1. Introduction

Welcome to Neuralmetrixs ("Neuralmetrixs", "we", "us", or "our"). We are a specialized Customer Data Platform (CDP) and customer intelligence solutions company helping organizations connect fragmented customer signals, resolve identities, and activate first-party data.

This Privacy Policy applies to personal information gathered through our website (neuralmetrixs.com), direct digital communications, inquiry forms, and consultation requests. We are committed to handling all personal information transparently, lawfully, and proportionately in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and relevant United States federal and state privacy frameworks.

2. Information We Collect

We collect personal information directly from you when you interact with our website or contact us, as well as automatically through technical server logs and standard analytics tools. We do not collect sensitive personal data through this website.

A. Information You Provide Directly

When you submit a contact inquiry, request a technical consultation, or communicate with our team, you may provide:

• Contact details: First and last name, business email address, company name, job title, and phone number.
• Inquiry information: Technical requirements, CDP architectural questions, industry focus, or custom messages included in your submission.
• Communication preferences: Your preferences regarding technical updates, correspondence, or consultation follow-ups.

B. Information Collected Automatically

When you browse our website, our hosting infrastructure and analytics tools may automatically record standard technical telemetry:

• Device and network telemetry: IP address (from which approximate country- or city-level location is derived), browser type and version, operating system, language settings, and device category.
• Interaction data: Pages viewed, links clicked, time spent per page, referring URLs, date/time timestamps, and navigation paths across our website.

3. How We Use Information

We process personal information strictly for legitimate business, operational, and technical purposes, including:

• Responding to inquiries: Reviewing and answering your questions, technical inquiries, and consultation requests.
• Scheduling technical sessions: Arranging introductory discussions or CDP architectural evaluations with lead architects.
• Website operation & maintenance: Ensuring our website displays correctly, runs reliably at high performance, and remains secure.
• Analytics & performance optimization: Understanding traffic trends, popular topics, and navigation paths to enhance content and layout.
• Security & fraud prevention: Monitoring server logs to detect, prevent, and investigate security incidents, unauthorized access, or abusive requests.
• Legal compliance: Fulfilling statutory, accounting, or regulatory obligations where applicable by law.

4. Legal Bases for Processing (UK / EU GDPR)

If you are located in the United Kingdom or the European Economic Area, we process your personal information only when we have a valid lawful basis under Article 6 of the UK GDPR / EU GDPR:

• Legitimate Interests (Art. 6(1)(f)): We process business contact details and technical telemetry where necessary for our legitimate commercial interests in responding to prospective client inquiries, securing our digital assets, and optimizing website performance, provided these interests are not overridden by your fundamental privacy rights.
• Consent (Art. 6(1)(a)): Where required by applicable law (such as for non-essential analytics cookies or direct email updates), we process information on the basis of your explicit, freely given consent. You may withdraw consent at any time.
• Contractual Steps (Art. 6(1)(b)): Where you request a technical evaluation, proposal, or pre-contractual assessment of your customer data infrastructure.
• Legal Obligation (Art. 6(1)(c)): Where processing is necessary to satisfy legal, statutory, or regulatory compliance mandates.

5. Cookies and Similar Technologies

Our website uses cookies, pixel tags, and local storage mechanisms to support basic site navigation, remember user preferences, and measure website engagement. A cookie is a small text file stored on your browser or device when you visit web pages.

• Essential Cookies: Necessary for core site security, load balancing, and basic navigation functionality. These cannot be disabled in our systems.
• Performance & Analytics Cookies: Allow us to measure visitor traffic, interaction paths, and page performance in an aggregated, pseudonymous format.

6. Google Analytics 4 (GA4)

We use Google Analytics 4 (GA4), a web analytics service provided by Google, to understand how visitors interact with our content.

• Data points processed: Pseudonymous device identifiers, browser specifications, page view timestamps, approximate geographic region (country/city derived from truncated IP addresses), and engagement events.
• IP Anonymization: In GA4, IP addresses are used solely to derive coarse location data and are not logged or stored on disk by Google.
• No cross-context behavioral advertising: We utilize GA4 strictly for performance measurement, not for programmatic advertising retargeting or building cross-site behavioral profiles.
• Data Retention: We retain analytics event data in accordance with standard Google Analytics data minimization guidelines.

