SINGULX · WEBSITE INFORMATION
Privacy Notice
Effective date: 2026-09-12
This notice explains how information is used when you visit the SingulX website, enquire about a project or ask to hear about Future Intelligence public availability. These are separate purposes.
Project enquiries
We use your name, email, optional organisation and message to understand and answer your enquiry. Please avoid unnecessary sensitive personal information or confidential material. Sending an enquiry does not register you for Future Intelligence emails.
Where you ask us to take steps towards a contract with you, the lawful basis is those pre-contractual steps. Where you contact us for an organisation, or ask a general business question, the basis is our legitimate interest in handling relevant correspondence and business relationships, balanced against your interests and rights. We do not require blanket consent to this notice to answer an enquiry.
Future Intelligence interest registration
Internal monitoring and research operate now; a public dashboard is future work. You can request availability emails independently of dashboard access. Registration does not create an account or grant access.
We use your name, email and optional role or organisation to email you about Future Intelligence public availability. The lawful basis is consent: choosing Register interest is your affirmative request for these emails. We record the submitted request, its time and the version of the notice shown. We do not add you to unrelated marketing lists.
You can withdraw at any time by emailing info@singulx.com with “Withdraw Future Intelligence interest”, or by using the withdrawal instructions in an availability email. Withdrawal does not affect the lawfulness of earlier processing. We stop availability emails and remove the contact from the active list; a minimal record may be needed to honour the withdrawal.
Storage, email and providers
When forms are activated, Netlify Forms will store project enquiries and Future Intelligence interest registrations separately. Notifications of verified submissions will go to info@singulx.com, which uses Google Workspace. We check both verified and spam submissions manually and release legitimate messages when needed. Netlify uses Akismet to screen form submissions for spam. We will review submissions in Netlify and handle notifications in the existing mailbox. Local submission exports are not part of this workflow; we will not download them until protected local storage is implemented and verified.
Netlify hosts and delivers the website and processes request information such as IP address, requested URL, time, browser details and response status for delivery, security and operational monitoring. Our basis is the legitimate interest in providing a reliable, secure website. The project dashboard exposes operational request metrics; that is distinct from adding visitor advertising or behavioural profiling.
The site currently loads React from UNPKG and fonts from Google Fonts. Your browser contacts those providers, which receive normal request information including your IP address and browser information. Images, videos and the bubble animation assets are served from the website. GitHub hosts the private source repository and supports deployment; it is not the enquiry store. Squarespace manages the domain, and Google Workspace handles email. The old Canva website is a separate retained rollback copy; the proposed replacement does not send form data to Canva.
We restrict access to people who need it for these purposes and use account access controls. Access is limited to the owner and people specifically authorised to handle the relevant records. We do not intentionally publish submissions or place CSV exports in the website repository. We may disclose information where required by law or reasonably necessary to establish or protect legal rights, using the applicable legal basis. No automated decisions with legal or similarly significant effects are made through these website forms.
International processing
Providers may process information outside the UK, including in the United States. The applicable safeguards depend on the provider and service, as described below.
Our Google Workspace account has no preferred data-storage region selected. Netlify has not confirmed the country or region used for Forms submissions or the supplier that delivers notification emails. Netlify identifies Akismet as its Forms spam-screening service. Information may be processed outside the UK. We use the processing and transfer arrangements in the Netlify and Google agreements linked below and keep these arrangements under review.
Netlify’s data-processing agreement describes transfers under the EU–US Data Privacy Framework and its UK Extension, with contractual fallback provisions. Google Workspace’s processing addendum and Google Analytics’ processing terms set out their respective transfer arrangements. These mechanisms depend on the organisation, service and processing being covered; they do not imply UK-only storage.
Where applicable, safeguards may include a relevant adequacy decision or appropriate contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum to EU standard contractual clauses, with the necessary transfer assessment. Ask info@singulx.com for information about the safeguards applicable to your information.
How long information is kept
Review project enquiries after 90 days and delete those no longer needed, subject to a documented continuing purpose or legal requirement.
Review interest registrations after 12 months and remove those no longer needed. Handle withdrawal promptly and stop availability emails.
Our enquiry and interest review periods apply to submissions and copies we control. Netlify confirms that deleting submissions or forms immediately removes them from its dashboard and API. This does not establish immediate erasure from internal backups or security and request logs. Their retention and purge timelines remain unconfirmed. Contact info@singulx.com about deletion requests and any limits that apply.
Stop Future Intelligence availability emails promptly and remove the active registration. Keep only the email address, purpose and withdrawal date in an owner-only do-not-contact record while this mailing activity or reusable old lists exist. Review annually and delete within 30 days once the activity has ended and old lists can no longer be reused, unless a specific legal need is documented.
These are manual review points, not automatic deletion deadlines. We delete information when it is no longer needed for the stated purpose, subject to a documented continuing purpose or legal requirement. We include relevant mailbox and exported copies in the review, not just the Netlify record.
