Privacy Policy

Last updated: 14 August 2026

Aminexus provides technology and cloud consulting services. This policy explains what personal information we handle, why, and what you can ask us to do with it. We have written it to describe what this website and our business actually do, rather than to reserve rights we do not exercise.

1. Who this policy covers

This policy applies to Aminexus ("Aminexus", "we", "us") and to aminexustec.com. It covers visitors to this website, people who contact us, and the business contacts of our clients and prospective clients.

Where we deliver consulting work inside a client's own systems, that client decides what data exists in those systems and why. In that situation the client is the controller of that data and we act on their instructions, under the terms of the engagement agreement rather than this policy.

2. What we collect

We collect only what we need in order to respond to enquiries and deliver work:

• Business contact information - name, work email address, employer, job title, and anything else you choose to include when you write to us.
• Engagement correspondence - emails, meeting notes, proposals, statements of work and deliverables exchanged during an engagement.
• Technical request data - our hosting provider records standard request metadata, including IP address, user agent and timestamps. See section 3.

We do not collect special category data (such as health, biometric or political data), and we do not buy contact lists or scrape personal data.

3. What this website does and does not do

We think this section matters more than the usual boilerplate, so it is specific.

No cookies and no analytics

This site sets no cookies of its own and loads no third-party scripts. There is no Google Analytics, no tag manager, no advertising pixel and no session recording. There is nothing to consent to, which is why you will not see a cookie banner. This is described in more detail in our Cookie Notice.

The contact form

The form on our homepage does not transmit anything to a server we control. When you submit it, your browser opens a pre-filled draft in your own email application addressed to info@aminexustec.com. Nothing leaves your device unless you then choose to send that email. If you close the draft, we never receive it and never know it existed.

Hosting

The site is served by Cloudflare, Inc. As part of delivering and protecting the site, Cloudflare processes request metadata such as IP addresses. We use this only in aggregate, for availability and security. We do not use it to identify or profile individual visitors.

4. Why we use personal information

• To respond to enquiries and provide information you have asked for.
• To scope, agree, deliver and support consulting engagements.
• To send transactional and administrative messages relating to an engagement.
• To keep records required for accounting, tax and professional obligations.
• To protect the security and availability of our systems and this website.

We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use it for automated decision-making that produces legal or similarly significant effects.

5. Who we share it with

We do not sell or rent personal information. We share it only where necessary, with:

• Service providers who operate our infrastructure under contract - principally Microsoft (email and productivity) and Cloudflare (website delivery and security).
• Cloud platform providers where an engagement requires it, and only to the extent the client has authorised.
• Professional advisers such as accountants or legal counsel, where reasonably required.
• Authorities, where disclosure is required by law or necessary to establish, exercise or defend legal claims.

6. How long we keep it

Enquiries that do not lead to an engagement are kept while there is a realistic prospect of working together, and then deleted. Engagement records are retained for the duration of the engagement and for as long as needed afterwards to meet contractual, accounting, tax and professional obligations. When a retention period ends we delete the information or remove its connection to an identifiable person.

7. Security

We use access controls, multi-factor authentication, encryption in transit, and least-privilege access to client environments. Access to a client environment is scoped to the engagement and removed at its conclusion. No method of transmission or storage is completely secure, and we do not claim otherwise; if a breach affects your personal information and the law requires notification, we will notify you and the relevant regulator within the required timeframe.

8. Your rights (United States)

Depending on your state of residence, you may have the right to know what personal information we hold about you, to obtain a copy of it, to correct it, to delete it, and not to be discriminated against for exercising those rights.

We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are used in US state privacy laws. There is therefore no "Do Not Sell or Share My Personal Information" mechanism to offer, because there is nothing to opt out of.

To exercise any of these rights, email info@aminexustec.com. We will verify your request using the contact details we already hold, and respond within the period required by applicable law.

9. Your rights (EEA and United Kingdom)

Where the EU or UK General Data Protection Regulation applies to our processing, we rely on the following legal bases:

• Legitimate interests - responding to business enquiries, delivering and administering engagements, and keeping our systems secure. We have considered these interests against your rights and consider them balanced, given that the data involved is ordinary business contact information.
• Performance of a contract - where processing is necessary to agree or deliver an engagement.
• Legal obligation - where we must retain records for tax, accounting or regulatory reasons.

You have the right to access, rectify, erase, restrict and port your personal information, and to object to processing based on legitimate interests. Where we rely on consent, you may withdraw it at any time without affecting processing carried out beforehand.

You also have the right to lodge a complaint with your supervisory authority. In the United Kingdom this is the Information Commissioner's Office (ico.org.uk). In the EEA it is the authority for your country of residence. We would appreciate the chance to address your concern first.

10. International transfers

We operate from the United States and work with clients globally, so personal information may be transferred to and processed in the United States and in other countries where our service providers operate. Where information is transferred out of the EEA or the United Kingdom, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, as implemented by the relevant provider.

11. Children

Our services are directed at organisations, not individuals, and are not intended for anyone under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy as our services or legal obligations change. The "last updated" date above reflects the most recent version. Where a change materially affects how we handle personal information, we will take reasonable steps to notify affected clients directly.

13. Contact us

For any privacy question, or to exercise any right described above, email info@aminexustec.com. Please include enough detail for us to identify the information you are asking about.