Privacy policy
Last updated: 23 October 2026
This policy explains how Optimizative Technologies LLC ("Optimizative", "we", "us") handles personal data when you visit this website, contact us, or become our customer. It is written to meet the EU General Data Protection Regulation (GDPR) and, where relevant, United States privacy laws.
1. Who is responsible
The controller of your personal data is Optimizative Technologies LLC, 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, United States. Contact: privacy@optimizative.com.
Because we offer services to people and businesses in the European Union, the GDPR applies to us (Article 3(2)).
When we act for our customers
When we host a customer's website or run a service for them, the personal data of that customer's visitors and users is processed on the customer's instructions. In that case the customer is the controller and we are the processor. Our Data processing agreement governs that processing, and questions about it should go to the customer first.
2. What data we process, and why
2.1 Visiting this website
This website does not use advertising or tracking tools and does not set cookies of its own, except one that remembers the design you chose if you click the link at the bottom of a page. We measure how the website is used in aggregate form only: pages opened, clicks on pages and buttons (where on the page, not what you type), how far pages are scrolled, time on page, whether a contact form was sent (never its content), and, added by our server, the country, the device type (phone, tablet or computer) and the website you came from (its domain only). Each event is recorded on its own, without your IP address, browser identifier, cookies or any other identifier, so it cannot be linked to you or to your other visits. We do this on the basis of our legitimate interest in improving the website (Article 6(1)(f) GDPR); if your browser sends a Global Privacy Control or Do Not Track signal, nothing is measured. These records are kept for up to three months by Cloudflare, our hosting provider, and as daily totals afterwards. To decide which of two designs of the website to show you, our server uses your IP address and browser type at each page load, on the basis of our legitimate interest in improving the website, and does not store them. See the Cookie policy.
When you load a page, our hosting provider Cloudflare, Inc. processes technical data needed to deliver it and protect it from attacks: your IP address, the date and time, the page requested, your browser's user agent, and the Cloudflare data centre that served you. A small script on the page asks our own server which Cloudflare data centre delivered the page, to display it to you; this information is not stored and not sent to anyone else.
Legal basis: our legitimate interest in delivering a secure and working website (Article 6(1)(f) GDPR).
2.2 Contacting us
If you email us or use a contact form, we process your name, email address, company name, and whatever you write to us, to answer your request.
Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b)), or our legitimate interest in answering business enquiries (Article 6(1)(f)).
2.3 Customers
If you buy a service from us, we process contact details of the people we work with, account and login data, order and billing data, payment status (we do not store full card numbers), support communications, and technical logs of the services we run for you.
Legal basis: performance of the contract (Article 6(1)(b)) and compliance with tax and accounting obligations (Article 6(1)(c)).
2.4 What we do not do
- We do not sell personal data, and we do not share it for cross-context behavioural advertising.
- We do not use your data for automated decisions that have legal or similarly significant effects on you.
- We do not use our customers' data to train artificial intelligence models.
3. Who receives the data
We share personal data only with service providers that process it on our behalf under a contract, listed on our Sub-processors page, and with authorities when the law requires it. Our main provider is Cloudflare, Inc., which hosts this website and our services. Messages sent through the contact forms on this website are delivered by email to our mailbox at Google LLC (Gmail), in the United States.
4. Where the data is stored, and transfers outside the EU
We are a United States company and our hosting provider, Cloudflare, Inc., is a United States company with a global network. Web pages are delivered from Cloudflare data centres around the world, close to the visitor.
For data our services store, such as databases and uploaded files, customers choose the location: European Union or United States. That choice is applied when the storage is created and is not changed afterwards.
When personal data from the EU is transferred to the United States, we rely on the standard contractual clauses adopted by the European Commission. Cloudflare relies on the Data Privacy Framework and on the European Commission's standard contractual clauses, as described in its own data processing addendum.
5. How long we keep data
- Enquiries that do not lead to a contract: 24 months after the last contact.
- Customer and billing records: for the duration of the contract and then for the period required by tax and accounting law.
- Technical logs kept by Cloudflare: according to Cloudflare's own retention periods.
6. Your rights
Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you can withdraw consent at any time. To exercise these rights, write to privacy@optimizative.com. We will answer within one month.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work. In Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it).
7. United States residents
We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act and similar state laws, and we do not process sensitive personal information to infer characteristics about you. If you are a resident of a US state with a consumer privacy law, you can ask us what personal information we hold about you and ask us to delete or correct it by writing to privacy@optimizative.com. We will not discriminate against you for exercising these rights.
8. Security
We protect personal data with encryption in transit (HTTPS), access control limited to the people who need it, and the security measures of our hosting provider. No system is perfectly secure; if a breach affects your data we will inform you and the authorities as required by law.
9. Children
Our services are intended for businesses and are not directed at children under 16. We do not knowingly collect their data.
10. Changes
We may update this policy. The date at the top shows the latest version. If a change is significant, we will inform our customers by email before it applies.