Privacy Policy
Last Updated: 30-06-2025
Company Name: iX
Website: www.ixeis.com
1. Introduction
This Privacy Policy outlines how iX (“we,” “us,” or “our”) collects, uses, discloses, and protects your personal information in compliance with applicable laws, including the California Consumer Privacy Rights Act (CPRA, amending the CCPA) and the General Data Protection Regulation (GDPR). By using our website (https://www.ixeis.com), you agree to the terms of this policy.
This policy complies with:
- The UK Data Protection Act 2018
- The EU General Data Protection Regulation (GDPR)
- California Consumer Privacy Rights Act (CPRA, amending the CCPA)
- Other applicable privacy laws
If you are located outside the UK, your data will be transferred to and processed in the UK in accordance with these laws. iX is the data controller for the personal data described in this Privacy Policy.
2. Information We Collect
A. Information You Provide
When you register, contact us, or use our services, we may collect these categories of personal data:
- A. Identifiers
- Name, email address, phone number, IP address, account usernames
- B. Professional Information
- Job title, company name, business contact details
- C. Account & Transaction Data
- Login credentials, billing information, service usage
- D. Internet & Device Data
- Browser type, operating system, pages visited, timestamps, referring URLs
- E. Communications
- Messages sent to us via email, support tickets, or contact forms
B. Automatically Collected Data
We may collect:
- Log Data: IP address, browser type, pages visited, timestamps
- Cookies & Tracking Technologies: Session/persistent cookies (see Section 5)
- Device Information: Operating system, device type
We do not use cookies to collect personally identifiable information without consent.
3. How We Use Your Information
We process your data to:
- Provide and improve our services
- Manage user accounts and access
- Communicate with you (e.g., updates, support, marketing*)
- Analyse Site usage and performance
- Prevent fraud and comply with legal obligations
- Some data may be processed using automated systems for security monitoring, fraud detection, and service optimisation.
*You may opt out of marketing emails anytime (unsubscribe link in emails or via contact form).
4. Legal Basis for Processing (GDPR Compliance)
We rely on:
- Contractual necessity (to deliver services)
- Legitimate interests (e.g., security, analytics)
- Consent (for marketing, where required)
- Legal compliance (e.g., tax/fraud laws)
5. Cookies & Tracking Technologies
We use:
- Essential cookies (necessary for Site functionality)
- Analytics cookies (e.g., Google Analytics)
- Marketing cookies (with consent)
Where required by law, we use a cookie consent banner to obtain your permission before placing non-essential cookies. You may withdraw or modify consent at any time through your browser or the cookie management tool on our website. Disabling cookies may affect Site functionality.
6. Data Sharing & Disclosure
We only share data when necessary with:
- Service Providers: Hosting, payment processors, CRM tools (under strict confidentiality)
- Legal Authorities: If required by law (e.g., subpoenas, fraud prevention)
- Business Transfers: In case of merger/sale (with opt-out rights*)
*We will notify you if the new owner’s data practices differ materially.
7. International Data Transfers
Data is stored and processed in the UK. If transferred outside the UK/EU, we use legally approved safeguards such as Standard Contractual Clauses or equivalent mechanisms.
8. Your Rights (GDPR & UK Law)
You may:
- Access, correct, or delete your data
- Withdraw consent (where applicable)
- Restrict or object to processing
- Request data portability
- Lodge complaints with a supervisory authority
- California residents also have the right to opt out of the sale or sharing of personal data and to limit the use of sensitive personal information.
To exercise these rights, contact us at: https://www.ixeis.com/contact.
9. Data Security & Retention
We implement industry-standard safeguards (encryption, access controls) to protect your data.
We implement:
- Encryption (SSL/TLS)
- Access controls
- Regular security audits
In case of a data breach, we will notify affected users and regulators within legally required timeframes, including within 72 hours where required under GDPR.
We retain personal data only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer required, it is securely deleted or anonymised.
10. Third-Party Links
Our Site may link to external websites. We are not responsible for their privacy practices. Review their policies before sharing data.
11. Children’s Privacy
We do not knowingly collect data from children under 16. Parents/guardians may contact us to remove unauthorized data.
12. Policy Updates
We may update this policy periodically. Changes will be posted here, with the “Last Updated” date revised. Material changes will be notified via email or Site banner.
13. Contact Us
For all privacy-related matters, you may contact us via:
- Web Form: https://www.ixeis.com/contact