1. Introduction

This Privacy Policy explains how DeFinityX (UK) Limited ("DeFinityX", "we", "our", or "us") collects, uses, and protects personal data when you visit our website or contact us.

DeFinityX (UK) Limited is a company registered in England and Wales and acts as the data controller for the purposes of applicable data protection law.

We are committed to protecting your personal data and handling it in accordance with UK data protection legislation, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Full name
• Email address
• Telephone number
• Company name (if provided)
• Any information voluntarily included in correspondence or contact forms

We do not intentionally collect sensitive personal data through our website.

3. How We Collect Data

We collect personal data when you:

• Submit a contact form
• Communicate with us via email
• Engage with us directly through the website

We do not collect personal data automatically unless you voluntarily provide it.

4. Purpose of Processing

We process personal data for the following purposes:

• Responding to enquiries
• Communicating regarding potential commercial engagement
• Managing business relationships
• Maintaining internal records
• Ensuring website security and integrity

We do not sell personal data to third parties.

5. Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

• Legitimate interests (responding to enquiries and managing business communications)
• Consent (where you voluntarily provide information)
• Compliance with legal obligations (where applicable)

Our legitimate interest is limited to responding to professional enquiries and maintaining structured commercial engagement.

6. Data Retention

We retain personal data only for as long as necessary to:

• Respond to enquiries
• Maintain relevant business records
• Comply with legal or regulatory obligations

Data that is no longer required will be securely deleted or anonymised.

7. Data Sharing

We do not share personal data with third parties except:

• Where required by law
• Where necessary to respond to your enquiry
• Where professional advisers or service providers assist in operating our business

Any third-party service providers are required to maintain appropriate confidentiality and security standards.

8. International Transfers

As a UK-based company, personal data is primarily processed within the United Kingdom.

If personal data is transferred outside the UK, appropriate safeguards will be implemented in accordance with applicable data protection laws.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against:

• Unauthorised access
• Loss or misuse
• Disclosure or alteration

However, no internet-based system can be guaranteed as completely secure.

10. Your Rights

Under UK GDPR, you have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request erasure (where applicable)
• Request restriction of processing
• Object to processing
• Lodge a complaint with the Information Commissioner's Office (ICO)

Requests may be made by contacting us directly.

11. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact: legal@definityxgroup.com

12. Amendments

This Privacy Policy may be updated from time to time. The latest version will always be available on this website.