Data Governance
Privacy as
infrastructure.
How Vertexium Digital collects, processes, and governs data across its operational infrastructure and client engagement channels.
Effective: January 1, 2025 · Last updated: May 2025
Data Collection
We collect data across three distinct surface areas: operational telemetry from platform interactions (page events, session depth, scroll behavior, and navigation patterns); contact and inquiry data submitted through our forms and scheduling systems; and technical identifiers required for infrastructure operation (IP addresses, browser type, device class, and referral source).
All collection is first-party. We do not purchase behavioral data, operate data broker relationships, or participate in advertising data exchanges. Data gathered from platform interaction is used solely to improve service delivery and conversion infrastructure performance — not to build addressable audiences.
Analytics Systems
Vertexium Digital operates PostHog for product analytics. PostHog is deployed with EU data residency options applied where required by applicable law. Session data is retained for a maximum of 24 months, after which it is automatically purged from active systems.
We do not use Google Analytics. Session recordings and behavioral data are not shared with advertising platforms, marketing exchanges, or third-party data aggregators. You can opt out of PostHog analytics tracking by enabling the "Do Not Track" browser setting or by contacting us directly.
Operational Telemetry
Core Web Vitals measurements, LCP/CLS/INP telemetry, and deployment health signals are collected for platform monitoring and performance optimization. This data is aggregated and anonymized — it is not associated with individual user profiles and cannot be used to identify specific individuals.
Error telemetry is captured via structured logging pipelines to support system reliability and incident response. Operational logs are retained for 30 days and are permanently deleted on a rolling basis. This data is never used for behavioral profiling or marketing segmentation.
Cookies
We use strictly necessary cookies for session continuity and platform operation. Analytics cookies are set only where consent has been established in jurisdictions requiring explicit opt-in (including EEA and UK jurisdictions under GDPR).
We do not use third-party advertising cookies, retargeting pixels, or cross-site tracking mechanisms. You may configure browser cookie preferences at any time through your browser settings. Disabling analytics cookies does not affect site functionality, content accessibility, or the ability to submit contact forms.
Contact Submissions
Information submitted via contact forms, strategy call bookings, website audit requests, and email inquiries is used exclusively to respond to your inquiry and scope potential engagements. This data is stored in our CRM infrastructure (HubSpot) and subject to their data processing agreements, which are available at hubspot.com/legal.
We do not sell, rent, share, or transfer contact submission data to third parties outside of direct service delivery. Contact records are retained for the duration of an active or prospective engagement and for up to 3 years following the close of an engagement for record-keeping purposes.
Infrastructure Providers
Vertexium Digital operates on the following infrastructure providers. Each is governed by separate data processing agreements and is responsible for their own data handling practices within those agreements.
Vercel — deployment infrastructure and edge network. HubSpot — CRM and contact management. PostHog — product analytics and session telemetry. Resend — transactional email delivery. Each provider operates under GDPR-compliant data processing agreements where applicable. Provider-level data governance documentation is available upon request.
User Rights
Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; request correction of inaccurate or incomplete data; request deletion of your data (subject to legitimate retention obligations); object to specific processing activities; and request data portability in a machine-readable format.
To exercise any of these rights, contact us at privacy@vertexiumdigital.com or via the contact form at vertexiumdigital.com/contact. We will respond within 30 days of receiving a verifiable request. Identity verification may be required for data access or deletion requests to protect against unauthorized disclosure.
Questions about data governance or this policy?