Privacy policy

1. Information we collect

We may collect and process the following categories of personal data:

• Data you provide: Name, email address, phone number, company name, job title, and anything you include when contacting us, requesting a consultation or engaging our services.
• Automated technical data: IP address, browser type and version, time zone setting, browser plug-in types, operating system and other technology on the devices you use to access our website.
• Usage data: How you use our website, such as the pages you view, how long you spend and how far you read, buttons you click, forms you start, and how you arrived (for example from an advert). We collect this with our own analytics, without cookies: see section 8.
• Client project data: Any personal data within materials you provide so we can develop your MVP or other software, as governed by our service contracts.

2. How we use your information

We only use your personal data when the law allows us to. Our primary legal bases are:

• Legitimate interests: To run our business, improve our development and consulting services, manage our website and communicate with business clients about our offerings.
• Contractual necessity: To deliver the services you've requested, including MVP development, design and ongoing support.
• Legal obligation: To meet legal or regulatory requirements.
• Consent: For certain activities, such as non-essential cookies, we rely on your explicit consent.

3. How we share your information

We do not sell your personal data. We may share it with:

• Trusted partners: Hosting providers, analytics platforms, email services and project management tools that support our operations.
• Professional advisers: Lawyers, accountants or insurers, where necessary.
• Authorities: Only where required by law, or to protect our rights and safety.

4. International data transfers

We primarily store data within the UK or the European Economic Area (EEA). If we transfer your data outside the UK or EEA, for example to a US-based cloud service, we ensure an adequate level of protection using approved mechanisms such as the UK International Data Transfer Agreement.

5. Data security

We use appropriate technical and organisational measures, such as encryption and access controls, to protect your personal data. However, no method of internet transmission is completely secure.

6. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting or reporting requirements. Our standard retention period for client enquiry data is 24 months.

7. Your legal rights

Under UK data protection law you have the following rights:

• Right of access: To request a copy of your personal data.
• Right to rectification: To correct inaccurate or incomplete data.
• Right to erasure: To request deletion of your data.
• Right to restrict processing: To limit how we use your data.
• Right to data portability: To receive your data in a structured, machine-readable format.
• Right to object: To object to processing based on legitimate interests.

You can exercise these rights by contacting us at info@vebryx.co.uk. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO).

8. Cookies

We use cookies to make your experience smoother and to understand how our website is used. Cookies help us remember preferences, analyse usage and improve our services.

When you first visit, we ask for your consent before setting non-essential cookies, except the Meta Pixel described below, which runs on every visit. You can change your choice at any time using the “Cookie settings” link in the footer, or manage cookies in your browser settings, though some features may be affected.

Our website analytics. We measure how our website is used with our own first-party analytics, which runs on our own server. It doesn’t set cookies or store anything on your device. We record the pages you view, how long you spend on them and how far you scroll, the buttons and links you click, the forms you start or send, the website or advert that brought you here, your device type, browser and operating system, and your approximate country, which we work out from your IP address. Your IP address itself is never stored.

To count visitors without cookies, we combine your IP address and browser details with a random value that changes every day and is then deleted, so you can’t be recognised from one day to the next. If you accept analytics cookies, we also keep a random ID in your browser so we can recognise return visits. We keep this data for 400 days and use it, on the basis of our legitimate interests, to understand and improve our website and advertising. Country data is provided by DB-IP (db-ip.com).

Microsoft Clarity. If you accept analytics cookies, we also use Microsoft Clarity to see how visitors use our pages, through heatmaps and recordings of how pages are scrolled and clicked. It sets cookies and only runs after you accept analytics cookies. What you type into forms is masked and not recorded. Microsoft processes this data on our behalf; see the Microsoft Privacy Statement (privacy.microsoft.com) for details. You can withdraw consent at any time through the “Cookie settings” link in the footer.

Google Tag Manager. We use Google Tag Manager on every visit to load measurement and advertising tags, such as Google Analytics, Google Ads and other advertising platforms. Tag Manager itself doesn't set cookies, and Google's tags only run within the choices you made: analytics tags if you accepted analytics cookies, and advertising tags (which measure our campaigns and may show you our adverts elsewhere) only if you accepted marketing cookies. Google processes this data as described in its privacy policy (policies.google.com/privacy).

Meta Pixel. We use the Meta Pixel on every visit to measure how our adverts on Facebook and Instagram perform and to show our adverts to relevant people. It sets cookies and runs whether or not you accept marketing cookies, so the choices in our cookie banner don't switch it off. To stop it, you can block third-party cookies or trackers in your browser, or change your ad preferences in your Facebook or Instagram account. Meta processes this data as described in its privacy policy (facebook.com/privacy/policy).

9. Third-party links

Our website may contain links to third-party sites. This policy does not apply to those sites, so we encourage you to read their privacy policies.

10. Changes to this policy

We may update this policy periodically. The updated version will be posted on our website with a new “last updated” date.

Contact us

For any questions about this policy or our data practices, contact our data protection lead:

• Vebryx Limited: 16D Lomond Avenue, Renfrew, PA4 0PG, United Kingdom
• Company number: SC879816 (registered in Scotland)
• Email: info@vebryx.co.uk
• Phone: +44 7446 478755