Privacy Policy

Vertex Labs Ltd ("Vertex Labs", "we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website (vertex-labs.org) or engage our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

We may collect the following types of information:

Information you provide directly: name, email address, phone number, company name, job title, and the content of messages you send us via contact forms or email.

Information collected automatically: IP address, browser type, operating system, referring URLs, pages visited, and time spent on our site. This is collected via cookies and similar tracking technologies.

Information from business engagements: as part of delivering our services, we may process data you share with us including business information, system credentials, and project-related data as detailed in applicable data processing agreements.

We use the information we collect to:

(a) Respond to your enquiries and communicate about our services; (b) Deliver, manage, and improve the services we provide; (c) Send you relevant updates, newsletters, or marketing communications (where you have consented); (d) Comply with legal obligations and enforce our agreements; (e) Analyze website usage to improve user experience; and (f) Protect the security and integrity of our systems and services.

For individuals in the European Economic Area (EEA) and United Kingdom, we process personal data on the following legal bases:

Contract: processing necessary to perform a contract with you or to take steps at your request before entering into one.

Legitimate Interests: processing necessary for our legitimate business interests, such as improving our services and communicating with prospective clients, where these interests are not overridden by your rights.

Consent: where you have given clear consent to process your data for a specific purpose (e.g., marketing emails).

Legal Obligation: processing required to comply with applicable law.

Our website uses cookies and similar technologies to enhance your experience. We use:

Essential cookies: required for the website to function properly.

Analytics cookies: to understand how visitors interact with our site (e.g., PostHog). These help us improve site performance and content.

You can control cookie settings through your browser. Disabling certain cookies may affect site functionality. We do not use cookies for advertising or cross-site tracking.

We do not sell your personal information. We may share information with:

Service providers: trusted third parties who assist us in operating our website and delivering our services (e.g., analytics providers, cloud infrastructure partners), bound by confidentiality and data protection agreements.

Legal authorities: where required by law, court order, or governmental regulation.

Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We require all third parties to respect the security of your data and treat it in accordance with applicable law.

Your data may be transferred to and processed in countries outside your home country, including outside the EEA. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or equivalent mechanisms, to protect your data to the standard required under applicable data protection law.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting obligations. Client engagement data is typically retained for seven (7) years following the end of the engagement. Website enquiry data is retained for two (2) years unless you request earlier deletion. Marketing preferences are retained until you withdraw consent.

Depending on your location, you may have the following rights regarding your personal data:

Access: request a copy of the personal data we hold about you.

Rectification: request correction of inaccurate or incomplete data.

Erasure: request deletion of your personal data where we have no lawful basis for continued processing.

Restriction: request that we restrict processing of your data in certain circumstances.

Portability: receive your data in a structured, commonly used format.

Objection: object to processing based on legitimate interests or for direct marketing.

Withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at legal@vertex-labs.org. We will respond within 30 days.

We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Our website may contain links to third-party sites. We are not responsible for the privacy practices or content of those sites and encourage you to review their privacy policies before providing any personal information.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal information, we will take steps to delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised effective date. We encourage you to review this policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection contact:

Vertex Labs Ltd Email: legal@vertex-labs.org Website: vertex-labs.org

If you are located in the UK or EEA and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the United Kingdom).