01Scope and controller
Virgo Imagination is a brand personally operated by an individual. It is not a registered Swedish company.
The data controller for personal data processed for this website is the individual operating the Virgo Imagination brand, who can be contacted at venusvjverma@gmail.com. In this notice, "we" and "us" refer to that individual operator.
For the terms of use of this website, see the Terms & Conditions.
02Information involved
Browsing. When you visit the website, your browser may expose technical information to the hosting provider and to the providers of external resources the page loads. This may include your IP address, request timestamps, browser and device information, the URLs requested and, if your browser sends it, the referring page. We have not confirmed that every one of these fields is actually collected or stored by each provider.
No contact form. The website has no contact form. The CONTACT US button is an email (mailto) link that opens the email application on your device. Clicking it does not, on its own, submit anything through the website.
Email. If you choose to send an email, the recipient receives your name and email address as set in your email account, your message, any attachments and ordinary email metadata.
Anything you send is supplied voluntarily. Please include only the details needed for us to respond, and do not send sensitive personal data unless we have asked for it.
03Purposes and legal bases
Where the EU General Data Protection Regulation (GDPR) applies, we rely on the following legal bases, and only where each is genuinely applicable:
- General inquiries and correspondence — our legitimate interests in communicating with people and managing the brand (Art. 6(1)(f)), subject to a balancing against your rights and interests.
- Pre-contractual requests — taking steps at your request before entering into a contract (Art. 6(1)(b)), only where the processing is genuinely necessary for steps you have asked us to take towards a contract.
- Operating, securing and troubleshooting the website — legitimate interests (Art. 6(1)(f)), only where the processing is necessary and the balance of interests supports it.
- Legal obligations — compliance with a legal obligation (Art. 6(1)(c)), only if such an obligation is actually imposed on us.
- Consent (Art. 6(1)(a)) — only if a particular optional use expressly asks for your valid consent. Where we rely on consent, you can withdraw it at any time.
Visiting the website or reading this notice does not mean you have given consent. No marketing sign-up or analytics consent flow is currently implemented on the website.
Third-party providers may process data for their own purposes on their own legal bases. Those bases are separate from ours and have not been confirmed by us.
04Cookies, storage and our own code
Based on an inspection of the current website source code, our own code contains:
- no first-party analytics;
- no advertising scripts or tracking pixels;
- no code that sets or reads cookies, and no cookie banner;
- no use of localStorage or sessionStorage;
- no embedded widgets.
The animations respond to scrolling, mouse movement and viewport size within your browser. The source code does not transmit these interactions to any analytics endpoint.
This is a source-inspection finding only. It is not a claim that no cookies are set or no data is collected anywhere.
Hosting, CDN or other third-party code injected outside our source, as well as response headers, cookies and provider logging, require separate runtime and provider verification. You can use your browser settings to manage cookies or block external resources, although this may affect how the website looks. The absence of a consent banner is not proof that consent is never legally required.
05External resources
The website currently references the following external services:
- Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — font downloads on both the homepage and the legal pages.
- jsDelivr (cdn.jsdelivr.net) — GSAP and Three.js animation code on the homepage.
- StockCake (images.stockcake.com) — portfolio images on the homepage.
- Three.js (threejs.org) — the lunar texture used in the homepage animation.
- Pexels (images.pexels.com) — referenced as a preconnect only; the current source makes no image request to Pexels.
Fetching a resource, or preconnecting to a provider, may expose your IP address and network details to that provider. Further request headers are sent only when a request actually happens, and according to your browser settings. StockCake images currently use a no-referrer policy and the lunar texture is requested with anonymous CORS, but these settings do not guarantee that no data is shared in every request.
We do not know the exact cookies, practices, retention periods or storage locations of these providers. Depending on the purpose, they may act as independent controllers. Please refer to each provider's own privacy information.
06Hosting, logs and recipients
Hosting, infrastructure and CDN providers may process technical server logs needed to deliver the website securely. The actual fields, cookies, logging settings and retention used by these providers have not been verified from the source code.
If you email us, your chosen email provider and the recipient mailbox provider (Gmail) process that correspondence. Personal data may also be shared with authorised service providers or advisers, or with public authorities, only where necessary and legally justified.
Depending on their actual role, providers may act as processors or as independent controllers. We do not claim that all of them are confirmed contracted processors, or that a data processing agreement is in place with each.
We found no code that shares data for marketing or sales purposes. This is a finding about the website source, not a guarantee covering every party.
07Retention
Retention depends on the nature of your inquiry, any necessary follow-up and, where applicable, legal obligations or disputes. We aim to keep correspondence no longer than reasonably necessary for those purposes and to delete or anonymise it when it is no longer needed. No fixed retention period or automatic deletion schedule is represented by this notice.
Provider backups, logs and mail infrastructure may follow their own schedules, which we have not verified. Contact us for information that applies to your request.
08International transfers
Providers may process data outside Sweden and the European Economic Area (EEA). The exact destinations and transfer arrangements have not been confirmed.
Where a transfer subject to the GDPR occurs under our control, it requires a valid lawful mechanism, for example an adequacy decision or standard contractual clauses with additional safeguards where needed. We do not claim that standard contractual clauses, adequacy decisions or certifications have been verified or implemented for any provider. You can ask us for any specific information available.
09Security
We seek to apply reasonable and appropriate measures based on the risks involved. No system is completely secure, and we cannot guarantee absolute security or legal compliance.
Email is not suitable for sending unsolicited, highly sensitive information.
10Your rights
Where the GDPR applies, and subject to its conditions, you may have the right to:
- receive information about, and access to, your personal data, including a copy;
- have inaccurate data rectified;
- have data erased;
- restrict processing;
- data portability, for data processed by automated means on the basis of consent or contract, where the conditions are met;
- object to processing, in particular processing based on legitimate interests;
- withdraw consent where it is relied on, without affecting the lawfulness of processing before withdrawal.
We may need to verify your identity in a proportionate way, without asking for unnecessary data. We generally respond within one month. Where permitted, this may be extended by up to two further months; if so, we will tell you, with reasons, within the first month. Lawful exceptions mean a request cannot always be fulfilled.
The website's code does not implement automated decision-making or profiling that produces legal or similarly significant effects. We cannot promise that third-party providers never profile.
11Complaints
You may contact us about a concern, but you are not required to do so first. You can lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at www.imy.se/en/complaint.
As applicable, you may also complain to the supervisory authority in the EU/EEA country of your habitual residence, your place of work or the place of the alleged infringement.
12Updates
We may update this notice to reflect changes to the website. The source-code findings described here reflect a point in time and may change. Material changes will be indicated appropriately on this page. Changes do not create any automatic consent.
13Contact
Privacy questions and rights requests can be sent to the individual operating Virgo Imagination at: