Privacy Policy

NCVertex is a technology services company that designs and delivers custom business systems, digital platforms, AI automation pipelines, workflow automation, system integrations, and digital transformation programmes for enterprise and mid-market clients.

This Privacy Policy applies to the NCVertex website at https://ncvertex.com and to the professional services we provide. It explains what information we collect, why we collect it, how we use and protect it, and what rights you have in relation to that information.

We take privacy seriously. Our data practices are designed to be minimal, purposeful, and transparent — consistent with the trust required in enterprise client relationships.

We collect information in two contexts: through this website and through active client and project engagements.

• To respond to project enquiries, prepare scoping proposals, and provide service quotations.
• To design, build, test, and deploy the systems and automations agreed under a service engagement.
• To manage active client relationships, provide project updates, and deliver ongoing support.
• To coordinate with client team members and third-party stakeholders involved in delivery.
• To improve our website content, service descriptions, and user experience based on aggregated usage data.
• To maintain records necessary for legal, financial, and regulatory compliance.
• To send relevant updates about your active project or our services — you may opt out of non-essential communications at any time.

• We do not sell, rent, or licence your personal or business information to any third party.
• We do not use client or visitor data for advertising, retargeting, or audience building.
• We do not build behavioural profiles of individuals for commercial or analytical purposes.
• We do not share project data, system credentials, or business information with other clients or external parties.
• We do not use automated decision-making that produces legal or significant effects on individuals without human oversight.

Business systems and automation engagements may require NCVertex to access or process client-side operational data — including database records, workflow inputs, API payloads, and business transaction data — as part of project delivery. This section explains how that data is handled.

• Client data accessed during delivery is used exclusively for the purpose of building, testing, or configuring the agreed system.
• NCVertex staff handle client data only to the extent necessary to deliver the contracted scope.
• Credentials, API keys, and access tokens shared for integration work are stored securely and revoked or transferred to the client at project completion.
• We do not retain access to client systems beyond the agreed support period unless a managed service agreement is in place.
• Project data is not used as training data for AI models unless explicitly agreed in writing.

We limit data sharing to what is operationally necessary. The following categories of third parties may receive relevant information:

• Infrastructure providers— cloud hosting and database services used to run our website and deliver client systems (e.g., AWS, Neon, Cloudflare). These providers access data only as required by their infrastructure role and operate under data processing agreements.
• Project delivery tools— collaboration, project management, and communication platforms used to coordinate delivery (e.g., Notion, GitHub, Google Workspace). Data shared is limited to project coordination information.
• Analytics tools— anonymised website usage data is processed by analytics providers to help us understand how visitors use our website.
• Legal or regulatory requirements— we may disclose information where required by applicable law, court order, or regulatory obligation.

We do not share client project data, business system details, or technical specifications with any external party without prior written consent.

We apply appropriate technical and organisational security measures across our operations:

• All data in transit is encrypted using TLS 1.2 or higher.
• Access to project systems, client credentials, and sensitive data is restricted to authorised personnel only, using role-based access controls.
• Credentials and API keys are stored in encrypted secret management systems — never in plaintext files or version control.
• Our development and delivery environments use isolated access, with production credentials separated from development environments.
• We perform regular reviews of access rights, particularly at project handover and team changes.

While we take all reasonable precautions, no system connected to the internet can be guaranteed completely secure. If you believe your information has been compromised, please contact us immediately at hello@ncvertex.com.

We retain information for as long as is necessary for the purpose it was collected, or as required by applicable law:

When the retention period expires, data is securely deleted or anonymised. You may request earlier deletion subject to any legal obligations we must fulfil.

Depending on your location and applicable data protection law, you may have the following rights regarding your personal information:

• Access— request a copy of the personal information we hold about you.
• Correction— request correction of inaccurate or incomplete information.
• Deletion— request deletion of your personal data, subject to any legal retention obligations.
• Restriction— request that we restrict how we process your data in certain circumstances.
• Portability— receive your personal data in a structured, machine-readable format.
• Objection— object to our processing of your data where it is based on legitimate interests.
• Withdraw consent— where processing is based on your consent, withdraw that consent at any time.

To exercise any of these rights, contact us at hello@ncvertex.com. We will respond within 30 days. We may need to verify your identity before processing certain requests.

We use cookies and similar tracking technologies on this website. Cookies we use fall into two categories:

• Essential cookies— necessary for the website to function correctly (e.g., session management for authenticated users of the admin panel).
• Analytics cookies— anonymised data used to understand how visitors use our website and improve our content. No personal profiles are built from this data.

We do not use advertising cookies, third-party tracking pixels, or cross-site behavioural tracking. Most browsers allow you to control cookie preferences via their settings. For full details, see our Cookie Policy.

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal obligations, or data practices. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. For significant changes affecting active client engagements, we will notify the relevant client contact directly.

If you have questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how your information is being handled, please contact us:

We aim to respond to all privacy-related enquiries within 5 business days.