VYROX
vyrox.io | Rotterdam, The Netherlands

Last updated: 13 June 2026

1. Introduction

Vyrox ("we", "our", "us") is committed to protecting the personal data of our clients, website visitors, and contacts. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and Dutch implementing legislation (UAVG).

By using our website at vyrox.io or engaging our Services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

Vyrox
Rotterdam, The Netherlands
Website: vyrox.io

3. What Personal Data We Collect

3.1 Data You Provide Directly

We may collect the following personal data when you contact us, request a quote, or engage our Services:

• Name and job title
• Business name and address
• Email address and telephone number
• Project details, briefs, and communications
• Payment information (processed via secure third-party payment providers)

3.2 Data Collected Automatically

When you visit vyrox.io, we may automatically collect:

• IP address and browser type
• Pages visited and time spent on our website
• Referring website or source
• Device and operating system information

This data is collected using cookies and similar technologies. Please refer to our Cookie Policy (available on our website) for further details.

3.3 Third-Party Sources

We may receive data about you from third-party platforms such as LinkedIn, Google, or referral partners when you interact with our advertisements or promotional content.

4. Purposes and Legal Basis for Processing

We process personal data for the following purposes and on the following legal bases:

Service Delivery

To fulfil our contractual obligations, communicate about projects, and deliver agreed Services. Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).

Business Administration

To issue invoices, process payments, and maintain financial records. Legal basis: Legal obligation (Art. 6(1)(c) GDPR) and legitimate interests (Art. 6(1)(f) GDPR).

Marketing and Communications

To send newsletters, service updates, or promotional content where you have opted in. Legal basis: Consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time.

Website Analytics

To analyse how our website is used and to improve our Services. Legal basis: Legitimate interests (Art. 6(1)(f) GDPR).

5. Data Retention

We retain personal data only for as long as necessary for the purposes described above or as required by law:

• Client project data: retained for 7 years after project completion (Dutch legal requirement for financial records);
• Marketing contact data: retained until consent is withdrawn or you unsubscribe;
• Website analytics data: retained for a maximum of 26 months;
• Enquiry data (non-clients): retained for 12 months after last contact.

6. Sharing of Personal Data

We do not sell your personal data. We may share your data with trusted third parties only where necessary:

• Hosting and IT service providers (for website and email infrastructure);
• Payment processors (for invoicing and payment handling);
• Analytics platforms (e.g., Google Analytics, anonymised where possible);
• Professional advisors (lawyers, accountants) under confidentiality obligations;
• Competent authorities, when required by law.

Where third-party processors operate outside the European Economic Area (EEA), we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

7. Your Rights Under the GDPR

As a data subject, you have the following rights:

• Right of access: to request a copy of the personal data we hold about you;
• Right to rectification: to request correction of inaccurate or incomplete data;
• Right to erasure ("right to be forgotten"): to request deletion of your data, subject to legal retention obligations;
• Right to restriction of processing: to request that we limit how we use your data;
• Right to data portability: to receive your data in a structured, machine-readable format;
• Right to object: to object to processing based on legitimate interests or for direct marketing;
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us using the details in Section 10. We will respond within one month in accordance with GDPR requirements.

8. Cookies

Our website uses cookies to improve your browsing experience and analyse site traffic. By continuing to use our website, you consent to our use of cookies in accordance with our Cookie Policy. You can manage or disable cookies through your browser settings; however, this may affect the functionality of our website.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Encrypted communications (SSL/TLS);
• Access controls limiting data access to authorised personnel only;
• Regular security reviews of systems and processes.

In the event of a data breach that is likely to affect your rights or freedoms, we will notify you and the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) as required by law.

10. Complaints and Contact

If you have questions, concerns, or wish to exercise your data rights, please contact us:

Vyrox
Rotterdam, The Netherlands
Website: vyrox.io

If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch supervisory authority:

Autoriteit Persoonsgegevens
Website: autoriteitpersoonsgegevens.nl
Telephone: +31 70 888 8500

11. Changes to This Policy

Vyrox may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on our website with the revised effective date. We encourage you to review this Policy periodically.