Privacy
Last updated: June 2026
Auxos Labs is a trading brand of Urbistondo Capital Ltd., registered in Cyprus under registration number HE 460958. This policy explains how we handle personal data when you visit the site, book a call, contact us, or work with us.
Controller
The controller is Urbistondo Capital Ltd., trading as Auxos Labs. Registration number: HE 460958. VAT number: 60079447M. Registered office: Tepeleniou 13, Tepelenio Court, 2nd floor, 8010 Paphos, Cyprus. Contact: javier@auxoslabs.com.
Children
This site and our services are intended for businesses, not children. We do not knowingly collect personal data from children.
What we collect
We may collect site analytics data, booking details, emails and messages you send us, client project materials, billing details, and the information needed to scope and deliver our services.
How we collect it
Most data comes directly from you when you visit the site, book a call, email us, send project materials, accept a proposal, or work with us. Some data comes from service providers such as Calendly, Vercel, Google, Revolut Business, email providers, AI tools, or client-approved project systems. We may also use public business information when researching a prospect or preparing a proposal.
Why we use it
We use this data to operate the site, respond to inquiries, run calls, prepare proposals, deliver client work, manage billing and accounting, improve the site, and meet legal obligations. The usual legal bases are legitimate interests, contract, legal obligation, and consent where we specifically ask for it.
Analytics
We use Google Analytics in cookieless consent mode and Vercel Web Analytics to understand site usage. We do not use advertising identifiers or sell analytics data.
Booking a call
Bookings run on Calendly, shown in an embedded scheduler. Details you enter there, such as name, email and notes, are processed by Calendly and shared with us so we can hold the meeting.
Client work and AI tools
When delivering client work, we may use AI, automation, hosting, analytics, storage, email, payment and project tools to analyse documents, workflows, messages, datasets or business processes. We do not use client data for model training unless separately agreed in writing.
Processors and transfers
Our providers may include Vercel, Google, Calendly, Revolut Business, email providers, AI model providers and other delivery tools agreed for a project. Some providers may process data outside Cyprus, the EEA or the UK, using their applicable transfer safeguards.
Security
We use reasonable technical and organisational measures to protect personal data, limit access to people and providers who need it for the work, and require confidentiality where appropriate. If we become aware of a personal-data breach, we will take reasonable steps to investigate, mitigate, and notify affected people or regulators where legally required.
Retention
We keep inquiry and email records while they are useful for the relationship, client materials for the duration of the engagement and a reasonable follow-up period, and invoices and accounting records for the period required by law.
Your rights
You can ask to access, correct, delete, restrict or receive your personal data, or object to certain processing. You can also complain to your local data protection authority. To exercise your rights, email javier@auxoslabs.com.
Rights requests
We may need to verify your identity before acting on a rights request. We normally respond within one month, unless a request is complex or repeated. If a request is clearly unfounded or excessive, we may refuse it or charge a reasonable fee where the law allows.
Complaints
We would prefer to deal with your concern directly first. You can also complain to your local supervisory authority. In Cyprus, the supervisory authority is the Commissioner for Personal Data Protection: dataprotection.gov.cy, commissioner@dataprotection.gov.cy.
Third-party links
This site may link to or embed third-party websites, tools and applications. We do not control those third parties and are not responsible for their privacy notices or data practices.