Privacy Policy

How we collect, use, and protect your personal information

Last updated: 15th January 2026

Data Controller Information

neurotrixum SARL, with registered office at Rue Philippe II 34, 4815 Esch-sur-Alzette, Luxembourg (Registration Number: RCSB968574), is the data controller responsible for the processing of your personal data through our website and services.

Data We Collect

The data we collect from you may include the following categories of personal information:

  • Contact Information: When you contact us through our website forms, we collect your name, email address, phone number, company name, and any message content you provide.
  • Website Usage Data: We automatically collect information about how you interact with our website, including IP addresses, browser type, device information, pages visited, and time spent on our site.
  • Communication Records: Records of correspondence between you and neurotrixum, including emails, phone calls, and support tickets.
  • Service Data: If you become a client, we may collect additional information necessary to provide our analytics services, including business information and technical requirements.

How We Use Your Information

We use of your data is based on legitimate business interests and, where required, your consent. The purposes for which we process your personal information include:

  • Service Provision: To respond to your enquiries, provide information about our services, and deliver our e-commerce analytics solutions.
  • Communication: To communicate with you about our services, respond to your requests, and provide customer support.
  • Business Operations: To manage our business relationships, process contracts, and maintain accurate records.
  • Website Improvement: To analyse website usage patterns and improve our online services and user experience.
  • Legal Compliance: To comply with applicable laws, regulations, and legal obligations.
  • Marketing: With your consent, to send you information about our services and industry insights that may be of interest to you.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

  • Consent: Where you have given clear consent for us to process your personal data for specific purposes.
  • Legitimate Interests: Where processing is necessary for our legitimate business interests, such as providing services and improving our website.
  • Contractual Necessity: Where processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract.
  • Legal Obligation: Where we need to comply with legal or regulatory requirements.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

  • Service Providers: With trusted third-party service providers who assist us in operating our website and providing our services, under strict confidentiality agreements.
  • Legal Requirements: When required by law, court order, or other legal process, or to protect our rights, property, or safety.
  • Business Transfers: In the event of a merger, acquisition, or sale of business assets, your information may be transferred as part of the transaction.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

  • Contact Form Data: Retained for up to 3 years from the date of submission
  • Client Data: Retained for the duration of the business relationship plus 7 years for legal and accounting purposes
  • Website Analytics Data: Retained for up to 26 months in accordance with data protection regulations
  • Marketing Communications: Until you unsubscribe or withdraw consent

Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of Access: You can request copies of your personal data
  • Right to Rectification: You can request correction of inaccurate or incomplete data
  • Right to Erasure: You can request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: You can request limitation of how we process your data
  • Right to Data Portability: You can request transfer of your data to another organisation
  • Right to Object: You can object to processing based on legitimate interests or for marketing purposes
  • Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure data transmission protocols, access controls, and regular security assessments.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place, including adequacy decisions by the European Commission or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out using the following contact information:

Supervisory Authority

You have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (Commission nationale pour la protection des données - CNPD) if you believe your data protection rights have been violated. Contact details for the CNPD can be found at cnpd.public.lu.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.