Privacy Policy

Last Updated: November 21st, 2025

  1. Introduction

Neux Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you interact with our services, visit our website neux.ai or engage with us as a client or potential client.

It is important that you read this policy, together with any other privacy notices we may provide on specific occasions, so that you are fully aware of how and why we are using your data.

  1. Who We Are

Neux Ltd is a company registered in England and Wales under company number 09021397. Our registered office address is 86-90 Paul Street, London, EC2A 4NE, United Kingdom. Our VAT number is 194 6179 68.

We are a provider of digital innovation, IT solutions, and strategic consultancy services to enterprise clients. For the purposes of data protection law, we are the “data controller” responsible for your personal data.

  1. The Data We Collect About You

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store, and transfer different kinds of personal data, which we have grouped as follows:

  • Identity & Contact Data: Includes first name, last name, title, company name, business email address, business telephone number, and business postal address.
  • Professional & Employment Data: Includes your job title, department, professional background, and any other information you provide in the context of a business relationship.
  • Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
  • Usage Data: Includes information about how you use our website, products, and services, including the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), pages you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.
  • Marketing and Communications Data: Includes your preferences in receiving marketing from us and our third parties and your communication preferences.
  • Client Project Data: Any personal data contained within materials, systems, or data sets that you provide to us for the purpose of delivering our consultancy or IT services under a contract. The specific nature of this data is defined by the project and governed by our contractual agreements.
  1. How We Collect Your Personal Data

We use different methods to collect data from and about you, including:

  • Direct Interactions: You may give us your Identity, Contact, and Professional Data by filling in forms on our website or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you:
    • Request a proposal or information about our services;
    • Engage us to deliver services under a contract;
    • Subscribe to our publications or marketing materials;
    • Request marketing to be sent to you; or
    • Give us feedback or contact us.
  • Automated Technologies or Interactions: As you interact with our website, we may automatically collect Technical and Usage Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies. Please see our Cookie Policy for further details.
  • Third Parties or Publicly Available Sources: We may receive personal data about you from various third parties and public sources, such as:
    • Analytics providers (such as Google Analytics) based outside the UK;
    • Professional networking sites (such as LinkedIn);
    • Business partners, subcontractors, or our clients who may refer you to us; and
    • Publicly available sources such as Companies House.
  1. How We Use Your Personal Data (Purposes and Legal Bases)

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Where we need to perform the contract we are about to enter into or have entered into with you or your organisation.
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal obligation.
  • Where you have given us your consent.

The table below describes our purposes for processing and the legal bases we rely upon.

Purpose/Activity Type of Data Lawful Basis for Processing
To register you as a new client or prospective client Identity, Contact, Professional Performance of a contract with you (or your organisation) / Legitimate Interest (to manage our business development)
To deliver our services and manage our contractual relationship Identity, Contact, Professional, Client Project Data Performance of a contract / Legitimate Interest (to provide our services effectively)
To manage payments, fees, and charges Identity, Contact Performance of a contract / Legal Obligation (for financial record keeping)
To respond to your enquiries and provide support Identity, Contact, Professional Legitimate Interest (to respond to and manage our relationship with clients and potential clients)
To send you marketing communications about our services, events, and publications Identity, Contact, Marketing Consent (for direct marketing) / Legitimate Interest (for existing client communications about similar services)
To administer and protect our business and our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting) Identity, Contact, Technical Legitimate Interest (for running our business, provision of administration and IT services, network security) / Legal Obligation
To use data analytics to improve our website, products/services, marketing, and user relationships Technical, Usage Legitimate Interest (to define types of clients for our services, to keep our website updated and relevant, to develop our business)
To comply with legal and regulatory requirements All categories as necessary Legal Obligation
  1. Data Sharing and Disclosures

We may share your personal data with the following categories of third parties:

  • Service Providers: We engage trusted third-party service providers who act as “data processors” on our behalf to perform functions such as IT and system administration, cloud hosting, data analytics, marketing automation, and professional advisory services. These providers are contractually bound to use your data only for the purposes we specify and to provide appropriate security.
  • Professional Advisers: We may disclose your data to professional advisers including lawyers, bankers, auditors, and insurers where necessary for the provision of their services to us.
  • Legal and Regulatory Authorities: We may disclose your data to HM Revenue & Customs, regulators, law enforcement agencies, or other authorities where we are required to do so by law or in connection with legal proceedings.
  • Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the new entity.

We do not sell, rent, or trade your personal data to any third parties for their own marketing purposes.

  1. International Data Transfers

We may transfer, store, and process your personal data outside the United Kingdom (UK) and the European Economic Area (EEA). For example, some of our service providers may be based outside these jurisdictions.

Whenever we transfer your personal data internationally, we ensure a similar degree of protection is afforded to it by implementing at least one of the following safeguards:

  • We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data.
  • We use specific contracts approved for use in the UK (UK International Data Transfer Agreement) which give personal data the same protection it has in the UK.

You can obtain details of the specific mechanisms we use for international transfers by contacting us.

  1. Data Security

We have implemented appropriate technical and organisational security measures designed to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. Our security measures include access controls, secure network configurations, and encryption. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

  1. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and whether we can achieve those purposes through other means.

In some circumstances, we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.

  1. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

  • Request access to your personal data (commonly known as a “data subject access request”).
  • Request correction of the personal data that we hold about you.
  • Request erasure of your personal data.
  • Object to processing of your personal data where we are relying on a legitimate interest.
  • Request restriction of processing of your personal data.
  • Request the transfer of your personal data to you or a third party (data portability).
  • Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of the rights set out above, please contact us using the details in Section 12. We may need to request specific information from you to help us confirm your identity. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

  1. Cookies

Our website uses cookies and similar tracking technologies to distinguish you from other users. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them, please see our dedicated [Cookie Policy].

  1. Contact Us & Complaints

If you have any questions about this Privacy Policy or wish to exercise any of your legal rights, please contact us at:

By post: Data Protection Enquiries, Neux Ltd, 86-90 Paul Street, London, EC2A 4NE, United Kingdom.
By email: dorota@neuxscience.com

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Last Updated” date at the top of this page. We will notify you of any material changes by posting the new Privacy Policy on our website. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.