Privacy Policy

Introduction

neurofluxa Ltd ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or use our services.

As the data controller, neurofluxa is responsible for ensuring your personal data is processed in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

Data We Collect

The data we collect includes personal information you provide directly to us and information collected automatically when you use our website. We collect the following types of personal data:

Information You Provide

• Contact details: name, email address, phone number, company name
• Website information when you request analysis or consultation
• Messages and enquiries submitted through our contact forms
• Communication preferences and consent settings

Information Collected Automatically

• IP address and location data
• Browser type, version, and operating system
• Pages visited, time spent on pages, and referral sources
• Device information and screen resolution
• Cookie and tracking technology data

How We Use Your Information

We use your personal data for legitimate business purposes and only with appropriate legal basis. The use of your data includes:

Service Delivery

• Responding to your enquiries and providing requested information
• Delivering conversion rate analysis and optimisation services
• Communicating about your projects and providing support
• Processing payments and managing client relationships

Website Improvement

• Analysing website usage to improve functionality and user experience
• Monitoring website performance and security
• Customising content based on your preferences

Legal and Administrative

• Complying with legal obligations and regulatory requirements
• Protecting our rights and preventing fraud
• Maintaining business records and documentation

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for marketing communications or cookies
• Contract: To perform services you have requested or to enter into a contract
• Legitimate Interests: For business operations, website analytics, and service improvement
• Legal Obligation: To comply with applicable laws and regulations

Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information in the following circumstances:

• With service providers who help us operate our business (e.g., hosting, analytics, payment processing)
• When required by law or to protect our legal rights
• With your explicit consent for specific purposes
• In connection with business transfers or mergers

All third-party service providers are required to maintain appropriate security measures and use your data only for specified purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy. Our data retention periods are:

• Contact enquiries: 3 years from last contact
• Client project data: 7 years after project completion
• Website analytics data: 26 months
• Marketing consent: Until withdrawn or 3 years of inactivity
• Legal and accounting records: As required by applicable law

After the retention period expires, we securely delete or anonymise your personal data.

Your Rights

Under GDPR and UK data protection law, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for processing at any time

To exercise any of these rights, please contact us using the information provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure hosting and backup procedures

While we strive to protect your personal data, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

International Transfers

Your personal data may be transferred to and processed in countries outside the UK and European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the European Commission
• Standard contractual clauses
• Binding corporate rules
• Certification schemes

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us so we can take appropriate action.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the updated policy on our website and updating the "last modified" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters, if you believe we have not handled your personal data appropriately.