Privacy.
Last updated: 30 May 2026
This privacy notice explains how Magentix collects, uses, stores and protects personal data submitted through this website and related enquiry forms.
Data controller
The data controller is Magentix, operating from Mauritius. For privacy matters, contact privacy@magentix.ai.
We have not appointed a statutory Data Protection Officer at this stage. Privacy matters are handled by our operations manager, who can be contacted via the pivacy email above.
Representatives
Magentix is established in Mauritius, which is outside both the United Kingdom and the European Economic Area. Because we offer services to, and process the personal data of, individuals in the UK and the EU, we have appointed representatives under Article 27 of the UK GDPR and Article 27 of the EU GDPR.
Our UK & EU representative is Prighter GmbH (“Prighter“), Schellinggasse 3/10, 1010 Vienna, Austria, reachable at dpo@prighter.com
You may raise any matter concerning our processing of your personal data with the relevant representative if you wish, as an alternative to contacting us directly at privacy@magentix.ai.
Data we collect
- Newsletter signups: email address, optional first name, a service-variant tag indicating which interest the signup relates to (general, IdSolid®, or ARBITR), the source page, and the signup timestamp.
- Expression-of-Interest submissions (ARBITR Pilot Programme and IdSolid Early-Design-Partner Programme): for organisation applicants - organisation name, contact name, role, business email, country, organisation size, industry, whether sensitive personal data is held, free-text descriptions of context and interest, the programme acknowledgement, and optional marketing consent. For individual applicants to the IdSolid programme - full name, role or profession, country, email, a free-text description of interest, the acknowledgement, and optional marketing consent.
- Direct contact: any information you include when you email us or book a Cal.com meeting.
Data category
Information you should not send us
Our website forms are for high-level enquiry and assessment, not for sensitive operational data. Please do not submit production personal data, customer records, credentials, secrets, confidential or regulated data, special category data (such as health, biometric, racial or ethnic, or similar sensitive information), or live security details through any form on this site. If a pilot or early-design-partner assessment requires sensitive operational information, we will agree an appropriate secure channel and confidentiality terms with you before any such information changes hands. Special category data in particular requires safeguards we deliberately do not apply to website forms, so please keep it out of them.
Lawful basis
- Newsletter subscriptions: your consent, captured at signup.
- ARBITR Pilot EOI: legitimate interest in assessing pilot suitability, together with your explicit acknowledgement of the programme terms.
- Direct contact replies: legitimate interest in responding to you.
Retention
- Newsletter subscribers: retained until you unsubscribe, or after three years of inactivity.
- EOI submissions: retained for two years from submission, unless you have opted in to broader contact.
- Direct-contact correspondence: retained for the duration of the active conversation plus one year.
Your rights
You may have the right to request access to your personal data, rectification, erasure, restriction of processing, portability, and objection to processing. Where processing is based on consent, you may withdraw that consent at any time. You also have the right to lodge a complaint with a supervisory authority - see Complaints below.
We do not use website enquiry data for solely automated decision-making or profiling that produces legal or similarly significant effects. Decisions about pilot and early-design-partner applications are made by people, not by automated processing.
To exercise any of these rights, contact privacy@magentix.ai. We may need to verify your identity before responding, to protect your data from being disclosed to anyone else.
Third-party processors
We use Cal.com for meeting bookings. We may use a transactional email provider for double opt-in and notification emails; if we do, the provider name will be listed here before processing begins. We use our self-hosted Umami installation for monitoring site performance. We do not use Google Analytics, Meta Pixel, or any marketing-analytics service at this phase.
Each third-party processor is engaged under a written data-processing agreement meeting the requirements of Article 28, including commitments on security and confidentiality.
International transfers
Website data is hosted on infrastructure located in the United Kingdom. Magentix is based in Mauritius, so authorised personnel in Mauritius may access personal data for the purposes described in this notice.
Where personal data is transferred internationally, we rely on applicable adequacy arrangements, standard contractual clauses, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or other lawful safeguards as appropriate. You may request further information about the safeguards that apply by contacting privacy@magentix.ai.
Complaints
UK residents may complain to the Information Commissioner's Office. EU residents may complain to their national data-protection authority. You may also raise any concern with our UK or EU representative, whose details appear above.