Privacy Policy.

Valitrix provides a Breach and Attack Simulation platform that continuously validates an organisation's security controls across endpoint, email, network, AI, and SIEM surfaces. Valitrix is operated from our head office at 94-96 Park Street, Mayfair, London W1K 6NY.

In this Privacy Policy, "Valitrix", "we", "us", and "our" refer to Valitrix. We are committed to protecting and respecting your personal information and your privacy.

This policy explains what information we may collect from you, or that you provide to us, and how we store and use it. It applies to information collected when you visit our website, request a demo, contact us, or use our platform.

Please read this policy carefully. If you have any questions about it or about how we use your information, you can contact us at [email protected]. We may update this policy from time to time by posting the revised version on this page.

We collect information in the following ways:

• Information you give us — such as your name, work email, phone number, company, and role, when you complete a form, request a demo, subscribe to updates, or correspond with us.
• Information collected automatically — when you visit our website we may collect technical and usage data such as your IP address, browser type, device information, pages viewed, and referring URLs, primarily through cookies and similar technologies.
• Simulation and platform data — when you use the platform, Valitrix agents collect simulation telemetry and security control response data from within your environment to generate your reports. We do not collect or retain your underlying business data.

We use the information we hold about you to:

• Provide, operate, and support the platform and the services you request from us.
• Respond to your enquiries, demo requests, and support questions.
• Improve and secure our website and platform, including troubleshooting, analytics, and research.
• Send you service updates and, where permitted, relevant marketing communications.
• Comply with applicable legal obligations and enforce our agreements.

Our website uses cookies and similar technologies to distinguish you from other users, remember your preferences, and help us understand and improve how the site is used. You can control or disable cookies through your browser settings, though some parts of the site may not function as intended without them.

We do not sell your personal information. We may share it only in the following limited circumstances:

• With trusted service providers who process information on our behalf (for example hosting, analytics, and communications), under appropriate confidentiality obligations.
• Where required to comply with a legal obligation, court order, or lawful request, or to protect our rights, property, or safety and those of others.
• In connection with a merger, acquisition, or sale of assets, in which case information may transfer to the relevant party.

We take commercially reasonable technical and organisational measures to protect personal information against loss, misuse, and unauthorised access, disclosure, or alteration. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We retain personal information only for as long as necessary to fulfil the purposes described in this policy or as required by law. Simulation telemetry is retained only for as long as needed to provide your reports and services.

Subject to applicable law, you may request to access, correct, or delete your personal information, or object to or restrict certain processing. You may also withdraw consent where we rely on it. To exercise these rights, contact us at [email protected] and we will respond within a reasonable time.

As we and our service providers may operate in different countries, your information may be transferred to, stored, and processed outside the country in which it was collected. Where we transfer personal information, we take steps to ensure it remains protected in line with this policy.

Our website and platform are intended for business use and are not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

Our website may contain links to third-party websites. Those sites have their own privacy policies, and we are not responsible for their content or practices. Please review their policies before providing any information.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date. We encourage you to review this page periodically.

Questions, comments, and requests regarding this Privacy Policy are welcome and can be sent to [email protected] or to the address below.