Privacy Policy
Last updated: 18 May 2026
1. Who We Are
XeonTek Ltd("we", "us", "our") is a company registered in England and Wales with company number 08454858. Our registered office is 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom.
For any data protection enquiries, contact us at privacy@xeontek.com.
2. How We Use Personal Data
This website collects limited personal data. We do not require you to create an account, we do not process payments through this site, and we do not use website analytics cookies.
| Activity | Data involved | Purpose | Lawful basis | Retention |
|---|---|---|---|---|
| General contact enquiries | Name, email address, subject, message content | Responding to your enquiry and keeping a business record | Legitimate interests in responding to business enquiries, or steps before entering into a contract where your enquiry relates to potential work | Up to 24 months unless a longer period is needed |
| Recruitment or application enquiries | Name, email address, message content, role applied for, and any application details you choose to provide | Reviewing and responding to recruitment enquiries | Legitimate interests in managing recruitment, or steps before entering into an employment or contractor arrangement | Up to 12 months unless you are engaged by us or agree to a longer retention period |
| Turnstile anti-spam verification | Browser and device signals, IP address, challenge outcome, and security tokens processed by Cloudflare Turnstile | Protecting the contact form from spam and abuse | Legitimate interests in site security and abuse prevention | Retained by Cloudflare according to its service and security retention practices |
| Hosting, CDN, and security logs | IP address, request metadata, user agent, timestamps, and requested URLs, including PDF/whitepaper requests | Delivering the website, preventing abuse, and diagnosing issues | Legitimate interests in operating and securing the website | Retained by Cloudflare according to configured service and log retention settings |
| Email delivery | Contact form message data routed to our mailbox | Delivering your message to the relevant XeonTek mailbox | Legitimate interests or steps before entering into a contract, depending on the enquiry | Follows the relevant enquiry retention period above, unless needed for legal or compliance reasons |
| Legal or compliance correspondence | Correspondence and related business records | Handling legal, regulatory, or compliance matters | Legal obligation or legitimate interests | Up to 6 years where necessary |
3. Cookies and Security Technologies
This website does not use analytics cookies. Cloudflare Turnstile is loaded on the contact form to verify that submissions are legitimate. Turnstile may use cookies or similar technologies, browser signals, and security tokens for bot detection and abuse prevention. We treat this as strictly necessary for protecting the contact form and the website.
If we add non-essential cookies or analytics in future, we will update this policy and request consent where required.
4. Third-Party Processors and Transfers
We use Cloudflare, Inc. to host and secure this website, provide CDN services, run Turnstile, operate the contact form Worker, and route contact form messages through Cloudflare Email Routing. Cloudflare processes personal data on our behalf as a service provider.
Cloudflare may process data outside the United Kingdom and European Economic Area. Where this happens, we rely on Cloudflare's data processing terms and appropriate transfer safeguards, such as standard contractual clauses and the UK Addendum or other safeguards recognised under UK data protection law.
We do not sell or rent your personal data. We may disclose personal data where required by law or where necessary to protect our legal rights.
5. Automated Decision-Making and AI
This public website does not provide an AI system to visitors and does not use automated decision-making or profiling that produces legal or similarly significant effects. Contact form submissions are not used to train AI models.
XeonTek develops AI-enabled products and research, but product-level AI disclosures, risk information, and user documentation are provided in the relevant product or service context. This website itself does not make decisions about you using AI.
6. Data Security
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), secure hosting infrastructure, and access controls. However, no method of transmission over the internet is completely secure.
7. Your Rights
Under the UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Request erasure of your data
- Restrict or object to processing
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time where consent is the lawful basis
To exercise any of these rights, contact us at privacy@xeontek.com. We will respond within one calendar month.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.
9. Contact
If you have questions about this Privacy Policy, contact us at privacy@xeontek.com.
XeonTek LtdCompany number 08454858
Registered in England and Wales
27 Old Gloucester Street, London, WC1N 3AX, United Kingdom