently deleted upon your written request to hello@alfinega.com
4. Client Project Data
For active client projects, we may handle business data, brand assets, photographs, customer data, and other materials shared with us to complete the project. This data is:
- →Stored on access-controlled cloud storage
- →Shared only within the Alffy team on a need-to-know basis
- →Never shared with third parties except as necessary to deliver the project
- →Retained for 3 years after project completion, then securely deleted
- →Available for client download/return upon request at any time
5. Third-Party Services
The following third-party services may process data in connection with our website:
| Service | Purpose | Data Processed |
|---|---|---|
| Google Analytics 4 | Website analytics | Anonymised usage data |
| Vercel | Website hosting | Request logs, IP addresses |
| Nodemailer / SMTP | Email delivery | Contact form submissions |
6. Security Measures
All data transmitted to and from this website is encrypted via HTTPS/TLS. Email accounts used for client communication are protected with 2-factor authentication. Project files are stored on cloud platforms with access control. We conduct periodic access reviews to ensure only current team members retain access to client data.
7. Your Data Rights
You have the right to:
- →Request a copy of any personal data we hold about you
- →Request correction of inaccurate personal data
- →Request deletion of your personal data
- →Object to the processing of your data
- →Withdraw consent for analytics cookies at any time
To exercise any of these rights, email us at hello@alfinega.com. We will respond within 30 days.