Privacy notice

Nox Foundry S.à r.l., 103 Avenue de la Faïencerie, L-1511 Luxembourg, is the controller for the processing described in this notice. Privacy enquiries may be sent through the secure contact form.

When you submit a diagnostic brief, we process the name, business email, organisation, mandate type, jurisdictions, decision, timing, context, submission page and any referrer supplied by the browser. Our hosting and form providers also process limited technical data, such as IP address, browser information, requested pages, timestamps and security logs.

We use enquiry data to respond, assess a possible engagement, carry out conflict and scope checks, secure the website and protect our rights. The legal bases are steps requested before a contract, our legitimate interests in managing professional enquiries and website security, and compliance with legal obligations where applicable.

Access is limited to authorised Nox Foundry personnel and providers supporting hosting, forms, email and document storage. The website is hosted by Hostinger. Diagnostic submissions are recorded through Google Forms and Google Sheets within Nox Foundry’s Google Workspace environment. We do not sell personal data.

Where a provider processes data outside the European Economic Area, the transfer is governed by an applicable legal mechanism and appropriate safeguards.

Enquiries that do not lead to an engagement are reviewed for deletion no later than 24 months after the last substantive contact, unless a longer period is required to protect legal claims or meet legal duties. Engagement records are retained according to the applicable contractual and legal periods. Technical logs follow the security and operational periods applied by the relevant provider.

The site uses limited local browser storage to remember the selected language, prevent immediate duplicate form submissions and respect motion preferences. No advertising tracker or non-essential analytics cookie is active in this release. Hosting logs and Google Search Console may provide aggregated technical and search-performance information.

Subject to the GDPR and its conditions, you may request access, correction, deletion, restriction or portability, or object to processing based on legitimate interests. You may also lodge a complaint with the Luxembourg National Commission for Data Protection, the CNPD.

We may update this notice as the website, intake process or providers change. The date above identifies the current version.