1. Who controls your data
This policy explains how personal data is handled on elyvexis.com and through the corporate contact form.
Pre-registration note: the legal entity fields above are intentionally marked as pending. Replace them in site-config.js immediately after MB registration and before treating this policy as final production legal disclosure.
2. Data we collect
When you use the contact form, we may collect your name, email address, company name (if provided), selected enquiry category, message content, and limited technical/security data associated with submitting the form.
We do not intentionally collect special-category personal data through the contact form. Please do not include sensitive information unless it is necessary for your enquiry.
3. Why we process it
Contact-form data is used to receive, assess and respond to legitimate corporate, product, partnership, legal, media and other business enquiries; maintain appropriate correspondence records; protect the website against abuse; and establish, exercise or defend legal claims where necessary.
Depending on the nature of the enquiry, processing may be based on steps taken at your request before entering into a contract, our legitimate interests in communicating about and operating our business, or compliance with legal obligations.
4. Service providers and recipients
The website is delivered using Cloudflare infrastructure and the contact form is protected by Cloudflare Turnstile. Contact-form messages are sent through Brevo transactional email infrastructure to Elyvexis corporate email. These providers may process limited data on our behalf under their applicable data-protection terms.
We do not sell personal data. Data may also be disclosed where required by law, to professional advisers where necessary, or in connection with the establishment, exercise or defence of legal claims.
5. International processing
Some infrastructure providers may process data outside Lithuania or the European Economic Area. Where a restricted international transfer occurs, the relevant provider and/or Elyvexis must rely on an applicable transfer mechanism and safeguards required by data-protection law.
6. Retention
Contact correspondence is retained only for as long as reasonably necessary to respond to the enquiry, manage any resulting business relationship, maintain appropriate business records, and meet legal or dispute-related requirements. Delivery and security logs may be retained according to the configured retention periods of our infrastructure and email providers.
7. Your rights
Subject to applicable law, you may have rights to access, correct or delete your personal data, restrict or object to certain processing, and receive data in a portable form where the legal conditions apply. Where processing relies on consent, consent may be withdrawn without affecting prior lawful processing.
To make a request, email [email protected]. You also have the right to lodge a complaint with the competent data protection supervisory authority.
8. Security
We use technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure or destruction. No internet transmission or storage system can be guaranteed to be completely secure.
9. Changes
We may update this Privacy Policy when the website, company structure, processing activities or legal requirements change. The effective date and version shown above identify the current publication.