What we collect, and why.

Who is responsible

The controller.

Bombellii Ventures LLC, 175 Oakland Street, Wellesley Hills, MA 02481, United States. For anything on this page, including a request to see, correct or delete what we hold about you, write to info@bombellii.ventures.

What is collected

Two forms, and nothing else.

The contact form asks for your name, your email address, your organisation and your message. It also asks what your message is about, and depending on that answer it offers a few optional choices — the stage, size and timing of a round you are raising, where the impact of your work is, your country, and how you heard about us — and, for a startup, links to your website, your deck and a video. The form takes links only; it does not accept file uploads. Everything you send goes to our customer-relationship system, where it is kept so that someone can reply to you, and a copy is emailed to us so that it is read.

The newsletter signup asks for your email address, and it goes to Mailchimp, who send the newsletter on our behalf. Mailchimp is a United States company and your address is stored there. Every issue carries an unsubscribe link, and using it removes you from the list.

Reading the site collects nothing. There is no analytics, no advertising, no tracking pixel and no third-party script on any page. The site sets no cookies, so there is no cookie banner to dismiss.

Why we are allowed to

Because you asked us to.

Both forms are things you choose to submit. Under the GDPR that is consent for the newsletter, and our legitimate interest in answering you for the contact form. Neither is a condition of reading anything here.

Server records

The web server does not keep your address.

The server that publishes this site is configured to delete the visitor IP address from every access-log line before it is written. It is not truncated or anonymised afterwards; the field is dropped. Nothing about a page view is retained that could identify you.

Unwanted messages

A blocked message leaves a fingerprint, not a name.

The contact form is a target for automated advertising, and a message identified as spam is discarded instead of being stored or sent on. So that the same campaign cannot simply send it again, we keep a short fingerprint of it for ninety days: the web addresses it advertised, and a one-way hash of the sender address and of the message. The address itself is never written down, and the hash cannot be turned back into it. An address that has just sent spam is also refused for a day, held only in the server's memory and forgotten when it restarts. A message that is not spam leaves no fingerprint at all.

How long

Until it has served its purpose.

A contact message is kept while the conversation it belongs to is live, and afterwards as a record of it. A newsletter subscription is kept until you unsubscribe. Ask us to delete either and we will.

Your rights

You can ask, and we answer.

If you are in the European Union or the United Kingdom you may ask what we hold about you, ask for it to be corrected or deleted, ask us to stop using it, or ask for a copy in a portable form. Write to info@bombellii.ventures. You may also complain to your national data protection authority.

Changes

This page is the current version.

If what we collect changes, this page changes with it.