This policy explains what personal data VXERT collects, why we collect it, how long we keep it, and what rights you have over it. We've written it in plain language rather than legal boilerplate, because a policy you can't understand protects nobody.
VXERT ("we", "us") is a digital studio providing website development, content, SEO, branding, optimization, and AI integration services.
For the purposes of the UK GDPR and EU GDPR, VXERT is the data controller for the personal data described in this policy.
If you submit our contact form, we collect the information you choose to give us:
If we've emailed you without you contacting us first, we may hold your name, business email address, business name, job role, and website address — see section 5 for details on where we got it and how to stop it.
Our hosting provider automatically processes standard technical data (such as your IP address and browser type) to serve the site and protect it from abuse. We do not run advertising trackers or analytics profiling on this website.
Our chat assistant does not collect data. The chat widget on our website is a scripted FAQ tool. It runs entirely in your browser, does not record your conversation, and does not send anything to us. If you want to reach us, it points you to our contact form.
| What we do | Why | Legal basis |
|---|---|---|
| Respond to your enquiry | To answer your question, scope your project, and send you a quote | Steps taken at your request prior to entering a contract (Art. 6(1)(b)) |
| Deliver a project | To carry out work you've hired us for | Performance of a contract (Art. 6(1)(b)) |
| Business-to-business outreach | To offer relevant services to businesses we believe we can help | Legitimate interests (Art. 6(1)(f)) |
| Keep records of enquiries | To maintain accurate business records and honour opt-outs | Legitimate interests (Art. 6(1)(f)) |
We do not sell your data, and we do not use it for automated decision-making or profiling.
We use a small number of third-party providers, who act as our data processors:
These providers may store data on servers outside your country, including in the United States. Transfers rely on the safeguards those providers have in place, such as Standard Contractual Clauses.
VXERT operates from Pakistan. If you are in the UK or EU, this means your data may be processed outside the UK/EEA. We only work with providers that offer recognised transfer safeguards, and we keep the data we hold to the minimum needed.
If you received an email from us and never gave us your details, this section is for you. UK and EU law (Art. 14) says we have to tell you exactly this:
From publicly available business sources — typically your company website, a public business listing such as Google Maps or a business directory, or a public professional profile. We do not buy contact lists, and we do not scrape private or personal accounts.
Because we looked at your website and believed we could genuinely help with something specific on it. We rely on legitimate interests, and we've carried out a documented assessment balancing our interest in offering the service against your right to be left alone.
Reply with "remove" and we will delete your details and never contact you again. We action this within 48 hours, and it's absolute — you don't need to give a reason, and we don't ask questions. You can also object at any time under Art. 21.
We keep a suppression list of everyone who has asked not to be contacted. This is the one list we keep specifically so that we never email you by accident again. It stores nothing beyond what's needed to recognise and exclude your address.
Under the UK GDPR and EU GDPR you have the right to:
To exercise any of these, email vxert.ai@gmail.com. We respond within one month, and it's free.
If you're unhappy with how we've handled your data, you can complain to your local data protection authority. In the UK that's the Information Commissioner's Office (ICO). In the EU, it's the supervisory authority in your country. We'd rather you told us first so we can fix it — but you don't have to.
This website does not set advertising or analytics cookies. We load fonts from Google Fonts, which means your browser contacts Google's servers and Google receives your IP address when the page loads.
The site is served over HTTPS. Enquiry data is held in accounts protected by strong passwords and two-factor authentication, and access is limited to people who need it to respond to you. No system is perfectly secure, but we keep the amount of data we hold deliberately small, which is the most effective protection there is.
Our services are aimed at businesses. We do not knowingly collect data from anyone under 16. If you believe we have, contact us and we'll delete it.
If we change this policy, we'll update the date at the top of the page. If the change is significant and affects people we already hold data about, we'll tell them directly.
Questions about this policy, or about the data we hold on you: