Legal

Privacy notice

Last updated: 2 November 2026

This notice explains how CXDEFENSE.COM LIMITED (“CX Defense”, “we”, “us”) collects and uses personal data when you visit cxdefense.com or vardent.io, or contact us. It is short because we collect very little.

1. Who we are

We are the controller of the personal data described in this notice.

2. What we collect

When you contact us

Your name, email address and organisation, whatever you choose to include in your message, and any later correspondence.

When you visit the website

Our hosting provider automatically records the technical information needed to deliver and secure the site, such as your IP address, browser type, the pages requested and the time of each request (server logs).

What we do not do

This website does not use cookies, analytics, advertising or tracking pixels, and it does not load fonts or scripts from third parties.

3. Why we use it, and our lawful basis

• To reply to your enquiry and follow it up — our legitimate interest in responding to people who contact us.
• To discuss, prepare and carry out a pilot or engagement with you or your organisation — steps taken at your request before entering into a contract, and performance of that contract.
• To operate and secure the website — our legitimate interest in keeping our systems running and safe.
• To comply with the law, for example keeping business records — legal obligation.

We do not use your data for automated decision-making or profiling, and we do not sell it.

4. Who we share it with

We use a small number of service providers who process data on our behalf under contract — currently Hostinger for website hosting, our email providers, and Namecheap for forwarding messages sent to VARDENT contact aliases. We may also share data with professional advisers, such as lawyers and accountants, and with authorities where the law requires it.

5. International transfers

Some service providers may process data outside the United Kingdom. Where they do, we rely on UK adequacy regulations or on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.

6. How long we keep it

Enquiries and related correspondence are kept for up to 24 months after our last contact. If an enquiry leads to a contract, we keep the related records for as long as the relationship lasts and for up to six years afterwards, for legal and accounting purposes. Server logs are kept for a short period set by our hosting provider, to keep the site secure.

7. VARDENT and customer data

VARDENT is in development as a local-first workspace. Its database and retained source files are stored on the user’s infrastructure. Local AI processing and cloud AI processing have different data flows: content included in a cloud-model request is sent to the selected provider. This website does not provide access to the product or collect customer research datasets. Where we process personal data on a customer’s behalf, for example during support, we do so as a processor under a written data processing agreement.

8. Your rights

You have the right to ask for access to your personal data, to have it corrected or erased, to restrict or object to its use, and to receive it in a portable format. To exercise any of these rights, write to Contact us about privacy. We will respond within one month.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113.

9. Changes

We will update this notice when our practices change, and the date at the top will show the latest version.