Privacy
Last updated 29 October 2026
We keep this simple. We collect little, we use it to run Dexryn, and we never sell it. This policy explains what we hold, why, who helps us handle it, and your rights under the UK GDPR and the EU GDPR.
Who is responsible (the controller). Dexryn · London SE2 9NT, United Kingdom · [email protected]. Send privacy questions and requests to [email protected].
1. What we collect and why
- When you ask for a demo or email us. Your name or business name, your email address, and anything you write or send us (for example a logo or photos). We use this to build your demo and reply to you. Lawful basis: taking steps at your request before a contract (Art. 6(1)(b)), and our legitimate interest in running the business (Art. 6(1)(f)).
- When you buy. Your business name, billing address, email, and tax or VAT number if you give one. Payment is handled by Stripe. We do not see or store your full card number. We use this to take payment, deliver your site, send receipts and keep accounting records. Lawful basis: contract, and legal obligation for tax and accounting records (Art. 6(1)(c)).
- Business contact details used to introduce Dexryn. If we ever contact a business about a free demo, we use only business contact details that are publicly available for that business (for example a business email address or listing). We tell you who we are, we send only a few messages, and we stop and delete your details as soon as you ask. Lawful basis: legitimate interest, and for emails to companies we follow the UK PECR and similar local rules.
- When you visit dexryn.com. Our hosting provider receives your IP address and basic device information so the site works and stays secure. We use your country, read by our host on the server, only to show prices in your local currency; we do not store it. We do not use advertising or tracking cookies. The animation on the homepage uses your browser's temporary session storage so it does not repeat. It is not sent to us.
2. Who we share data with
We use a small number of providers to run Dexryn. They process data for us under their own terms, and we share only what each needs:
- Stripe, for card payments, receipts and subscription billing. Stripe is also an independent controller for fraud prevention and its own legal duties. See stripe.com/privacy.
- Cloudflare, for hosting dexryn.com and your site, DNS, security and email routing for [email protected]. See cloudflare.com/privacypolicy.
- Google (Gmail), for sending and receiving the emails sent to and from [email protected]. See policies.google.com/privacy.
- Professional advisers and authorities, such as an accountant, or tax and law-enforcement authorities, where we are legally required.
We do not sell your data and we do not use it for advertising.
3. Transfers outside the UK and EU
Stripe, Cloudflare and Google operate globally, so your data may be processed outside the UK and the EU, including in the United States. Where that happens, it is protected by safeguards such as the UK International Data Transfer Addendum, EU Standard Contractual Clauses, or the UK-US and EU-US data bridge arrangements, as each provider sets out in its own documentation.
4. How long we keep it
- Demo requests and emails with people who do not become customers: up to 12 months, then deleted. If you ask us to delete your demo or details sooner, we do.
- Customers: for as long as we provide your service, then up to 6 years for tax and accounting records, as the law requires.
- Website server logs held by our hosting provider: kept for a short period set by that provider.
5. Your rights
Under the UK GDPR and the EU GDPR, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to our use of it, or move it to someone else. You can object at any time to us contacting you, and we will stop. Email [email protected] and we will reply within one month.
You can also complain to the regulator where you live: in the UK, the Information Commissioner's Office (ico.org.uk); in Romania, the National Supervisory Authority for Personal Data Processing (dataprotection.ro). If you are in Saudi Arabia or the UAE, we also respect your rights under the Saudi Personal Data Protection Law and the UAE Federal Decree-Law No. 45 of 2021 on personal data protection, and you can contact us in the same way.
6. Security and children
We use hosting and tools that encrypt data in transit, and we limit access to what we need. Our services are for businesses and are not directed at children.
7. Changes
If we change this policy, we will post the new version here with a new date.
8. Contact
Dexryn · London SE2 9NT, United Kingdom · [email protected]