LEGAL PROTOCOLS

Effective Date: January 1, 2026

Last Updated: January 1, 2026

1. Data Controller

VeridianxMetrics ("we", "us", "our") is the data controller responsible for the processing of personal data collected through our website and services. Our registered office is located at Calle Estrella Naos 6, E3, Piso 3 C, Madrid, Spain. You may contact our data protection officer at [email protected].

2. Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: Full name, professional title, and organization name when you submit a contact form or request a service.
• Contact Data: Email address, phone number, and postal address provided through our contact forms or during project onboarding.
• Technical Data: IP address, browser type and version, operating system, device type, and pages visited — collected automatically through server logs and analytics tools.
• Communication Data: Any correspondence you send us via email, contact forms, or other channels, including the content of your messages.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the EU General Data Protection Regulation (GDPR):

• Consent (Article 6(1)(a)): Where you have given explicit consent for specific processing purposes, such as receiving marketing communications.
• Contractual Necessity (Article 6(1)(b)): Where processing is necessary for the performance of a contract with you or to take pre-contractual steps at your request.
• Legitimate Interest (Article 6(1)(f)): Where processing is necessary for our legitimate interests, such as improving our services, preventing fraud, and ensuring network security — provided these interests are not overridden by your fundamental rights.
• Legal Obligation (Article 6(1)(c)): Where processing is necessary to comply with a legal obligation under EU or Spanish law.

4. How We Use Your Data

Your personal data is used for the following purposes:

• Responding to your inquiries and providing requested information about our services.
• Managing our contractual relationship, including project delivery, invoicing, and support.
• Improving our website functionality, user experience, and service offerings.
• Complying with legal and regulatory obligations applicable to our operations in the European Union.
• Detecting, preventing, and addressing technical issues and security threats.

5. Data Sharing and Transfers

We do not sell, rent, or trade your personal data to third parties. We may share your data with:

• Service Providers: Trusted third-party processors who assist in operating our website, conducting business, or providing services to you (e.g., hosting providers, payment processors), bound by data processing agreements.
• Legal Authorities: When required by law, regulation, legal process, or governmental request.

Any transfer of personal data outside the European Economic Area (EEA) is conducted in compliance with Chapter V of the GDPR, using Standard Contractual Clauses (SCCs) or other approved transfer mechanisms.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Contact form submissions are retained for a maximum of 24 months. Project-related data is retained for the duration of the contractual relationship plus 6 years, in accordance with Spanish commercial and tax law.

7. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Article 15): The right to obtain confirmation of whether we process your data and to receive a copy of that data.
• Right to Rectification (Article 16): The right to request correction of inaccurate personal data.
• Right to Erasure (Article 17): The right to request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to Restriction (Article 18): The right to request restriction of processing under certain circumstances.
• Right to Data Portability (Article 20): The right to receive your data in a structured, commonly used, machine-readable format.
• Right to Object (Article 21): The right to object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receiving your request.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), access controls, regular security audits, and employee training on data protection practices.

9. Supervisory Authority

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) at https://www.aepd.es or with your local EU data protection supervisory authority.

Effective Date: January 1, 2026

1. Overview

At VeridianxMetrics, we are committed to delivering high-quality digital services. This Refund Policy outlines the conditions under which refunds may be issued for services purchased through our website or direct agreements.

2. Service Deposits

All projects begin with a non-refundable deposit that covers initial scoping, research, and resource allocation. The deposit amount is specified in each individual service agreement and is due before work commences. This deposit is non-refundable once the project has been initiated.

3. Milestone-Based Payments

Larger projects are typically structured around defined milestones. Each milestone payment becomes non-refundable upon delivery and client acceptance of the corresponding deliverable. If a deliverable does not meet the specifications agreed upon in the project scope, we will rectify the work at no additional cost before the milestone is considered accepted.

4. Full Project Refund

A full refund (excluding the initial non-refundable deposit) may be issued if:

• We fail to deliver any agreed-upon milestone within 30 days of the agreed deadline, and the delay is attributable solely to VeridianxMetrics.
• The client cancels the project before any milestone work has commenced.
• A mutual written agreement is reached between both parties to terminate the engagement.

5. Completed Work

No refund will be issued for work that has been completed, delivered, and accepted by the client. This includes delivered design assets, deployed code, published content, and completed consulting sessions.

6. Requesting a Refund

To request a refund, contact us at [email protected] with your project reference, the reason for the refund request, and any relevant documentation. We will review your request within 5 business days and respond with a resolution.

7. Dispute Resolution

In the event of a dispute regarding refunds, both parties agree to attempt resolution through good-faith negotiation before pursuing any legal remedies. This Refund Policy is governed by the laws of Spain and the European Union.