XYCLE INCLUDED IN VERDANTIX SMART INNOVATORS 2025
Legal
Privacy Policy
Last updated 30 July 2026
Who we are
Minviro Ltd is a life cycle assessment company registered in England and Wales, with offices in London, Perth and Shanghai. Minviro is the data controller for the personal data described in this policy. If you have a question about how we handle your data, contact us using the details at the end of this policy.
The information we collect
We collect information you give us directly, such as your name, work email address, telephone number, company or organisation, job role, and the content of any enquiry, form submission, trial registration or support request. When you use XYCLE we also process account information, and the project and model data you or your colleagues upload. When you visit our website we collect limited technical information, including IP address, browser and device type, referring pages and the pages you view.
How we use your information
We use personal data to respond to enquiries and scoping requests, to provide and administer free trials and XYCLE accounts, to deliver consultancy engagements, to provide support, to send you information you have asked for, to send marketing communications where you have chosen to receive them, to understand how our website is used so we can improve it, to keep our services secure, and to meet our legal and regulatory obligations.
Our lawful bases for processing
Where we process personal data to provide a service you have asked for, or to take steps before entering into a contract, we rely on performance of a contract. Where we send marketing communications to individuals, we rely on consent, which you can withdraw at any time. Where we process data to run and secure our business, to understand website use, or to contact business prospects about services relevant to their professional role, we rely on our legitimate interests, having considered the impact on you. Where the law requires us to retain or disclose information, we rely on legal obligation.
When we share information
We do not sell personal data. We share it with service providers who act on our instructions, including hosting, website, analytics, customer relationship management, email and support providers. We may share information with professional advisers, and with regulators or law enforcement where we are legally required to do so. If our business is reorganised or transferred, personal data may be shared as part of that transaction. All providers are bound by contractual obligations to protect the data they process on our behalf.
International transfers
We operate across the United Kingdom, the European Union, Australia and China, and some of our providers are located outside the UK and the European Economic Area. Where personal data is transferred internationally, we put appropriate safeguards in place, such as UK and EU standard contractual clauses or a finding of adequacy, so your data continues to receive an equivalent level of protection.
How long we keep information
We keep personal data only for as long as we need it. Enquiry and prospect records are retained for up to two years from our last meaningful contact. Customer and engagement records, including contractual and accounting records, are retained for the duration of the relationship and for up to seven years afterwards to meet legal and tax requirements. Trial account data is deleted after the trial ends unless the account converts to a paid plan. Where data is no longer needed, it is deleted or anonymised.
Your rights
Depending on where you live, you have rights over your personal data. These include the right to access a copy of the data we hold, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent to marketing at any time. You can exercise any of these rights by contacting us. We will respond within one month. You also have the right to complain to a supervisory authority, which in the United Kingdom is the Information Commissioner’s Office.
Cookies and analytics
Our website uses cookies and similar technologies. Strictly necessary cookies make the site work and cannot be turned off. Analytics cookies help us understand how the site is used, and are set only where you have agreed to them. You can change your preferences at any time through your browser settings or our cookie controls.
How we protect information
We apply established security practices and recognised control frameworks. Data is encrypted in transit and at rest using industry standard encryption, access is restricted using least privilege principles and multi-factor authentication, corporate devices are centrally managed, and our security programme is reviewed as standards and regulations evolve.
Children
Our services are intended for business use and are not directed at children. We do not knowingly collect personal data from anyone under the age of 16.
Changes to this policy
We review this policy regularly and may update it to reflect changes to our services, our providers or the law. Where a change is significant, we will make that clear on this page. The date at the top shows when the policy was last updated.
How to contact us
To ask a question about this policy, or to exercise any of your rights, contact us at privacy@minviro.com, or write to Minviro Ltd, London, United Kingdom.