Privacy Policy

This Privacy Policy explains how Vexillum Labs ("we", "us", "our") collects, uses, shares and protects your personal data when you visit our website or contact us. We are committed to protecting your privacy and handling your data in an open and transparent manner, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Vexillum Labs is the data controller responsible for your personal data. We are a company registered in England and Wales (Company No. 13101525), with our registered office at 87 Chancery Lane, Third Floor, London WC2A 1ET, United Kingdom. If you have any questions about this policy or how we handle your data, contact us at hello@vexillumlabs.net.

2. What data we collect

When you use our contact form or reach out to us, we may collect:

• Contact details — name, email address, phone number, company and role.
• Message content — the topic of interest and any information you include in your message.
• Consent records — whether you accepted this policy and opted into commercial communications.
• Technical data — limited data such as IP address and browser information, where collected for security and analytics.

3. How we use your data

We process your personal data to:

• Respond to your enquiry and provide the services you request.
• Manage our relationship with you and your organisation.
• Send you commercial communications, only where you have given consent.
• Comply with our legal obligations and protect our legitimate interests.

4. Legal basis for processing

We rely on your consent (for handling your enquiry and for marketing communications), the performance of a contract, our legitimate interests in operating and improving our business, and compliance with legal obligations.

5. Sharing your data

We do not sell your personal data. We may share it with trusted service providers who process data on our behalf (for example, email delivery providers), always under appropriate data protection agreements and only as necessary to provide our services.

6. Data retention

We keep your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. When it is no longer needed, we securely delete or anonymise it.

7. Your rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Object to or restrict processing.
• Withdraw consent at any time.
• Data portability.
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email us at hello@vexillumlabs.net.

8. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the effective date shown above.