Limited page-request totals
When enabled, a separate counter totals successful page requests classified by Netlify as coming from the EEA or an unknown location. It does not use cookies, persistent visitor identifiers or browser scripts. It stores only a UTC date and two daily totals. It does not store individual requests, IP addresses, page URLs, referrers or form information, and cannot build individual journeys or connect requests to submissions. Requests include reloads and may include automated traffic; they are not unique visitors.
We use these limited totals to understand overall website demand where Google Analytics is excluded. The necessary server-side processing uses our legitimate interest in operating and understanding the website, with the limited dataset described here. Daily records are kept in restricted Netlify storage for a rolling 90-day window, with automated daily deletion and a totals report. Operational failures can delay deletion or cause missed counts. Netlify’s separate delivery, security and backup processing remains subject to the provider arrangements described above; deleting our aggregate records does not establish deletion from every provider log or backup. These counts are separate from optional Google Analytics and do not depend on Analytics consent.
Cookies and optional Google Analytics
Optional Google Analytics 4 helps us understand which website pages and service links are useful and whether consented visitors complete an accepted enquiry or Future Intelligence interest request. Our lawful basis for analytics is your consent. Analytics consent is separate from making an enquiry or asking for availability emails. You can reject analytics and still use the website and forms.
When enabled, Google Analytics is available only after affirmative consent and a successful server-side location check identifying the request as outside the European Economic Area (EEA). Requests identified as EEA or of unknown location are excluded, including when consent was saved previously. Netlify provides the country classification from the network connection; VPNs, proxies and GeoIP errors can affect it. We do not infer location from your language or device timezone. We do not send analytics or cookieless measurement pings before that choice. Google may process a pseudonymous browser identifier, page and service activity, session information, and browser/device information. The website gateway rechecks location and consent before forwarding the Google tag or measurement requests. It does not forward your IP address, browser request headers or website cookies to Google; Netlify still receives ordinary connection information to host the site and apply these checks. Direct Google measurement connections are blocked by the site’s content security policy. Google’s geographic reports may therefore reflect the gateway rather than your location. We do not send form contents, names, email addresses, entered organisations, URL query strings or fragment identifiers in our measurement events. We do not request advertising personalisation, Google Signals or User-ID tracking.
- sx-cookie-choice: first-party local storage, necessary to remember your consent choice and notice version. Valid for 180 days from your last explicit choice; ordinary page visits do not renew it. After expiry, the next visit asks again. A stale local-storage entry may remain in your browser until it is replaced or cleared, but is not treated as consent.
- __Host-sx-analytics-choice: a necessary, first-party secure cookie carrying the consent choice, notice version and choice time to our server. It contains no separate visitor identifier. It expires with the same 180-day choice period and is removed when analytics is rejected or withdrawn.
- _ga: optional first-party GA cookie identifying a browser instance.
- _ga_<stream suffix>: optional first-party GA cookie maintaining session state. Both GA cookies are configured to expire no later than the remaining 180-day choice period, without automatic renewal on each visit.
We chose 180 days to avoid asking on every page while providing a regular opportunity to reconsider. Material purpose changes require a new notice version and a fresh choice. Browser storage is specific to the device, browser and website origin; a choice on a private review address does not automatically carry to www.singulx.com.
Use Cookie settings in the footer at any time to change your choice. Rejecting or saving analytics off blocks future collection and removes accessible first-party GA cookies. Requests already in flight cannot be recalled; withdrawal does not automatically erase historical records held by Google. Contact info@singulx.com about relevant privacy rights. Browser controls can also clear cookies and local storage.
GA event/user-data retention is configured to two months, with reset on new activity disabled. This setting concerns covered user-level and event-level data; it does not mean all aggregated reports or all Google processing are deleted after two months.
The private Netlify review uses authentication and an owner toolbar. Those access and administration features are separate from the intended public visitor experience. Ordinary private previews and localhost do not send production analytics, even after acceptance. The site has no visitor purchases or dashboard accounts. Normal browser caching and the external resource requests described above still occur independently of optional analytics.
Until protected local export storage is available, we keep the minimal withdrawal record in our existing SingulX mailbox. We check it before sending Future Intelligence availability emails. This is a manual process; it does not authorise unrelated marketing.
Your rights and complaints
Depending on the circumstances, you can ask to access or correct your information, request deletion or restriction, object to legitimate-interest processing, and request portability where the conditions apply. You can withdraw consent for availability emails at any time. These rights have legal conditions and exceptions; we may ask for proportionate identity information before releasing personal data.
We normally respond to a rights request within one month, subject to applicable rules on identity checks, clarification and permitted extensions. We will explain any refusal or delay and available complaint routes.
Contact info@singulx.com first if you wish, but you can complain directly to the UK Information Commissioner’s Office. Where EU data protection law applies, you may also complain to a competent EU supervisory authority. This notice does not limit those rights.
Changes
We will update this notice when the actual purposes, providers or processes change and explain material changes before using information for a new purpose.
Who is responsible
SingulX Ltd · company number 15645209 · registered in England and Wales.
Registered office: 132 Brighton Road, Surbiton, London, KT6 5PR, United Kingdom
For privacy questions, rights requests or withdrawal from Future Intelligence availability emails, contact info@singulx.com.