Privacy Policy
Last updated: 13 October 2026
This policy explains how Grafica Group ("Grafica", "we", "us") collects, uses and protects information when you visit grafica.group or contact us. We try to keep data collection on grafica.group to what we need to respond to you and to run the site.
Information we collect
- Information you give us. When you submit the contact form, we collect the name, email address, company (optional) and message you provide. When you request an AI Business X-Ray, we collect your name, email address, your company's website and, if you add it, what you sell, and, later, any figures you share with us for the ROI estimate. The "Book a … call" links on our home, Agencies and Work pages open a Google Calendar booking page, on Google's site. When you follow one, your browser tells Google that you came from grafica.group. The booking page is Google's: it uses Google's own cookies and spam check, under Google's Privacy Policy and Terms of Service. If you book a call, Google receives the first name, last name and email address you enter there and the time you choose, and adds the booking to our calendar.
- Usage analytics. Our pages, except the two calculators under /demos/, load Cloudflare Web Analytics, a script that Cloudflare adds to them and that sends Cloudflare one report per page view. The report holds the page's address; the address of the page that linked you there, when your browser passes it on (for a link from another site, most browsers pass only that site's address, but the linking site can choose to pass the full page address); the names and versions of your browser and operating system; how the page loaded (timings, sizes, connection protocol and the browser's memory use); the time of the page view and whether your browser says it is on a mobile device; a key that identifies our site, the same for every visitor; and a random number made fresh for each page view, so it does not link one page view to the next. Like any request, it reaches Cloudflare from your IP address, and Cloudflare can work out your approximate location (country) from it. The script sets no cookie and stores nothing in your browser. If you have visited our blog and it has set its Google cookies (see "Cookies and tracking" below), though, your browser sends them with this report, as it does with almost all its other requests to grafica.group. Two of them, _ga and _ga_X6HGW1NMWD, are what Google Analytics uses to recognise your browser, so after a visit to the blog the report reaches Cloudflare carrying them. We do not use the copies of these cookies that reach grafica.group. Cloudflare presents the reports to us as aggregated figures, such as page views and referring sites.
- Spam protection on our forms. The contact and X-Ray pages load Cloudflare Turnstile, which checks that a person, not an automated script, is using the form. As soon as the page opens, a script loaded from Cloudflare runs the check, partly inside a frame served by Cloudflare. To make that check, it sends Cloudflare information about your browser and device; Cloudflare handles it under its Turnstile privacy terms. When you send the form, our server also passes your IP address to Cloudflare to confirm the check.
Cookies and tracking
Our pages on grafica.group set no cookies of their own, and our own code does not read any. The spam check on our forms is run by Cloudflare under its own terms (see above). Our pages on grafica.group do not use Google Analytics, Google Tag Manager or any other Google tag, and carry no advertising or social-media tracking. We do not sell your data.
Our blog, blog.grafica.group, is a separate site that uses Google Analytics and Google's advertising measurement, and loads Google Tag Manager. When you visit the blog, these can set three cookies for the whole grafica.group domain: _ga and _ga_X6HGW1NMWD (Google Analytics, about 13 months in Chrome, which use them to recognise your browser on later visits to the blog) and _gcl_au (Google's advertising measurement, about 90 days in Chrome). Outside the European Economic Area, the United Kingdom and Switzerland, the blog sets these cookies on the first page you load there, without asking you first. Google's advertising service can also set a short-lived cookie on its own domain, doubleclick.net, and the blog's host sets a short-lived Cloudflare security cookie, __cf_bm (about 30 minutes), for blog.grafica.group only, which is not sent to our pages. Because the three Google cookies are set for the whole grafica.group domain, your browser then also sends them with its requests to our pages on grafica.group. Our own code on grafica.group does not read or use them. You can delete them in your browser's settings.
How we use your information
- To respond to your enquiry and communicate with you about it.
- To arrange and hold a call you book.
- To prepare the AI Business X-Ray you request, from your company's public website, what you tell us about your business and any figures you share for the ROI estimate.
- To provide, maintain and improve our website and services.
- To meet legal or regulatory obligations where applicable.
How your information is handled
Contact-form and X-Ray submissions are sent to our inbox by Resend and stored in our business email system so we can reply. If our form's server cannot be reached, the form opens an email to us in your own mail program instead. We rely on the following service providers ("processors"), who handle data on our behalf under their own terms:
- Cloudflare — website hosting and content delivery (including a script that decodes the e-mail addresses shown on our pages), analytics that sets no cookies (Cloudflare Web Analytics) and spam protection on our forms (Cloudflare Turnstile).
- Resend — delivery of contact-form messages and X-Ray requests to us by email.
- Google Workspace — our business email, where we receive and reply to enquiries.
- Anthropic (Claude) — AI used to prepare the AI Business X-Ray from what you send us.
How long we keep it
We keep enquiry correspondence and call bookings only as long as needed to handle your request and for reasonable follow-up or record-keeping, after which it is deleted or archived. The analytics reports we see are aggregated; Cloudflare handles the underlying page-view reports under its own terms.
Your rights
Depending on where you live, you may have the right to access, correct or delete the personal information we hold about you, or to object to or restrict certain processing. To make a request, email us at [email protected] and we'll respond within a reasonable time.
Security
We use reputable providers and reasonable technical measures to protect your information. No method of transmission or storage is completely secure, but we work to safeguard the data you share with us.
Links to other sites
Our site may link to third-party sites (such as our social profiles). Their privacy practices are governed by their own policies, not this one. Our blog, blog.grafica.group, is a separate site with its own analytics; the cookies we have seen it set are described under "Cookies and tracking" above. Apart from what that section says, this policy covers grafica.group only.
Changes to this policy
We may update this policy from time to time. The "last updated" date above reflects the latest version.
Contact
Questions about this policy or your data? Email [email protected] or call +504 9960 1911.