Privacy policy.
The short version: this website has no tracking cookies and no analytics. We only collect what you choose to send us, we use it to reply to you, and we never sell it.
Who we are
This website, www.dymaxel.com, is run by Dymaxel Systems (“Dymaxel”, “we”, “us”). We are responsible for the personal information described in this policy. For any privacy question or request, email sales@dymaxel.com with “Privacy” in the subject line.
What we collect
When you use the contact form
We receive what you type into the form:
- your name and work email address
- your company name and team size (optional)
- the services you ticked and your message
Along with it, we automatically record a few technical details that help us stop spam and abuse: your IP address, the page you sent the form from, the time it took to fill in, and a random submission ID that prevents duplicate sends.
When you email us
We receive your email address, your message and anything you attach.
When you simply browse
We do not use analytics tools, advertising pixels or tracking cookies, and we do not build visitor profiles. Like any website, our server briefly handles your IP address and browser details to deliver the pages to you, and may keep short technical logs to keep the site secure and working.
How we use it
| Purpose | Legal basis (where GDPR / UK GDPR applies) |
|---|---|
| Replying to your enquiry and arranging the call you asked for | Steps you asked us to take before a possible contract |
| Keeping a record of the enquiry in our CRM so the right engineer can follow up | Our legitimate interest in running our business |
| Blocking spam, bots and abuse of the form | Our legitimate interest in keeping the site secure |
| Meeting legal, tax or accounting obligations if you become a client | Legal obligation |
We will not add you to a newsletter or marketing list because you sent us an enquiry. If we ever send you other business emails, every one will include a simple way to opt out.
We do not sell, rent or trade your personal information, and we do not use it for automated decisions that affect you.
The “I’m not a robot” check
The contact form uses ALTCHA, an open-source, privacy-friendly spam check that we host ourselves. Your browser solves a small maths puzzle in about a second. It sets no cookies, does not track you, and sends nothing to a third party.
Who we share it with
Only with the service providers that run our systems for us, and only for the purposes above:
- Hosting: the website and the form-processing system run on our own server hosted by Contabo GmbH in France (EU).
- CRM: enquiries are stored in our own Odoo CRM system.
- Email: our email providers deliver form notifications to our team and carry the emails we exchange with you.
- Fonts: pages load typefaces from Google Fonts, so your browser connects to Google’s servers, which see your IP address. See Google’s privacy policy.
We may also disclose information if the law requires it, or to protect our rights, our clients or the public.
Our team and providers work from several countries, so your information may be handled outside the country where you live. Where the law requires it, we use appropriate safeguards such as standard contractual clauses.
How long we keep it
- Enquiries are kept in our CRM for as long as we are in touch about a possible project. If no work follows, we delete or anonymise them within 24 months of our last contact.
- Client records are kept for as long as the law requires, typically up to 7 years for tax and accounting.
- Copies held by our form-processing system are deleted automatically 30 days after the enquiry reaches our CRM. Spam-check records are deleted after 1 day.
How we protect it
The site is served only over encrypted HTTPS. The form-processing system is not publicly reachable apart from the form itself, access to our CRM is limited to staff who need it, and submissions are rate-limited to block abuse. No system is perfectly secure, but we take reasonable steps to protect your information and will tell you and the authorities about a breach where the law requires it.
Your rights
Depending on where you live (for example under GDPR in the EU, UK GDPR, the California Consumer Privacy Act, Canada’s PIPEDA or Pakistan’s data protection rules), you may have the right to:
- see the personal information we hold about you and get a copy of it
- have it corrected or deleted
- object to or restrict how we use it
- withdraw consent at any time, where we rely on consent
- complain to your local data-protection authority
To use any of these rights, email sales@dymaxel.com. We will reply within 30 days and will not charge you or treat you differently for asking. We may need to confirm your identity first.
California residents: we do not sell or share personal information for cross-context behavioural advertising, as those terms are defined in the CCPA/CPRA.
Children
This site is for businesses and is not aimed at children. We do not knowingly collect information from anyone under 16.
Links to other sites
Our pages and blog link to other websites, such as Odoo, GoHighLevel and n8n. Their privacy practices are their own, so please read their policies.
Changes to this policy
We will update this page if how we handle information changes, and change the date at the top. Significant changes will be highlighted here.