Who we are
CYVRIX LIMITED is a private limited company registered in England and Wales, company number 15902542, based in Neath, Wales.
We are the data controller for personal information collected through this website and the CYVRIX client portal. In this policy, "we", "us" and "our" mean CYVRIX LIMITED, trading as CYVRIX.
We are registered with the Information Commissioner's Office as a data protection fee payer, registration reference ZC075683. The registration runs to 6 January 2027 and is renewed annually.
Our Data Protection Officer can be contacted at paul.iyangbe@cyvrix.co.uk. Please use that address for any question about how your information is handled, or to exercise any of the rights set out below. You can also reach us through the contact page on this website.
The information we collect
We collect only what we need to respond to you and to run the services you have asked for. What we collect depends on how you use the site.
Enquiry and assessment forms: your name, business name, job title, email address, telephone number, and the details you choose to tell us about your organisation and its technology. Assessment forms also ask about matters such as user numbers, locations, cloud platforms and current security arrangements, so that we can respond usefully.
Quote requests: the same contact details, together with the sector, services and requirements you describe.
Newsletter subscription: your email address, the page you subscribed from, and a record that you gave consent.
Career applications: your name, contact details, the role you are applying for, and any CV or supporting document you choose to upload.
Uploaded documents are scanned before they are accepted. A file is inspected for active content, macros, embedded objects and other unsafe constructs, and is only stored if it passes. A file that fails is rejected outright and is never stored or made available to our staff. We record the file name, size, type and a checksum alongside the scan result.
Documents you send us are stored in private storage, are not published anywhere on this website, and are accessible only to the CYVRIX staff involved in recruitment.
Client portal: your name, work email address, the organisation you belong to, your role, and the support tickets, documents and service records associated with your account.
Technical information: your IP address, the pages you request, and error diagnostics. Sign-in attempts to the portal and administration areas are recorded, including whether they succeeded and the source address, so that we can detect attempts to guess credentials.
Why we use it, and our lawful basis
Responding to enquiries, quotes and assessment requests: our legitimate interest in answering people who contact us about our services, and taking steps at your request before entering into a contract.
Delivering services to clients, including the portal: performance of the contract between us and your organisation.
Newsletter and marketing email: your consent. You can withdraw it at any time using the unsubscribe link in any message, which does not affect anything sent before you withdrew it.
Security, fraud prevention and service integrity, including sign-in monitoring and rate limiting: our legitimate interest in keeping the platform and our clients' information secure.
Meeting our legal and regulatory obligations, including accounting and record-keeping: compliance with a legal obligation.
How long we keep it
Enquiry and assessment records are kept for as long as needed to respond and to manage any resulting relationship, and are then reviewed and removed when they are no longer required.
Client records are kept for the duration of the engagement and afterwards for the period required by our legal, tax and insurance obligations.
Career applications and any uploaded documents are kept for the duration of the recruitment process and for a limited period afterwards so that we can respond to follow-up questions, then deleted. You can ask us to delete your application and CV at any time.
Newsletter records are kept until you unsubscribe, after which we keep a minimal record of the withdrawal so that we do not contact you again in error.
Security and audit records, including sign-in events and administrative actions, are kept for a limited period so that incidents can be investigated, and are then removed.
Who we share it with
We do not sell personal information, and we do not share it for third-party advertising.
We use a small number of service providers who process information on our instructions: a cloud hosting and database provider that stores the website and portal data, an email delivery provider that sends transactional and subscription email, and an error-monitoring provider that records technical diagnostics when something fails. Optional website analytics run only where you have given analytics consent.
We may disclose information where we are required to do so by law, or to establish, exercise or defend legal claims.
Where your information is held
Our providers may process information outside the United Kingdom. Where that happens, we rely on the safeguards permitted under UK data protection law, such as UK adequacy regulations or the International Data Transfer Agreement or Addendum, so that your information continues to be protected.
Your rights
Under UK GDPR and the Data Protection Act 2018 you have the right to be informed about how your information is used, and to request access to a copy of it.
You may ask us to correct information that is inaccurate or incomplete, and to erase information where there is no continuing reason for us to hold it.
You may ask us to restrict how we use your information, object to processing carried out on the basis of our legitimate interests, and request that information you provided to us is transferred to another organisation where that right applies.
Where we rely on consent, you can withdraw it at any time.
To exercise any of these rights, contact our Data Protection Officer at paul.iyangbe@cyvrix.co.uk. We will respond within one month, and will tell you if we need longer because the request is complex.
Complaints
If you are unhappy with how we have handled your information, please tell us first so that we have the opportunity to put it right.
You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk or by telephone on 0303 123 1113.
Cookies
This website uses a small number of cookies. Optional cookies are not set until you choose to allow them. Our Cookie Policy explains each one and how to change your choice at any time.
Changes to this policy
This policy was last reviewed on 21 August 2026. If we change how we handle personal information we will update this page, and where the change is significant we will make that clear.