Privacy Policy

We collect the following categories of information:

• Contact details you submit through forms (name, work email, company, phone, country, message).
• Engagement information such as project briefs, budgets, timelines, and documents you share for scoping.
• Technical data including IP address, browser and device type, referring URLs, pages visited, and timestamps.
• Cookie and analytics data collected via first-party cookies and privacy-respecting analytics. See our Cookie Policy.

We process personal data to:

• Respond to inquiries and provide requested services.
• Prepare proposals, contracts, and statements of work.
• Deliver, support, and improve our engineering services.
• Send service updates and, with your consent, marketing communications you can unsubscribe from at any time.
• Comply with legal, tax, accounting, and security obligations.

We rely on one or more of the following legal bases:

• Contract — to negotiate, enter into, and perform an engagement with you or your organization.
• Legitimate interests — to operate, secure, and improve our website and services, provided your interests and rights do not override ours.
• Consent — for marketing emails and non-essential cookies. You may withdraw consent at any time.
• Legal obligation — to meet record-keeping, tax, and regulatory requirements.

We do not sell personal data. We share data only with vetted sub-processors that support our operations under written data processing agreements, including:

• Cloud hosting and infrastructure providers (EU/US regions).
• Email, CRM, and customer support tooling.
• Analytics and product telemetry providers.
• Professional advisors (legal, accounting, audit) under confidentiality.

A current list of sub-processors is available on request at hello@vireonlabs.com.

Where personal data is transferred outside the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, and supplementary technical and organizational measures.

We retain personal data only as long as needed for the purposes described in this policy, to comply with legal obligations, resolve disputes, and enforce agreements. Inquiry data is typically retained for up to 24 months; engagement records for the statutory retention period applicable to commercial contracts.

Subject to applicable law, you have the right to:

• Access, correct, or delete your personal data.
• Restrict or object to certain processing activities.
• Receive your data in a portable format.
• Withdraw consent at any time.
• Lodge a complaint with a supervisory authority (for EU residents, your local Data Protection Authority).

To exercise any of these rights, email hello@vireonlabs.com. We will respond within 30 days.

We apply administrative, technical, and physical safeguards to protect personal data, including encryption in transit, access controls, logging, and least-privilege principles. Read more in our Security Practices.

Our services are intended for businesses. We do not knowingly collect personal data from anyone under the age of 16.

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date and, where appropriate, by notice on this website.

For privacy questions or requests, contact our team at hello@vireonlabs.com or by mail to Vireon Labs.