Privacy policy

This policy explains how Detix Group handles personal information on this website — the company site you are reading now — and how we handle the enquiries people send us through it.

It does not cover our products. Each Detix Group product has its own terms and privacy policy governing the data a team puts into it, and Delivery Assessment engagements are governed by a separate written agreement with its own confidentiality terms. Where one of those documents applies, it governs that data instead of this one.

Enquiries. When you submit the contact form, your message goes to our server, which passes it to us as an email. What we receive is what you wrote: your name, your email address, the message itself, and anything else you chose to include.

Server logs. The application serving this site records only the request method, the path, and how long the response took. The managed infrastructure in front of it keeps its own access logs, which normally include your IP address and browser user agent. These logs exist to keep the site running and to investigate abuse.

Bot protection. The contact form is protected by Cloudflare Turnstile, which runs invisibly — there is no checkbox and no puzzle to solve. To tell people from automated software, Turnstile evaluates signals from your browser and device, including your IP address, and tells us only whether the check passed. Cloudflare processes this data as described in the Cloudflare Turnstile Privacy Addendum, and does not use it to serve advertising or to track you across sites.

No trackers. Beyond the bot check above, this site loads no third-party analytics and no advertising scripts, sets no advertising cookies, and builds no profile of you. The one thing it stores in your browser is your light or dark theme preference, which stays on your device.

We use your enquiry to reply to it, to pass it to the right person here, and to keep a record of the exchange. We use server logs to operate the site, diagnose faults, and protect it from abuse.

We do not sell personal information, and contacting us does not put you on a mailing list. If we ever want to send you something you did not ask for, we will ask first.

Where the GDPR or UK GDPR applies, we rely on legitimate interests to answer business enquiries and keep this site secure. There is nothing here to opt in to — no newsletter and no mailing list — so we do not rely on consent. If we ever add one, this section will say so.

Where an enquiry turns into a discussion about working together, we rely on the performance of a contract, or on steps taken at your request before one exists.

We use a small number of service providers to run this site and our email — hosting, domain, and mail infrastructure, and Cloudflare for the bot check on the contact form. They process personal information only on our instructions and under contract, and may not use it for their own purposes.

We share enquiries with no one else, other than where the law requires disclosure or where we need to protect our rights, our people, or our systems.

We keep an enquiry for as long as it takes to deal with it, and for a reasonable period afterwards so we have a record of the conversation. Application logs are short-lived; where our hosting provider keeps access logs, its retention period applies to those.

Ask us to delete what you sent and we will, unless we are legally required to keep it.

We and our providers may process this information in countries other than the one you wrote from, including outside the European Economic Area. Where the GDPR applies, we make those transfers under an approved safeguard, such as the standard contractual clauses or an adequacy decision.

Depending on where you live, you may have the right to ask for a copy of the personal information we hold about you, to have it corrected or deleted, to object to or restrict how we use it, to receive it in a portable form, and to withdraw consent you previously gave.

Write to us and we will act on it. If you are in the EEA or the UK, you may also complain to your local data protection authority.

This site is written for engineering teams and the people who buy software for them. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has sent us something, tell us and we will delete it.

We may update this policy as the site or the providers behind it change. When we do, we will revise the effective date above, and for a material change we will say so more prominently.

Detix Group is responsible for the information described here. For a question about this policy, or a request about your data, write to hello@detix.group.