Privacy Policy

This Privacy Policy is maintained by IX Futuris Ltd. ("IX Futuris", "we", "us") to explain how we handle personal data collected through ixfuturis.com and related product surfaces.

For the purposes of the UK GDPR and the EU GDPR, IX Futuris Ltd. is the data controller for personal data processed via this website. You can reach us at contact@ixfuturis.com.

We keep data collection minimal and collect only what we need to run the site and respond to enquiries:

• Contact form submissions. When you use the contact form we collect the name, email address, company (optional) and message you provide, along with a timestamp and a Cloudflare Turnstile verification result used to filter automated abuse.
• Analytics and technical data. When you visit the site, standard request data (IP address, user agent, referrer, pages viewed) is processed by our hosting and analytics providers to keep the site secure, measure aggregate traffic and detect abuse. Where analytics involves non-essential cookies, we ask for your consent first.
• Correspondence. If you email us directly, we retain your message and our reply so we can follow up.

We do not knowingly collect data from children under 16 and we do not sell personal data.

We process personal data for the following purposes and legal bases under Article 6 of the UK/EU GDPR:

• Responding to enquiries submitted through the contact form or by email — legitimate interests (Art. 6(1)(f)) in operating our business and answering people who contact us, or steps taken at your request prior to entering a contract (Art. 6(1)(b)).
• Operating and securing the site, including preventing spam and abuse (e.g. Turnstile checks and server logs) — legitimate interests in maintaining a secure, functional service.
• Aggregate analytics to understand which pages are useful — your consent where non-essential cookies or trackers are used (Art. 6(1)(a)).
• Complying with legal obligations we are subject to — Art. 6(1)(c).

We use a small number of strictly necessary cookies and local storage entries that are required for the site to function (for example, remembering your consent choice). Non-essential analytics or measurement cookies are only set after you give consent through the cookie banner, and you can withdraw consent at any time by clearing site data in your browser or by contacting us.

We rely on a small set of vetted providers ("processors") to run the site. Each is bound by a data processing agreement and by our instructions:

• Lovable — hosting, deployment and application backend (database, authentication and edge runtime) for ixfuturis.com.
• Resend — delivery of transactional email (contact form confirmations and internal notifications).
• Cloudflare — Turnstile bot protection on forms and network/CDN services.

Some of these providers are located outside the UK/EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with additional technical and organisational measures.

• Contact form submissions and related correspondence are retained for up to 24 months after our last meaningful interaction with you, then deleted or anonymised, unless we need to keep them longer for legal reasons.
• Server and security logs are retained for a short rolling window (typically no more than 90 days) for troubleshooting and abuse prevention.
• Aggregated analytics that no longer identify you may be retained indefinitely.

Under the UK GDPR and EU GDPR you have the right to:

• access the personal data we hold about you;
• ask us to rectify inaccurate data or complete incomplete data;
• ask us to erase your data ("right to be forgotten") where the legal basis allows;
• restrict or object to processing based on our legitimate interests;
• request portability of data you provided to us;
• withdraw any consent you have given, at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, email contact@ixfuturis.com. We aim to respond within 30 days. If you believe we have not handled your data properly, you have the right to lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner's Office (ICO); in the EU, the data protection authority in your country of residence.

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS), access controls on our backend, and least-privilege review of who can access production systems. No online service can be guaranteed 100% secure; if we ever become aware of a personal data breach that affects your rights, we will notify you and the relevant authority as required by law.

We may update this Privacy Policy from time to time to reflect changes in our services, our providers, or the law. When we make material changes, we will update the "last updated" date at the top of this page and, where appropriate, notify you through the site.

Questions, requests or complaints about this policy or your personal data can be sent to IX Futuris Ltd. at contact@ixfuturis.com.