Privacy notice

Who we are

This website is operated by CyberFoxX. For the purposes of UK data protection law, the data controller is [Founder to confirm] CyberFoxX Limited (confirm controller entity), company number and registered office. If you are in the United States, CyberFoxX LLC may also handle your inquiry.

Contact for privacy questions: [Founder to confirm] privacy contact email. ICO registration reference: [Founder to confirm] ICO data protection fee reference, if applicable.

What we collect

When you send the contact form

• Your name, email address, country, inquiry type and message.
• Your organisation, if you choose to give it.
• Confirmation that you have read this notice.

Please don't include health information, diagnoses or details that identify a child. If you do, we will only use them to reply and will delete them as soon as they are no longer needed.

When you visit any page

• Like all websites, our server receives technical information needed to deliver pages, such as your IP address, browser type and the page requested. Our hosting provider may keep this in short-term server logs for security and troubleshooting.
• To prevent abuse of the contact form, we keep a one-way hashed version of your IP address in temporary memory for up to 10 minutes. It is not written to disk or used for anything else.

We do not use analytics, advertising trackers, social media pixels or non-essential cookies. See our cookie notice.

Why we use it and our lawful basis

• To reply to your inquiry and continue any conversation you start: our legitimate interests in responding to people who contact us, or taking steps at your request before entering into a contract.
• To keep the website secure and prevent spam and abuse: our legitimate interests in protecting our systems.

We never sell your information, use it for advertising, or put it into AI models or external AI services. We do not make automated decisions about you.

Who we share it with

• Our email delivery provider, which transmits form messages to our inbox: [Founder to confirm] name of SMTP/email provider.
• Our website hosting provider: [Founder to confirm] hosting provider (e.g. self-hosted in the UK, or Vercel).
• Professional advisers or authorities where required by law.

International transfers

Because CyberFoxX operates in the UK and the US, and some service providers may be based outside the UK, your information may be transferred internationally. Where this happens we will use appropriate safeguards recognised under UK law. [Founder to confirm] Confirm providers and transfer mechanism (e.g. UK IDTA / UK Extension to the EU-US Data Privacy Framework)

How long we keep it

We keep inquiry emails for [Founder to confirm] retention period, e.g. 24 months after our last contact, unless the conversation leads to a working relationship, in which case we keep what is needed for that relationship and legal obligations.

Your rights

You have the right to access, correct or delete your personal information, to restrict or object to how we use it, and to data portability. To exercise these rights, contact us using the details above. We will respond within one month.

You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to resolve your concern first.

Children

This website is intended for adults. It is not designed for children, and we do not knowingly collect information from children through it.

Future products

This notice covers this marketing website only. Any future CyberFoxX product, including the Tavian research platform, would have its own privacy information, consent processes and safeguards, with particular care for children and families.

Changes

We will update this notice if our practices change, for example if we ever introduce analytics, and will update the date on this page.