Privacy.
The short version
Browsing creates standard hosting logs and loads privacy-focused Rybbit analytics. Rybbit does not set cookies or use browser storage for tracking. Unless you choose the local display font, your browser also requests fonts from Adobe. If you contact us, we use what you send to reply and to work with you. We never sell personal data or share it for marketing.
1. Who we are
Cybix AI Ltd (“Cybix”, “we”) is an independent AI consultancy registered in England & Wales, company number 16362220, registered office Second Floor, Sutherland House, 70–78 West Hendon Broadway, London, NW9 7BT. Cybix is the controller of the personal data described in this policy. Questions and requests: privacy@cybix.ai.
2. The data we process, why, and on what basis
Enquiries and correspondence. When you email us we process your name, contact details, organisation and the content of your message, to respond and to manage our relationship. Lawful basis: our legitimate interest in operating a consultancy, or steps taken at your request before entering a contract. Retained while the relationship is live and for up to two years after our last exchange.
Clients and prospective clients. During engagements we process business contact details of client personnel (names, roles, work emails, meeting records) to deliver and administer the work, under our contract with the client organisation. Engagement records are retained for six years after completion to meet legal, accounting and professional-indemnity obligations.
Client systems and data. Where an engagement requires us to work inside a client’s systems or with data the client controls, we act on the client’s documented instructions as a processor, under the data processing terms in the engagement agreement. That processing is governed by the client’s own privacy notices, not this page.
Recruitment. Applications to careers@cybix.ai are processed to assess your suitability (legitimate interests, and steps prior to an employment contract). Unsuccessful applications are deleted within six months unless you ask us to keep your details for future roles, in which case we hold them for up to two years.
Suppliers. We process business contact details of supplier personnel to manage those relationships, under contract and legitimate interests.
Website logs. Our hosting provider records standard server logs (IP address, request, timestamp) for security and reliability, under our legitimate interest in protecting and operating the site. We do not use logs to identify or profile visitors; they are retained per the host’s standard schedule and reviewed only when investigating an incident.
Website analytics. We load Rybbit (site ID 17468) to understand visits, page navigation and outbound link use, under our legitimate interest in understanding and improving the site. Rybbit receives page URLs and titles, referrers, browser and device information and approximate location derived from IP address. It uses pseudonymous visitor and session identifiers; its published policy says it does not use cookies or local storage for tracking and does not store raw IP addresses. Our current Rybbit configuration has session replay, error tracking, IP storage and form interaction tracking switched off. Rybbit processes these data for Cybix; see Rybbit’s privacy policy for its processing and retention details.
Display fonts. By default, the site requests Ivy Presto Display from Adobe Fonts. Adobe receives a request for its stylesheet and font files, including technical information such as the page hostname, font kit and the IP address needed to deliver them. Adobe says its website font service does not set or use cookies, does not store the IP address, and uses the information for delivery, diagnosis, licensing and billing. See the Adobe Fonts privacy notice. Use the display-font setting below to stop future Adobe font requests and use our self-hosted display font instead.
3. Cookies and local storage
The site does not set analytics cookies. Rybbit does not use cookies or browser storage for
tracking. A choice to use local fonts is remembered in one browser storage entry,
cybix_font_preference, used only for that appearance preference. The setting above then
offers “Use Adobe fonts” to remove that entry and restore Adobe Fonts. External links,
including LinkedIn and client videos, contact those sites only if you follow the link.
4. Who we share data with
We share personal data only with: service providers that support the website and our business (hosting, email, document storage, accounting and similar); Rybbit for privacy-focused analytics; Adobe for font delivery unless you choose local fonts; professional advisers under duties of confidence; and authorities where the law requires. We do not sell personal data or share it with third parties for their marketing.
5. International transfers
Cybix was founded in Hong Kong and operates internationally. Where personal data is transferred outside the UK, we use UK-approved safeguards: the UK International Data Transfer Agreement or Addendum, or transfers to jurisdictions covered by UK adequacy regulations. A copy of the relevant safeguard is available on request.
6. Security
We apply security appropriate to the data we hold: access on a need-to-know basis, encryption in transit, multi-factor authentication on our systems, and confidentiality obligations on all staff. Client material is treated as confidential by default, whether or not an NDA requires it.
7. Your rights
Under UK GDPR you may request access to your personal data, correction, erasure, restriction of processing and a portable copy; you may object to processing based on legitimate interests; and where processing relies on consent you may withdraw it at any time. We respond within one month. We do not use personal data for automated decision-making that produces legal or similarly significant effects.
To exercise any right, write to privacy@cybix.ai. If you are unhappy with our response you may complain to the Information Commissioner’s Office: ico.org.uk. The ICO website explains how to complain and what information to include.
8. Changes to this policy
Changes will be posted on this page with a new version number and date. Material changes affecting people we hold data about will be notified directly where practicable.
