Privacy Policy

When you create a NAVIZIX account we collect: your name, email, optional country and organisation name, the persona you picked (business owner, vendor, investor, senior advisor), and the list of operational challenges you ticked (e.g. pricing, cashflow, hiring).

We also record the timestamp and version of the Terms and Privacy Policy you accepted at the moment you ticked the consent box, as proof of consent.

We use these signup answers to: (a) personalise your in-app onboarding, (b) send targeted product and educational emails only on the topics you flagged, and (c) help our team contact you about features that solve the problems you told us about.

We do NOT ask for a credit card, phone number, address, or any sensitive personal data at signup. You can request access, correction, or deletion of your record at any time by emailing info@navizix.com.

NAVIZIX is a business technology platform being developed to help small and medium-sized businesses improve decision-making, growth planning, marketing execution, and operational performance.

NAVIZIX is operated by NAVIZIX LTD, a company registered in England and Wales, company number 17485322. Registered office: Office 458 Unit 5, 399–405 Oxford Street, Mayfair, London, United Kingdom, W1C 2BU. NAVIZIX LTD is the data controller under UK GDPR and is registered with the Information Commissioner's Office (ICO) under registration reference ZC260135.

Email: info@navizix.com

We may collect the following types of information:

• Name
• Email address
• Company name
• Job title or role
• Business type or industry
• Business location
• Information you submit through forms, surveys, waitlists, or demo requests
• Technical information such as IP address, browser type, device type, pages visited, referral source, and website usage data
• Communications you send to us by email, form, or other channels

We do not intentionally collect special category personal data through this website.

We collect information when you:

• Visit our website
• Complete a contact form
• Join a waitlist
• Request a demo
• Respond to a survey or research questionnaire
• Communicate with us by email
• Use the NAVIZIX platform, including demo or sample features
• Interact with cookies, analytics tools, or similar technologies

We may use your information to:

• Respond to your enquiries
• Manage demo requests
• Understand potential customer needs
• Improve the NAVIZIX product and website
• Conduct market research and product validation
• Send relevant updates where you have requested them or where we have a lawful basis to do so
• Maintain website security and prevent misuse
• Comply with legal and regulatory obligations

Where UK data protection law applies, we process personal information only where we have a lawful basis. The UK GDPR requires personal data to be handled lawfully, fairly, and transparently, and organisations must identify a lawful basis for each processing purpose.

Our lawful bases may include:

• Consent: where you choose to join a waitlist, subscribe, or receive updates.
• Contract or pre-contract steps: where you request a demo, proposal, or service information.
• Legitimate interests: where we improve our website, develop our product, prevent misuse, and communicate with business contacts.
• Legal obligation: where we must keep records or comply with applicable law.

Inside the app, NAVIZIX always learns from each business's own data and results so that its suggestions for that business get better. We do this under our legitimate interests. It is part of the service, not a setting, and other businesses never see that data. Our Terms of Service, section 5A, explain what is recorded.

Separately, each business chooses whether NAVIZIX may use its data to improve NAVIZIX for all customers (general learning). This is off unless the business owner turns it on, and it can be turned off at any time in Settings under Privacy & data. NAVIZIX does not use any business's data for general learning yet; the choice is recorded now and will be followed when it starts, and we will update this policy before then.

If you object to NAVIZIX learning from your business's data, email info@navizix.com and we will review your request.

We use strictly necessary browser storage to sign you in, keep the site secure and remember display settings you choose.

With your consent, we also count page visits and record which campaign or link brought you to NAVIZIX. Nothing optional runs until you choose in our cookie banner, and you can change or withdraw your choice at any time from "Cookie settings" at the bottom of our public pages.

Our Cookie Policy lists every cookie and storage item we use, what it is for and how long it lasts. You can also control cookies through your browser settings.

In the signed-in app we store, against your account, when you were shown a NAVIZIX or partner offer and whether you dismissed it. This is strictly necessary to apply the offer frequency caps and keep dismissed offers hidden; it is never shared with advertisers.

