Privacy Policy

§1 General Provisions

1. This Privacy Policy (hereinafter: "Policy") explains how personal data is handled and how cookies are used on the website https://smartxtechnologies.com (hereinafter: "Website"), operated by Smartx Technologies Ltd, registered in England and Wales with its office located at 167-169 Great Portland Street, 5th Floor, London, W1W 5PF, Company Number: 12964587, VAT Number: GB440116444 (hereinafter: "Service Provider").
2. The Service Provider is the controller of the personal data sent through the Website, within the meaning of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
3. The Website is an informational site. It requires no account or registration, and the only personal data it collects is the data a User chooses to send through the contact form, as described in §3.
4. The Privacy Policy is available free of charge on the Website, allowing users to download, retrieve and store it.

§2 Cookies

1. The Website uses cookies, which are small text files saved on the User's device when using the Website.
2. Cookies are used solely for:
   • ensuring the proper functioning of the Website,
   • analysing website traffic statistics and optimising Website performance.
3. Users can change their browser settings at any time to block cookies or to be notified when cookies are being sent to their device. Limiting the use of cookies may affect certain functions available on the Website.

§3 Personal Data and the Contact Form

1. When a User sends the contact form, the Service Provider receives the data entered in it:
   • first name and last name,
   • email address,
   • company name (optional),
   • the content of the message.
   Together with the message, the Website records the page from which the form was sent, the date and time, and the sender's IP address.
2. The data is used only to reply to the enquiry and to deal with the matter it concerns. The lawful basis is the Service Provider's legitimate interest in answering enquiries addressed to it (Article 6(1)(f) UK GDPR) and, where the enquiry concerns a quote or the Service Provider's services, taking steps at the User's request before entering into a contract (Article 6(1)(b) UK GDPR). The IP address is used to protect the form against spam and abuse (Article 6(1)(f) UK GDPR).
3. Providing the data is voluntary; however, without a valid email address the Service Provider cannot reply.
4. The message is delivered by email to the Service Provider's mailbox and is not saved in the Website's database. The data is not used for marketing, is not sold, and is not used for automated decision-making or profiling.
5. The data is available only to authorised persons acting for the Service Provider and to entities that provide the Service Provider with hosting, email and IT support services under a contract that requires them to protect the data.
6. The Website runs on servers in UK or EU data centres. Where a provider of the services named above processes the data outside the United Kingdom, the transfer takes place on the basis of UK adequacy regulations (including those covering the European Economic Area and the UK Extension to the EU–US Data Privacy Framework) or another safeguard permitted by the UK GDPR, such as the International Data Transfer Agreement.
7. The data is kept for as long as it takes to deal with the enquiry and for up to 12 months after the last contact, unless a longer period is required by law or needed to establish, exercise or defend legal claims.
8. Every User has the right to request access to their data, its rectification or erasure, the restriction of its processing and its portability, and the right to object to its processing. A request can be made through the contact form on the Website or by post to the Service Provider's office given in §1. The Service Provider replies within one month.
9. Every User also has the right to lodge a complaint with the Information Commissioner's Office (ICO): https://ico.org.uk, helpline 0303 123 1113.

§4 Security

1. The Service Provider applies appropriate technical and organisational measures to protect against unauthorised access to, or loss, damage or destruction of, any data handled through the Website, including contact form messages and cookie-related information.
2. Data processing complies with the data minimisation principle, with access limited solely to authorised individuals. The connection to the Website is encrypted (HTTPS).

§5 Changes to the Privacy Policy

1. The Policy may be changed at any time, and Users will be notified of such changes by the publication of a new version on the Website.
2. Changes to the Policy are effective from the date of their publication.
3. This version of the Policy is effective from 19 September 2026.