Privacy Policy for Simplyxity

1. Introduction

Welcome to Simplyxity ("we," "our," or "us"). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (simplyxity.com), use our SaaS applications, or submit your business ideas to us.

2. Data Controller

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Data Controller is Simplyxity. We are registered with the UK Information Commissioner's Office (ICO).

• Company Name: Simplyxity Ltd
• Company Number: 16938823 (registered in England & Wales)
• Registered Address: Office 16349 182-184 High Street North, East Ham, London, England, E6 2JA
• Contact Email: privacy@simplyxity.com

3. Information We Collect

We may collect and process the following types of personal information:

• Identity & Contact Data: Name, email address, phone number, and company name when you use our contact forms or register for an account.
• Project & Requirement Data: Business ideas, project requirements, and related details you share with us through our contact form or, where offered, our idea-analysis intake tools.
• Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and platform.
• Usage Data: Information about how you use our website, products, and services.

4. How We Use Your Information

We use your personal data to:

• Provide, operate, and maintain our website and SaaS products.
• Assess your project requirements to scope, quote, and deliver work accurately – including tech stack recommendations where our analysis tools are used.
• Communicate with you regarding your inquiries, support requests, or project estimates.
• Improve our services, UI/UX, and internal algorithms.
• Ensure the security of our infrastructure and prevent fraud.

5. Lawful Basis for Processing

Under the UK GDPR, we rely on the following lawful bases to process your data:

• Consent: When you explicitly provide us with your details to be contacted.
• Contractual Obligation: When processing is necessary to deliver our SaaS services to you.
• Legitimate Interests: For running our business securely, improving our products, and analysing site traffic.

6. Business Outreach Using Public Register Information

Separately from the services described above, we contact UK businesses that we have identified from the public Companies House register, to offer web development services. If you have received a letter from us that you did not ask for, this section explains it.

• Where the information comes from: The public Companies House register only. We take the company name, company number, registered office address, incorporation date, company status and business classification. We do not buy, rent or append contact data from anyone, and we do not look up or store directors' personal details such as names, dates of birth, service addresses or PSC records.
• Why we contact you: Your company was recently incorporated in a trade we work with, and we could not find a website for it. We may also introduce you to a client of ours who provides that service.
• Our lawful basis: Legitimate interests – ours, and those of any client we may introduce you to. We have carried out and documented a Legitimate Interests Assessment, and you can ask us for it at privacy@simplyxity.com.
• How we contact you: By post, to the registered office address published on the register, addressed to "The Directors" rather than to a named person. We do not make marketing calls or send marketing emails to businesses sourced this way.
• How long we keep it: 12 months if you do not respond, and 2 years from our last contact if you do.
• If we introduce you to a client: That client becomes responsible for your information separately from us, as an independent controller, and will tell you how they use it.

7. Data Security and Third-Party Hosting

We take your data security seriously. Your information is strictly confidential and will never be sold to third parties. We use enterprise-grade infrastructure to protect your data, including:

• Google Cloud: Our applications and databases are hosted securely on Google Cloud Infrastructure.
• Cloudflare: We utilize Cloudflare for secure DNS, Zero Trust network access, and DDoS protection to ensure malicious traffic cannot access your data.

8. Analytics and Third-Party Tools

We use Umami, a privacy-first web analytics service, to understand how visitors use our website in aggregate – for example, which pages are viewed and which buttons are clicked. Umami does not use cookies, does not collect personal data, does not use persistent identifiers, and does not track you across other websites. We rely on our legitimate interest in understanding and improving our website as the lawful basis for this measurement.

Our contact form is protected by Cloudflare Turnstile, a security service that distinguishes real visitors from automated bots. Form submissions are processed by SimplyForms, our own form platform, and stored securely.

Our website may offer a WhatsApp contact button. This is a simple link that opens WhatsApp on your device – it sets no cookies and shares no data with us until you choose to send us a message. If you do contact us this way, your message and phone number are handled by WhatsApp (Meta Platforms) under their own terms and privacy policy, as well as by us in order to respond to your enquiry.

For full details on the (strictly necessary) cookies that may be set, please see our Cookie Policy.

9. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including the purposes of satisfying any legal, accounting, or reporting requirements.

For information taken from the public Companies House register for business outreach, the specific periods are set out in section 6: 12 months if you do not respond, 2 years from our last contact if you do, and an indefinite record of any objection so that we do not contact you again.

10. Your Data Protection Rights

Under UK data protection laws, you have rights including:

• The right to access: You can request copies of your personal information.
• The right to rectification: You can ask us to correct inaccurate or incomplete data.
• The right to erasure: You can ask us to delete your personal information in certain circumstances.
• The right to restrict processing: You can ask us to limit how we use your data.
• The right to data portability: You can request that we transfer your data to another organisation or directly to you.

If you wish to exercise any of these rights, please contact us at privacy@simplyxity.com.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the version number and "Last Updated" date at the top. Previous versions are available on request from privacy@simplyxity.com.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

• Email: privacy@simplyxity.com
• Company: Simplyxity Ltd
• Address: Office 16349 182-184 High Street North, East Ham, London, England, E6 2JA