Privacy Notice
This notice explains how VALPRIA uses personal information when you use the automation assessment service or contact us about implementation support.
Last updated 15 August 2026
Who is responsible for your information?
VALPRIA
VALPRIA is operated by Aaron Anton John Jones, trading as VALPRIA, a sole trader in the United Kingdom. Aaron Anton John Jones is the data controller for the personal information described in this notice.
For privacy questions or to exercise your data protection rights, email privacy@valpria.com.
Information we collect
Assessment information
When you analyse a process, VALPRIA may record the assessment score and result categories, frequency, people involved, systems or tools, labour-cost assumptions, estimated time and financial opportunity, suggested approach, and a technical assessment identifier.
Saved assessments in your browser
If you choose to save an assessment, the saved assessment, including its process description and generated plan, is stored in your browser's local storage so you can reopen it on that device.
Implementation enquiries
If you request implementation advice or ask VALPRIA to build an automation, we collect the name, work email, company and message you provide, together with the process description, assessment answers, results and generated automation plan attached to your request.
Business and service records
If your enquiry becomes a business lead or customer relationship, we may keep records such as lead status, commercial notes, quoted value, project value and relevant correspondence.
Security and technical information
Standard technical information may be processed to operate and secure the service. Cloudflare Turnstile may process browser, device, network and interaction signals to distinguish legitimate users from automated abuse.
Why we use your information and our lawful basis
Provide, secure and improve the assessment service
We use limited assessment and technical information to run the service, understand whether it is working as intended, prevent abuse and improve VALPRIA. Our lawful basis is legitimate interests: operating, securing and improving our business service in a proportionate way.
Respond to implementation requests
When you ask for advice, a review, a quote or implementation support, we use the information needed to respond and take the steps you requested. Where the request concerns a potential service engagement, our lawful basis is contract, including steps taken at your request before entering into a contract.
Business administration and legal obligations
We may keep records where necessary for legitimate business administration, security, dispute handling or to meet legal, tax or accounting obligations. The lawful basis will be legitimate interests or legal obligation, depending on the reason for the processing.
VALPRIA does not currently use implementation-enquiry details to add people to an email marketing list. If we introduce optional marketing in future, it will be handled separately.
Service providers and sharing
We only share personal information where needed to operate the service, communicate with you, secure the website, comply with law, or protect our rights. Current service providers include:
Supabase
Database and application infrastructure used to store assessment and lead records. The primary VALPRIA database is currently hosted in the London region.
Resend
Transactional email delivery used to send VALPRIA enquiry notifications and service emails.
ImprovMX
Email forwarding for VALPRIA business addresses such as hello@valpria.com and privacy@valpria.com.
Google Gmail
Business inbox used to receive and manage VALPRIA correspondence.
Cloudflare Turnstile
Security and anti-bot protection for public enquiry forms.
We may also disclose information if required by law, to respond to a lawful request, or where reasonably necessary to establish, exercise or defend legal claims.
International transfers
Some providers operate internationally. In particular, Resend states that account data, email metadata, logs and API records are stored in the United States even when email is routed from its Ireland sending region. Where personal information is transferred outside the UK, we rely on the provider's applicable transfer mechanisms and contractual safeguards where required by data protection law.
How long we keep information
Browser-saved assessments: remain in that browser until you delete them using VALPRIA, clear the relevant browser storage, or otherwise remove the local data.
Assessment and implementation records: are normally kept for up to 24 months after the last meaningful interaction with VALPRIA.
We may keep information for longer where there is an active customer relationship or where a longer period is reasonably required for legal, accounting, tax, fraud-prevention, security or dispute-resolution purposes.
Where information is no longer needed, we aim to delete it or, where appropriate, retain only information that has been anonymised so it no longer identifies an individual.
Local storage, cookies and security technology
VALPRIA uses browser local storage when you choose to save assessments so the Saved feature works on that browser. We use Cloudflare Turnstile on enquiry forms for security and bot prevention.
We do not currently use advertising or behavioural-tracking cookies on the public VALPRIA service. If we introduce non-essential analytics, advertising or similar technologies in future, we will update this notice and provide any consent or objection controls required by law.
Automated assessment scoring
VALPRIA automatically scores the business-process information you enter to estimate automation feasibility, business value and implementation difficulty. The output is decision-support information about a business process. VALPRIA does not use this scoring to make solely automated decisions about an individual that produce legal or similarly significant effects.
Your data protection rights
Depending on the circumstances, UK data protection law may give you rights to request access to your personal information, correction of inaccurate information, deletion, restriction of processing, data portability, and information about how your data is used.
Your right to object
Where we rely on legitimate interests, you have the right to object to that processing. We will consider your objection and stop the processing unless we have a lawful reason to continue.
To exercise a right, email privacy@valpria.com. We may need to verify your identity before acting on a request.
Complaints
If you are unhappy with how VALPRIA handles your personal information, please contact us first so we can try to resolve the issue. You also have the right to complain to the UK Information Commissioner's Office (ICO).
Information Commissioner's Office →Keeping this notice up to date
We may update this Privacy Notice when VALPRIA changes how it collects or uses information, introduces new providers or features, or when legal requirements change. The latest version will be published here with its updated date.