Sofrigox Privacy Policy

Introduction

This Privacy Policy describes how Sofrigox Ltd. ("Company", "we", "us", "our") collects, uses, stores, and protects your personal information when you visit our website and use any related online services (collectively, the "Website").

We are committed to protecting your privacy and handling data in compliance with applicable laws, including:

• ePrivacy regulations (cookies)
• The Data Protection Act 2018
• EU GDPR (if applicable)
• UK GDPR

Information We Collect

We collect information in accordance with GDPR and Google's Data Protection Policies.

Information You Provide Voluntarily

You may provide personal information when:

• contacting us directly
• applying for partnerships or collaboration
• submitting business inquiries
• subscribing to newsletters or updates
• filling out contact forms

The information may include:

• Any message/content you submit through forms
• Phone number (optional)
• Company name
• Email address
• Name

We do not request sensitive personal data.

Information Collected Automatically

When you visit our Website, certain information is collected automatically.

Technical Data

• Session duration
• Pages visited and actions taken
• Referrer URL
• Time zone
• Device type and operating system
• Browser type and version
• IP address

This data is collected through:

• Security and performance tools
• Server logs
• Google Analytics

Cookies & Tracking Technologies

We use cookies to:

• remember preferences
• improve user experience
• analyze website performance

We do not use advertising cookies unless explicitly stated in a cookie banner.

Third-Party Sources

We may receive non-sensitive information from:

• Anti-spam services (e.g., reCAPTCHA)
• Error monitoring tools
• Analytics platforms
• Hosting providers

How We Use Your Information

We use collected information for the following purposes:

To Operate and Improve the Website

• Enhancing user experience
• Analyzing traffic and performance
• Debugging and security
• Ensuring website functionality

To Communicate With You

• Sending business-related updates (only if you consent)
• Providing support
• Responding to inquiries

For Administrative and Legal Purposes

• Maintaining internal records
• Ensuring compliance with legal obligations
• Preventing fraud or misuse

We do not sell, rent, or trade your personal information.

Legal Bases for Processing (GDPR)

We process your personal data under the following legal bases:

• Legal Obligation — when required by law
• Legitimate Interest — for analytics, security, website optimization
• Consent — for emails, forms, cookies

Data Sharing

We may share your data only with trusted third-party providers who help operate our Website. These include:

• IT support providers
• Security / anti-spam tools
• Google Analytics
• Email delivery services
• Web hosting services

All service providers act as Data Processors under GDPR and process information only on our instructions. We do not share data for advertising purposes. We may disclose information only when required by legal proceedings, government authorities, or law enforcement.

International Transfers

Some service providers (e.g., Google) may process data outside the UK/EU. We ensure compliance using industry-standard security practices, GDPR-compliant agreements, and Standard Contractual Clauses (SCCs).

Data Retention

We store personal information only for as long as necessary for legal or administrative requirements, providing services, and responding to inquiries. Typically: Server logs: 90 days, unless required for security; Analytics data: up to 26 months; Contact form submissions: up to 12 months.

Data Security

We use industry-standard measures to protect your data, including monitoring for anomalies and attacks, secure data centers, firewalls and access controls, and encryption (HTTPS/TLS). No system is 100% secure, but we take all reasonable steps to keep your data safe.

Your Rights (UK/EU GDPR)

Depending on your region, you may have the right to:

• Access your data
• Request correction
• Request deletion (right to be forgotten)
• Object to processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

You can submit any request by contacting: [email protected]

Third-Party Links

Our Website may contain links to external websites or services not operated by us. We are not responsible for their privacy practices or content.

Children's Privacy

Our Website is not intended for children under 13 and we do not knowingly collect data from them. If you believe a child has submitted data, please contact us for removal.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will update the "Last Updated" date at the top of the page. Continued use of the Website after changes means acceptance of the updated terms.