Legal, privacy & security
Legal terms written for practical reading.
Most legal pages exist to protect the company from the reader. Ours is on a site whose entire argument is that you should be able to check things — so a privacy policy nobody can follow would undermine everything else here. Where the law requires precise wording we use it, and then say what it means underneath.
01
Privacy.
We collect very little, and almost all of it is something you typed into a form on purpose. We do not buy contact data, we do not enrich what you give us against third-party databases, and we do not sell anything to anyone.
Your name, company, email, role and the problem you described. Used to reply to you and, if we work together, to run the engagement. Kept while the relationship is live and for a defined period afterwards for contractual and tax reasons.
Google Analytics 4 integration is available but disabled until configured. When enabled, Google measures page visits and accepted enquiries only after you allow analytics. Advertising features are disabled, and form answers are not sent as analytics event fields. The site owner must publish the chosen retention period and processing details before activation.
Anything in the systems we work on. Governed by the engagement contract and a data processing agreement, not by this page — that agreement takes precedence and is negotiated before work starts.
No selling or sharing for anyone else's marketing. No purchased lists. No automated decision-making about you. No tracking you across other websites.
If you fill in the contact form, a person at Vyrsa reads what you wrote and replies. That is the whole of it. Ask us to delete it and we will, and we will confirm when it is done.
Contact Us and the Vyrsa Assure landing-page forms are sent to Deal Circle, our CRM, together with supplied answers and campaign labels. The remaining demonstration form is not connected and does not send or save enquiries. Vyrsa Logic Ltd (UK), company number 11383928, is responsible for enquiries submitted through this website. Processing locations and retention periods will be named here before analytics is enabled. Three jurisdictions apply — UK GDPR and the Data Protection Act, the EU GDPR, and India's Digital Personal Data Protection Act — so any material change should be checked before it goes live.
02
Cookies.
Optional analytics is controlled by your choice. When configured and accepted, Google Analytics 4 uses cookies to measure visits and enquiries. When disabled or declined, no Google Analytics tag loads. Fonts and the QR generator are served from our own site. Your cookie preference is stored locally in your browser.
One thing does reach outside, and only if you ask it to. The client testimonial clips on the Work page are hosted on YouTube. Nothing is requested from them until you click play — until then YouTube is not contacted at all. If you do play one, your browser connects to YouTube and Google may set its own cookies, exactly as if you had opened the clip on youtube.com. Every clip links to its original, so you can watch it there instead if you would rather.
That is unusual enough to be worth stating precisely, because it is checkable: open your browser's developer tools, look at the network tab and the storage tab, and count. On any page, before you play a testimonial clip, a name that is not ours means this section is wrong — and we would like to know.
The one thing we do store is your answer to the notice at the bottom of the screen — kept in your browser's local storage, not in a cookie, and never sent to us. It exists so a refusal is remembered rather than re-requested on every visit.
Records which categories you allowed, the date you answered, and the version of this notice you saw. Set only when you answer. Kept for twelve months, then you are asked again. No consent is required for this one, because we cannot honour a refusal we are not permitted to remember. Clearing your browser data removes it.
None. If it is ever added it will be named here — provider, cookie names, retention period, and where the data is processed — before it is switched on, and it will not run for anyone who has not said yes. Consent given today would apply to a tool that does not yet exist, which is precisely why refusing costs you nothing.
No pixels, no remarketing tags, no audience lists, and no personal data sold or shared with an advertising network. Listed so that the absence is on the record rather than merely unmentioned.
Our host records requests — IP address, timestamp, page, user agent — as every web server does, to serve pages and resist abuse. That is a legitimate interest rather than something you consent to, and it is not used to build a profile of you.
The notice can be reopened from the Cookies control in the footer of every page, on any visit. Turning a category off does not merely stop future collection — it deletes what is on your device for this site. There is no cookie wall: refuse everything and the site is identical, because nothing here depends on measuring you.
·
03
Security.
We are frequently asked to fill in security questionnaires, so this section exists to answer most of one in advance. Where a control is in place we say so; where it is not yet, we say that too — a security page that claims everything is the least reassuring kind.
Least privilege, multi-factor authentication on everything that supports it, and access to client systems requested per engagement rather than held permanently.
Standard practiceWe work in your accounts where possible, so you can see and revoke what we have. Credentials are never shared over email or chat.
Standard practiceSecrets held in a managed store rather than in repositories. Dependency and secret scanning on the work we deliver.
Standard practiceA named route to reach us, and a commitment to tell you about anything affecting your data quickly rather than after we have finished investigating.
Confirm the timeframeWhere we hold a formal certification we will name it, its scope and its expiry — not a logo with no year attached.
See caveat belowA published list of the third parties involved in delivering our services, and notice before we add one.
List to be published04
Accessibility.
We build accessible interfaces for clients, so it would be a poor advertisement if this site were not one. It is designed to meet WCAG 2.2 at level AA: keyboard operable throughout, sufficient colour contrast, honest heading structure, and every animation collapsing to a static state when a visitor has asked their system to reduce motion.
If something here does not work for you, tell us and we will fix it — and we would genuinely rather hear about it than not.
The interactive pages on this site are the parts most likely to fail accessibility testing, which is exactly why they are the parts we test.
05
Terms.
Website terms cover the use of this site. They are not the terms you will contract on — those live in the engagement agreement, with milestones, fees and exit terms written down before you sign rather than revealed afterwards.
Nothing on this website is an offer, and the figures in the interactive tools are illustrative. That is a genuine limitation rather than a disclaimer designed to let us move a number later: the whole point of the way we work is that your real numbers get written down before anyone signs anything.
06
Your rights, and how to use them.
Depending on where you are, you have rights to see what we hold about you, correct it, delete it, restrict what we do with it, take it elsewhere, or object to it entirely.
We would rather you exercised them by sending one plain email than by finding the correct legal phrase. Write and say what you want; we will treat it as a valid request and confirm in writing when it is done, within the statutory period and usually well inside it.
UK GDPR and the Data Protection Act 2018. You may complain to the Information Commissioner's Office, though we would prefer the chance to fix it first.
ICOEU GDPR. You may complain to your national supervisory authority.
Local DPAThe Digital Personal Data Protection Act 2023, and the Data Protection Board established under it.
DPBQuestions about any of this
Ask us in plain English. We will answer the same way.
Including the awkward ones. If you are running a vendor security assessment and need something specific, say so and we will fill it in properly rather than sending a brochure.
Get in touch →Vyrsa Logic Ltd (UK) · Vyrsa Logic Private Limited (India) · United Kingdom · European Union · India