Privacy notice

Nox Foundry S.à r.l., 103 Avenue de la Faïencerie, L-1511 Luxembourg, is the controller for the processing described in this notice. Privacy enquiries may be sent directly to contact@noxfoundry.io or through the secure contact form.

When you submit a diagnostic brief, we process the name, business email, organisation, mandate type, jurisdictions, decision, timing and context. To understand how an enquiry reached us, the submission may also include the landing page, submission page, referring website, campaign labels supplied in the URL, social network and the Nox Foundry page or call-to-action used to open the diagnostic form. Our hosting and form providers also process limited technical data, such as IP address, browser information, requested pages, timestamps and security logs.

We use enquiry data to respond, assess a possible engagement, carry out conflict and scope checks, secure the website and protect our rights. The legal bases are steps requested before a contract, our legitimate interests in managing professional enquiries and website security, and compliance with legal obligations where applicable.

Access is limited to authorised Nox Foundry personnel and providers supporting hosting, email and document storage. The website is hosted by Hostinger. Diagnostic submissions are validated by a same-origin server handler and accepted for delivery to contact@noxfoundry.io through the company email environment. Form answers are not sent to website analytics. We do not sell personal data.

Where a provider processes data outside the European Economic Area, the transfer is governed by an applicable legal mechanism and appropriate safeguards.

Enquiries that do not lead to an engagement are reviewed for deletion no later than 24 months after the last substantive contact, unless a longer period is required to protect legal claims or meet legal duties. Engagement records are retained according to the applicable contractual and legal periods. Technical logs follow the security and operational periods applied by the relevant provider.

The site uses limited session browser storage to retain first-party campaign and diagnostic-path context during a visit and to prevent immediate duplicate form submissions. The selected language comes from the page URL, and motion behavior follows the browser or operating-system preference; the site does not store either preference. The website emits privacy-limited event signals for social referral landing, diagnostic page view, diagnostic call-to-action, email preparation and completed enquiry; form answers, names and email addresses are excluded from those event signals. After submission, Nox Foundry may record the human-confirmed lifecycle statuses “qualified opportunity” and “paid diagnostic” against the enquiry reference. Those commercial statuses are not inferred from browser activity. No advertising tracker or non-essential analytics cookie is active in this release. Hosting logs and Google Search Console may provide aggregated technical and search-performance information.

Subject to the GDPR and its conditions, you may request access, correction, deletion, restriction or portability, or object to processing based on legitimate interests. You may also lodge a complaint with the Luxembourg National Commission for Data Protection, the CNPD.

We may update this notice as the website, intake process or providers change. The date above identifies the current version.