7. Google Tag Manager (GTM)

We utilize Google Tag Manager (GTM) to deploy and manage operational script tags on our website. GTM itself operates purely as a centralized code deployment tool; it does not collect, store, or profile personal data independently beyond delivering the configured scripts.

8. How We Share Information

We do not sell, rent, monetize, or trade your personal information. We share personal data only with trusted service providers bound by strict confidentiality and data processing obligations:

• Cloud hosting & infrastructure providers: Platforms and Content Delivery Networks (CDNs) that securely host our website assets.
• Analytics service providers: Google (for aggregated website analytics as described above).
• Communication tooling: Enterprise email and communication tools used to route and reply to consultation inquiries.
• Professional advisers: Legal, accounting, and compliance advisers operating under professional confidentiality duties.
• Regulatory authorities: When legally required by a binding court order, subpoena, or applicable statutory mandate.

9. International Data Transfers

Because Neuralmetrixs operates globally and utilizes international cloud technology partners (including infrastructure in the UK, United States, and India), your personal information may be transferred to, stored, or processed in jurisdictions outside your home country.

Where data originating in the UK or EEA is transferred to countries that have not received an official adequacy decision, we ensure appropriate safeguards are implemented, such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses (SCCs).

10. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the specific purposes outlined in this policy, unless a longer retention period is mandated by tax, legal, or accounting regulations.

• Inquiry records: Retained for the duration of the communication and pre-contractual evaluation, and archived or securely deleted thereafter if no commercial engagement ensues.
• Analytics telemetry: Retained in accordance with standard data minimization principles.

11. Data Security

We maintain reasonable and proportionate technical, organizational, and administrative safeguards designed to protect personal information against unauthorized access, accidental loss, alteration, or disclosure. These measures include TLS/HTTPS encryption for data in transit, strict access control restrictions, and regular security updates.

However, no method of transmission over the Internet or electronic storage can be guaranteed to be 100% immune from security threats. We encourage you to take precautions when submitting information online.

12. Your Privacy Rights (UK, EEA & International)

Depending on your location and applicable data protection law, you may hold specific rights regarding your personal information:

• Right of Access: Request confirmation of whether we process your data and obtain a copy of the personal information held.
• Right to Rectification: Request correction of inaccurate, incomplete, or outdated personal information.
• Right to Erasure: Request deletion of your personal information where there is no legal reason for its continued retention.
• Right to Restrict Processing: Request temporary suspension of processing under certain contested circumstances.
• Right to Data Portability: Receive your personal information in a structured, machine-readable format.
• Right to Object: Object to processing carried out under the legitimate interests legal basis.
• Right to Withdraw Consent: Where processing relies on your consent, withdraw consent at any time without retroactive penalty.

To exercise any of these rights, please contact us at contact@neuralmetrixs.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

13. United States Privacy Rights

Certain US state privacy laws (including California, Virginia, Colorado, Connecticut, and Utah) grant residents specific rights regarding their personal data, subject to statutory applicability thresholds and exceptions.

• Right to Know & Access: Request disclosure of the categories and specific pieces of personal information collected.
• Right to Delete & Correct: Request deletion or correction of personal information held by us.
• No Sale or Sharing of Personal Information: We do not sell personal information or share personal data for cross-context behavioral advertising as defined under the California Consumer Privacy Act (CCPA / CPRA).
• Non-Discrimination: We will not discriminate against you in pricing, service quality, or availability for exercising your statutory privacy rights.

To submit a consumer privacy request under applicable state law, please email contact@neuralmetrixs.com with the subject line "US Privacy Rights Request".

14. Children's Privacy

Our website and services are directed exclusively to business professionals, enterprise organizations, and adult individuals. We do not knowingly collect, solicit, or maintain personal information from children under the age of 18. If we learn that personal data of a minor has been collected inadvertently, we will take prompt steps to delete it.

15. Third-Party Links & External Services

Our website may contain links to external third-party websites (such as LinkedIn, technology partner documentation, or industry resources). We do not control and are not responsible for the content, privacy practices, or security standards of third-party platforms.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our operational practices, architectural services, or legal obligations. When revisions occur, we will update the "Effective Date" at the top of this document.

17. Contact Us

If you have questions, comments, or data privacy requests concerning this Privacy Policy or our data handling practices, please contact our team: