Website Privacy Policy
Last updated: 22 October 2026
This Website Privacy Policy (the “Policy”) explains how INXYTECH LTD, registration number HE 447934, with registered office at Agias Zonis, 12, Agias Zonis Court, Flat/Office 401, 3027, Limassol, Cyprus (“INXY”, “we”, “us” or “our”), processes personal data in connection with the public website available at https://www.inxy.com/ (the “Website”). For the processing described in this Policy, INXYTECH LTD acts as the data controller unless stated otherwise.
1. Scope of this Policy
This Policy applies to personal data processed when you browse the Website, use public contact or demo-request forms, interact with Website communication tools, apply for a role through the Website, subscribe to communications where available, or otherwise communicate with us in connection with the Website.
This Policy does not describe personal data processing carried out in connection with services or other product-specific activities. Those activities are governed by the relevant product, provider, contractual and privacy documentation.
2. Personal data we collect
Depending on how you use the Website, we may collect the following categories of personal data:
- Technical and usage data: IP address, browser type and version, device type, operating system, language, approximate location derived from IP address, referring page, pages viewed, timestamps, session information, interaction data, diagnostic data and security logs.
- Contact and enquiry data: name, email address, phone number, company or organisation, job title and any information you include in a message, demo request, partnership request or other communication.
- Recruitment data: name, contact details, LinkedIn profile, CV/resume, employment and education history, information provided in an application and related correspondence.
- Marketing preferences: subscription choices, communication preferences and records of consent or opt-out, where marketing communications are offered.
- Cookie and similar-technology data: identifiers and information collected by cookies, local storage, pixels and comparable technologies as described in Section 10.
You are not required to provide personal data merely to read public Website content, other than technical data that is generated automatically when your device communicates with the Website. Where a form marks information as required, we may be unable to respond to or process the relevant request if you do not provide that information.
3. How we collect personal data
Directly from you when you submit a form, contact us, apply for a role, request a demo, communicate with us or make a privacy request.
Automatically from your browser or device through server logs, cookies and similar technologies when you visit or interact with the Website.
From service providers supporting Website hosting, analytics, communications, security, recruitment or form processing, to the extent necessary for those services.
From publicly available professional or business sources where reasonably relevant to a business enquiry or recruitment process and permitted by applicable law.
4. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Operate and secure the Website | Technical data, logs, device/browser information, essential-cookie data | Legitimate interests (Art. 6(1)(f) GDPR) in operating, securing and protecting the Website; legal obligations where applicable |
| Respond to enquiries, demo requests and partnership requests | Name, email, phone, company, message and related correspondence | Steps at your request before entering into a contract (Art. 6(1)(b)) where applicable; otherwise legitimate interests (Art. 6(1)(f)) in responding to business enquiries |
| Website analytics and improvement | Usage data, cookie identifiers, interaction data | Consent (Art. 6(1)(a)) where non-essential cookies or similar technologies are used |
| Marketing communications | Contact details, business information, preferences and engagement data | Consent (Art. 6(1)(a)) where required; legitimate interests (Art. 6(1)(f)) where direct marketing is lawfully permitted without consent |
| Recruitment | Application, CV/resume and correspondence data | Steps at your request before entering into an employment or engagement contract (Art. 6(1)(b)); legitimate interests (Art. 6(1)(f)); consent where specifically requested for optional retention or future opportunities |
| Compliance, disputes and legal claims | Relevant contact, correspondence, log and other data | Legal obligations (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f)) in establishing, exercising or defending legal claims and protecting our rights |
Where we rely on legitimate interests, we consider whether the processing is necessary and proportionate and whether your interests or fundamental rights override our interests. Where processing is based on consent, you may withdraw that consent at any time without affecting processing carried out before withdrawal.
5. Marketing communications
If you ask to receive updates or marketing communications, or where applicable law otherwise permits us to send business marketing, we may use your contact details to provide information about INXY, its products, events or content. You can unsubscribe at any time using the unsubscribe mechanism in the communication or by contacting us. We may retain a minimal suppression record to ensure that your opt-out is respected.
6. Recipients and service providers
We may disclose personal data where reasonably necessary to the following categories of recipients:
- Website hosting, infrastructure, security, content-delivery and technical service providers;
- analytics and user-experience providers, including Google Analytics where this tool is enabled and you have provided any consent required for its use;
- providers of contact forms, CRM, email, communications, customer-support or scheduling tools;
- recruitment and applicant-management providers where you apply for a role;
- our personnel and group companies on a need-to-know basis;
- professional advisers such as lawyers, auditors and consultants;
- public authorities, regulators, courts or law-enforcement bodies where disclosure is required or permitted by law; and
- a buyer, investor or successor in connection with a corporate transaction, subject to appropriate safeguards.
Service providers processing personal data on our behalf are required to process it only for authorised purposes and to apply appropriate confidentiality and security measures.
7. International transfers
Some service providers or their group companies may process personal data outside the European Economic Area (“EEA”). Where personal data is transferred to a country that is not subject to an applicable European Commission adequacy decision, we use an appropriate transfer mechanism where required, such as the European Commission Standard Contractual Clauses, together with supplementary measures where appropriate. You may contact us for further information about the safeguards relevant to your personal data.
8. Retention
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, taking into account legal, contractual, security and dispute-resolution requirements. In particular:
- Website security and technical logs are retained for a limited period appropriate to security, troubleshooting and abuse-prevention needs, unless a longer period is required for investigation or legal purposes.
- Contact, demo and partnership enquiries are retained for as long as necessary to handle the enquiry and for a reasonable period afterwards to maintain business records and manage follow-up or potential claims.
- Marketing data is processed until you opt out, withdraw consent where consent is the basis, or the data is otherwise no longer required; a minimal suppression record may be retained thereafter.
- Recruitment data is retained for the duration of the relevant recruitment process and for a limited period afterwards as reasonably necessary for legal or administrative purposes, or longer where you have agreed to consideration for future roles.
- Cookie and similar-technology data is retained for the periods described in Section 10 or until you delete it or withdraw consent, where applicable.
9. Your data protection rights
Subject to the conditions and limitations in applicable law, you may have the right to:
- request access to your personal data and obtain a copy;
- request correction of inaccurate or incomplete personal data;
- request deletion of your personal data;
- request restriction of processing;
- object to processing based on legitimate interests, including an absolute right to object to direct marketing;
- receive personal data you provided to us in a structured, commonly used and machine-readable format and, where applicable, transmit it to another controller;
- withdraw consent at any time where processing is based on consent; and
- lodge a complaint with a competent supervisory authority.
For INXYTECH LTD, the lead supervisory authority is the Office of the Commissioner for Personal Data Protection in Cyprus. You may also have the right to complain to the supervisory authority in the EU/EEA country of your habitual residence, place of work or the place of an alleged infringement.
10. Cookies and similar technologies
10.1 What cookies are
Cookies are small text files or similar identifiers stored on or accessed from your device when you visit a website. We may also use local storage, pixels or comparable technologies. These technologies can be used to remember preferences, operate Website functionality, protect security, measure Website performance and understand how visitors interact with Website content.
10.2 Cookie categories and consent
We distinguish between strictly necessary technologies and optional technologies:
- Strictly necessary cookies are used where required to provide Website functionality, maintain security, remember privacy choices or perform functions specifically requested by you. They do not require consent where applicable law permits their use without consent.
- Analytics and performance cookies help us understand Website use, diagnose issues and improve content and usability. Where required by applicable law, these technologies are used only after you have given consent through the Website’s cookie banner or settings.
If advertising or similar targeting technologies are introduced, they will be subject to the consent and transparency requirements applicable to those technologies before activation.
Rejecting optional cookies will not prevent you from accessing the public Website, although some non-essential functionality or personalisation may be unavailable.
10.3 Cookies and similar technologies used on the Website
| Name | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
| _ga | Google Analytics | Analytics / performance | Distinguishes visitors for analytics | 2 years |
| _ga_<container-ID> | Google Analytics | Analytics / performance | Maintains analytics session/visitor state | 2 years |
| _cfuvid | Cloudflare | Strictly necessary | Used by Cloudflare to distinguish visitors sharing the same IP address for rate limiting and protecting the Website against malicious traffic | Session |
The exact cookies or similar technologies used on the Website may change when Website functionality or service providers change. The Website’s cookie-management interface should provide current information about optional technologies available at the time of your visit.
10.4 Managing cookies
You can accept or reject optional cookies through the Website’s cookie banner or settings where available. You may withdraw consent at any time by changing those settings. You can also configure your browser to block or delete cookies; however, browser-level blocking may affect Website functionality. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
11. Security
We implement technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. No internet transmission or storage system can be guaranteed to be completely secure, and you should take reasonable steps to protect your own devices and communications.
12. Automated decision-making
We do not use personal data collected solely through ordinary browsing of the public Website to make decisions that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR. Website analytics may involve automated measurement or segmentation of usage patterns, but not such legally or similarly significant decisions.
13. Children
The Website is intended for business and professional audiences and is not directed to children. We do not knowingly seek to collect personal data from children through the public Website.
14. Third-party links
The Website may link to third-party websites or services. This Policy does not apply to personal data processed independently by those third parties. We recommend reviewing their privacy information before providing personal data to them.
15. Changes to this Policy
We may update this Policy from time to time to reflect changes to the Website, our processing activities, service providers or applicable law. The current version will be published on the Website with an updated “Last updated” date. Where required by law, we will provide additional notice or request renewed consent.
16. Contact
To exercise your data protection rights or ask questions about this Policy, you may contact INXYTECH LTD at its registered office stated above or through the email: legal@inxy.io