Privacy notice

Version 1.0 — July 2026

Who we are

Varyxis Technologies ("Varyxis", "we") operates this website and the Varyxis recruitment platform. For enquiries about this notice or your personal data, contact privacy@varyxis.co.uk.

This website

This marketing website does not set tracking or advertising cookies and does not run third-party analytics. Web fonts are loaded from Google Fonts, which involves your browser requesting font files from Google's servers. If you email us, we use your details solely to respond to your enquiry.

The Varyxis platform — two roles

For personal data our customers store in the platform (their candidates, contacts and users), the customer is the data controller and Varyxis Technologies is a data processor, acting on the customer's instructions under a data processing agreement. For account, billing and support data about our customers themselves, Varyxis Technologies is the controller.

What we process as a controller

• Account data: name, work email, authentication records, security logs
• Billing data: company details, invoices, payment status (card details are handled by our payment providers, never stored by us)
• Support data: messages you send our support team

How the platform protects personal data

• Each customer operates in an isolated workspace, verified by automated tests
• Encryption in transit (TLS) and encryption of stored secrets
• Role-based access controls, multi-factor authentication and full audit trails
• Configurable retention policies, anonymisation and deletion workflows
• Candidate self-service: data download and deletion requests from the candidate portal

Your rights

Under UK GDPR you may request access, rectification, erasure, restriction, portability or object to processing. If your data was entered by a recruitment agency using Varyxis, the agency is the controller — contact them first; we support them with the tooling to respond. You can also complain to the ICO (ico.org.uk).

Retention

Controller data is kept for the life of the account plus a limited retention period. Processor data follows each customer's configured retention policy within platform bounds. Backups expire on a documented schedule after deletion.

Changes

We version this notice; material changes are announced in the platform and on this page.

This notice is a working v1 prepared for launch and will be reviewed by legal counsel before commercial general availability.