Privacy matters.
Trust is essential.

01. Introduction

This Privacy Policy describes how VEXIQON LTD ("VEXIQON", "we", "us" or "our") processes personal data in connection with our website, business communications and the digital services we provide.

We are committed to handling personal data lawfully, fairly and transparently, in accordance with the EU General Data Protection Regulation (GDPR) and applicable Cyprus data protection legislation.

02. Data Controller

For the processing activities described in this policy, unless otherwise stated, the data controller is:

When we process personal data on behalf of a customer as part of a contracted service, the customer may act as the controller and VEXIQON may act as a processor. Such processing is governed by the applicable service agreement and, where required, a data processing agreement.

03. Information We Collect

Depending on your interaction with us, we may collect:

• Contact information: name, email address, telephone number, company name and job title.
• Business and contractual information:enquiries, project requirements, correspondence, contracts, billing details and transaction records.
• Technical information: IP address, browser type, device information, access times, requested pages and security-related server logs.
• Information you provide voluntarily:messages, attachments, feedback and other information submitted when communicating with us.

We aim to collect only the information reasonably necessary for the relevant purpose.

04. Purposes and Legal Bases

We may process personal data for the following purposes:

• Responding to enquiries: to communicate with you and respond to requests, based on legitimate interests or steps taken before entering into a contract.
• Providing services: to deliver, manage and support contracted services, based on contractual necessity or applicable legitimate interests.
• Billing and compliance: to issue invoices, maintain accounting records and meet legal obligations.
• Website and infrastructure security: to detect abuse, prevent unauthorised access and maintain reliable systems, based on legitimate interests and, where applicable, legal obligations.
• Optional analytics and marketing: where applicable, based on consent when consent is legally required.
• Legal matters: to establish, exercise or defend legal claims, where permitted by applicable law.

Where processing is based on legitimate interests, we consider the impact on individuals and their rights.

05. Contact Forms and Enquiries

If you contact us by email, telephone or through a website form, we use the information you provide to handle your enquiry, respond to you and, where relevant, discuss or provide our services.

Please avoid including sensitive personal information in general enquiries unless it is necessary and an appropriate secure channel has been agreed.

06. Cookies and Similar Technologies

Our website may use cookies or similar technologies to support essential functionality, remember preferences, maintain security or, where enabled, measure website performance and support marketing activities.

Strictly necessary technologies may be used where permitted without consent. Non-essential analytics, advertising or similar technologies will be subject to the consent requirements applicable to them.

Where consent is required, visitors should be able to accept, reject or manage optional categories before those technologies are activated, and withdraw consent later. Browser settings may also allow cookies to be restricted or deleted.

If additional cookie-based services are introduced, we will update the relevant information and consent controls.

07. Analytics and Tracking

We may introduce website analytics to understand how visitors interact with our website and improve its usability, performance and content.

Where analytics involve non-essential cookies or similar tracking technologies, they will not be activated before the legally required consent has been obtained. If analytics services are implemented, relevant provider information, processing details and retention settings will be made available through updated privacy or cookie information.

08. Service Providers

We may engage trusted third parties to support website hosting, infrastructure, communications, payment processing, accounting, security and other business operations.

Providers receive access only to the information reasonably necessary for their services and are subject to appropriate contractual and confidentiality obligations where required. We do not sell personal data.

09. International Data Transfers

Some service providers or business activities may involve processing personal data outside the European Economic Area. Where applicable, we use legally recognised transfer mechanisms and appropriate safeguards, such as adequacy decisions or the European Commission's Standard Contractual Clauses, together with any additional measures required.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including service delivery, record-keeping, legal compliance, security and the establishment or defence of legal claims.

Retention periods depend on the type of information, contractual arrangements and applicable legal requirements. When data is no longer needed, we delete, anonymise or otherwise securely dispose of it as appropriate.

11. Data Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, misuse, alteration or disclosure. Measures may include access controls, secure communications, system monitoring, updates and backups.

No internet-based system can guarantee absolute security. We regularly consider the risks associated with our processing activities and the safeguards appropriate to them.

12. Your Data Protection Rights

Subject to the conditions and limitations of applicable law, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion of personal data.
• Request restriction of processing.
• Object to certain processing, including direct marketing.
• Receive certain data in a portable format.
• Withdraw consent where processing relies on consent.
• Lodge a complaint with a supervisory authority.

To exercise your rights, contact us at security@vexiqon.com. We may need to verify your identity before responding. Withdrawal of consent does not affect processing carried out lawfully before withdrawal.

13. Marketing Communications

Where permitted by law, we may send relevant business communications or marketing information. When consent is required, we will seek it before sending such messages. You may opt out of direct marketing at any time by using the available unsubscribe method or contacting us.

14. Children's Privacy

Our corporate website and business services are not specifically directed at children. We do not knowingly seek to collect personal data from children through general business enquiries. If you believe that a child has provided personal data to us inappropriately, please contact us.

15. Automated Decision-Making

We do not currently use personal data collected through this corporate website to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

16. External Websites

Our website may contain links to third-party websites or services. Their privacy practices are governed by their own policies. We encourage you to review those policies before providing personal information.

17. Personal Data Breaches

If a personal data breach occurs, we assess the incident and take appropriate action. Where required by the GDPR, we notify the competent supervisory authority and affected individuals within the applicable legal requirements.

18. Complaints and Supervisory Authority

If you have concerns about our handling of personal data, please contact us so that we can investigate and respond.

You also have the right to lodge a complaint with a competent data protection supervisory authority. In Cyprus, the relevant authority is the Office of the Commissioner for Personal Data Protection.

19. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, technologies, processing activities or legal obligations. The latest version will be published on this page with its updated effective date.

20. Contact Us

For privacy-related questions, requests or concerns, please contact VEXIQON LTD at security@vexiqon.com, or write to Gladstonos 16, 8046 Paphos, Cyprus.