We may share your information with trusted service providers who help us operate the website and develop the platform, such as:

• Website hosting providers
• Email and communication tools
• Analytics providers
• CRM or customer management tools
• Product development tools
• Legal, accounting, or professional advisers

For signed-in workspace users, NAVIZIX Lumen (a NAVIZIX-operated 3D viewer on a separate NAVIZIX domain) receives the display names of the workspace's own leads, customers and staff to render the 3D view, and nothing else: no contact details. Lead and customer names are sent only to people allowed to manage customers. Colleagues' names are shown to other members of the same business in short form only (first name and the first letter of the surname).

We do not sell your personal information.

Some of our service providers may process data outside the UK or your country of residence. Where UK GDPR applies and a restricted international transfer occurs, we will use appropriate safeguards where required. The ICO provides guidance on international transfers of personal information under UK GDPR.

Two providers that matter for websites built with NAVIZIX:

• Cloudflare, Inc. (United States) hosts and protects those websites. Cloudflare is certified under the EU-US Data Privacy Framework and its UK Extension (the UK-US "data bridge", in force since 12 October 2023), and its Data Processing Addendum also includes the EU Standard Contractual Clauses with the UK Addendum.
• Anthropic (Claude) processes text when AI features are switched on, including the AI website builder. For UK customers Anthropic's contracting entity is Anthropic Ireland, Limited; data is processed in the United States. Anthropic's Data Processing Addendum forms part of its Commercial Terms and includes the EU Standard Contractual Clauses with the UK Addendum, which is the safeguard we rely on for these transfers. Under those terms Anthropic does not train its models on the content we send, and deletes API inputs and outputs within 30 days by default (longer only where its usage policy or the law requires).

When a business uses NAVIZIX to build and host its website, the business decides what the website says and what happens to messages sent through its contact form. For that personal data the business is the controller and NAVIZIX is its processor, under our Data Processing Addendum. The website's own privacy notice names the business.

Visitors' messages from a website's contact form go only to that business's NAVIZIX inbox. Other visitors cannot see them. NAVIZIX removes card numbers it detects in these messages, and the form asks visitors not to send card or bank details.

Cloudflare hosts the websites, issues their security certificates (including for a business's own domain) and runs the Turnstile spam check on contact forms. Cloudflare may process visitors' IP addresses and technical data for security. Websites built with NAVIZIX set no analytics or advertising cookies.

If a business uses the AI website builder, the text it types or pastes, the text we extract from documents it uploads, the labels it gives its photos and its logo are sent to Anthropic to draft the website. When the automatic design check is switched on, screenshots of draft pages (which can show uploaded photos) are made with Cloudflare's browser rendering service and also sent to Anthropic. Businesses should not upload documents or photos containing other people's personal data unless it is needed for the website.

We keep personal information only for as long as necessary for the purposes described in this Privacy Policy.

As a general approach:

• Contact form enquiries may be kept for up to 24 months.
• Documents uploaded to build a website: we do not store the file. We keep only the text extracted from it, in that business's website workspace, until the business deletes it or its website is deleted; after an account closes it is deleted with the rest of the account's data as described in our Terms (section 20).
• Messages sent through a business's website contact form are kept in that business's NAVIZIX inbox until the business deletes them or its account closes.
• Waitlist and demo request information may be kept until you unsubscribe or ask us to delete it.
• Research and validation responses may be kept in anonymised or aggregated form.
• Legal and business records may be kept for longer where required by law.

If we do not have a fixed retention period, we will decide the period based on the nature of the data, the reason it was collected, legal requirements, and whether continued retention is necessary.

We use reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration, or disclosure.

However, no website, platform, or online service can be guaranteed to be completely secure. Users should avoid submitting highly sensitive information unless specifically requested through a secure channel.

Depending on where you are located and which laws apply, you may have rights including:

• The right to access your personal information
• The right to correct inaccurate information
• The right to request deletion
• The right to restrict processing
• The right to object to processing
• The right to data portability
• The right to withdraw consent where processing is based on consent

The ICO says privacy information should explain people's rights, including access, rectification, erasure, restriction, objection, and portability.

To exercise your rights, contact us at: info@navizix.com

If you join our waitlist or request updates, we may send you relevant information about NAVIZIX. You can unsubscribe or ask us to stop contacting you at any time.

NAVIZIX is intended for business users and is not directed at children. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last updated" date.

For questions about this Privacy Policy or how we handle personal information, contact:

NAVIZIX — Email: info@navizix.com