Privacy Policy

Last updated: 26 March 2026 Effective date: 26 March 2026

This Privacy Policy explains how Vetroux LLC ("Vetroux", "we", "us", "our"), a limited liability company registered in the Kyrgyz Republic, collects, uses, shares, and protects personal information when you visit vetroux.design (the "Site"), contact us, or use our design services (the "Services").

We respect your privacy and aim to comply with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA ("CCPA"), and the Law of the Kyrgyz Republic on Personal Data.

If you have questions, please contact us at hello@vetroux.design

1. Who We Are (Data Controller)

For the purposes of EU and UK data protection law, the data controller is:

Vetroux LLC Registered in the Kyrgyz Republic Email: hello@vetroux.design

Because Vetroux is established outside the EU and UK but offers services to clients located in those regions, we may be subject to GDPR and UK GDPR by virtue of Article 3(2) GDPR. We have not appointed an EU representative under Article 27 GDPR at this time; if our processing activities expand to require one, this Policy will be updated accordingly.

2. Information We Collect

We collect the following categories of personal data:

2.1 Information You Provide Directly

  • Contact details: name, email address, company name, country.
  • Project information: service interest, budget range, project description, files or materials you send us.
  • Communication content: messages, emails, and call recordings (where applicable and consented to).
  • Billing information: company billing details and tax IDs (payment card data itself is processed by our payment processors and is not stored by us).

2.2 Information Collected Automatically

  • Technical data: IP address, browser type and version, device type, operating system, time zone, referring URL.
  • Usage data: pages viewed, time on page, clicks, navigation paths, and similar analytics data collected through Google Analytics.

See our Cookie Policy for details on cookies and similar technologies.

2.3 Information from Third Parties

We may receive information about you from publicly available sources (e.g., LinkedIn, company websites) when assessing potential business partnerships.

We do not intentionally collect sensitive categories of data (such as health, racial or ethnic origin, religion, biometric data) and ask that you do not send such information through our Site or contact forms.

3. How We Use Your Information

We use personal data for the following purposes:

Purpose
Legal basis (GDPR)
Respond to inquiries and provide quotes
Pre-contractual steps (Art. 6(1)(b)) / Legitimate interest (Art. 6(1)(f))
Deliver Services and manage client relationships
Performance of a contract (Art. 6(1)(b))
Send invoices, process payments, keep accounting records
Legal obligation (Art. 6(1)(c)) / Contract (Art. 6(1)(b))
Improve and secure the Site (analytics, error monitoring)
Legitimate interest (Art. 6(1)(f)) / Consent for non-essential cookies(Art. 6(1)(a))
Send marketing emails about our Services
Consent (Art. 6(1)(a)) or legitimate interest for existing clients(soft opt -in)
Comply with legal obligations and respond to lawful requests
Legal obligation (Art. 6(1)(c))
Display project work in our portfolio
Legitimate interest (Art. 6(1)(f)) or consent where required

For California residents, the corresponding business purposes under the CCPA include providing services, communicating with you, security, debugging, and compliance.

4. How We Share Your Information

We do not sell your personal data. We share it only with the following categories of recipients, under appropriate safeguards:

  • Service providers (data processors) acting on our behalf, such as:

    • Hosting and infrastructure providers
    • Google LLC (Google Analytics, Google Workspace)
    • Email and CRM platforms used for client communication
    • Payment processors and accounting tools
    • Video call platforms(e.g., Zoom, Google Meet) for client meetings
  • Subcontractors (e.g., individual designers, developers, or consultants engaged by Vetroux) who require access to deliver Services, bound by confidentiality obligations.
  • Professional advisors (lawyers, accountants, auditors) when reasonably necessary.
  • Authorities where required by law, court order, or to protect our rights.
  • Successor entities in case of merger, acquisition, or sale of assets, subject to confidentiality.

For the purposes of the CCPA, we have not "sold" or "shared" personal information for cross- context behavioral advertising in the preceding 12 months. If this changes, this Policy will be updated and California residents will be offered an opt-out.

5. International Data Transfers

Vetroux is based in the Kyrgyz Republic, which is not currently the subject of an adequacy decision by the European Commission or the UK Information Commissioner's Office.

Where we receive personal data from individuals or clients in the EU, UK, or EEA, we rely on appropriate safeguards under Articles 46–49 GDPR for such transfers, including:

  • Standard Contractual Clauses(SCCs) approved by the European Commission, executed with EU /UK clients on request.
  • Your explicit consent for specific transfers, where applicable.
  • Necessity for the performance of a contract between you and Vetroux (Art. 49(1)(b) GDPR).

We also use service providers (such as Google) that are themselves subject to international transfer safeguards. You may request a copy of the relevant safeguards by contacting hello@vetroux.design.

6. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes described in this Policy:

  • Inquiry data (contact form): up to 24 months after the last interaction, unless a contract is signed.
  • Client and project data: for the duration of the engagement plus up to 7 years for accounting, tax, and legal - defense purposes.
  • Marketing data: until you unsubscribe or withdraw consent.
  • Analytics data: as configured in Google Analytics (default retention 14 months), unless we adjust this period.

When retention is no longer required, we delete or anonymize the data.

7. Your Rights

Depending on your location, you have some or all of the following rights:

7.1 Under GDPR / UK GDPR

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure ("right to be forgotten") — ask us to delete your data in certain circumstances.
  • Restriction — ask us to limit how we use your data.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interests, including direct marketing.
  • Withdraw consent at any time, where processing is based on consent.
  • Lodge a complaint with your local data protection authority.

7.2 Under CCPA (California Residents)

  • Right to know what personal information we collect, use, disclose, and(if applicable) sell or share.
  • Right to delete personal information we have collected.
  • Right to correct inaccurate personal information.
  • Right to opt out of the sale or sharing of personal information (not applicable, as we do not sell or share).
  • Right to limit use of sensitive personal information (we do not knowingly collect such data).
  • Right to non-discrimination for exercising your rights.

To exercise your rights, email hello@vetroux.design with a description of your request. We may need to verify your identity. We will respond within the timeframes required by applicable law (typically 30 days under GDPR, 45 days under CCPA).

You may also authorize an agent to act on your behalf, subject to verification.

8. Security

We apply reasonable technical and organizational measures to protect personal data, including access controls, encryption in transit, secure storage with reputable cloud providers, and confidentiality obligations on personnel and subcontractors.

No method of transmission or storage is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant authority as required by law.

9. Children's Privacy

Our Services are directed to businesses and professionals and are not intended for children under 16. We do not knowingly collect personal data from children. If you believe we may have done so, please contact us and we will delete the data.

10. Third-Party Links

The Site may contain links to third-party websites (e.g., LinkedIn, Instagram, Behance, Dribbble). We are not responsible for the privacy practices of those sites. Please review their own privacy policies.

11. Changes to This Privacy Policy

We may update this Policy from time to time. The updated version will be posted on the Site with a new "Last updated" date. Material changes will be communicated to active clients by email. Your continued use of the Site after the effective date constitutes acceptance of the updated Policy.

12. Contact Us

If you have questions, requests, or complaints about this Privacy Policy or our handling of your personal data, please contact:

Vetroux LLC Registered in the Kyrgyz Republic Email: hello@vetroux.design Website:https://vetroux.design

If you are in the EU, UK, or EEA, you also have the right to lodge a complaint with your local supervisory authority. A list of EU authorities is available at edpb.europa.eu; the UK authority is the ICO at ico.org.uk.