Privacy Policy

Last updated: 24 July 2026

1. Introduction

This Privacy Policy explains how Pillarix ("Pillarix", "we", "us", or "our") collects, uses, and protects personal data when you visit pillarix.io or submit a demo request for Pillarix Hub, our Digital Product Passport platform (together, the "Service").

This policy applies only to personal data processed through this website. It does not cover product data or end-customer data that our customers process inside Pillarix Hub itself, which is governed by the applicable customer agreement and Data Processing Agreement.

Read the Pillarix Platform Privacy Notice

2. Who We Are

Pillarix operates pillarix.io and Pillarix Hub, a cloud-based platform that helps manufacturers, importers, and distributors create, publish, and manage Digital Product Passports.

For the purposes of applicable data protection law, including the EU General Data Protection Regulation (GDPR), Pillarix is the data controller for personal data processed through this website. You can reach us at contact@pillarix.io with any question about this Privacy Policy or about how we handle your personal data.

3. Information We Collect

We collect a limited amount of personal data through this website — only what is necessary to respond to enquiries, operate the site reliably, and keep it secure. You do not need to create an account to browse the website.

Contact form information

When you submit our demo request form, we collect the information you provide: your name, company name, work email address, country, product category, and any message you choose to include. We use this information solely to respond to your enquiry and prepare a relevant demonstration.

Business contact details

If you contact us directly by email, we collect the contact details and content of that correspondence, including your name, email address, and anything else you choose to share, in order to respond to you.

Technical information

Our website and hosting infrastructure automatically log limited technical information for security, performance, and troubleshooting purposes, such as request timestamps, pages requested, and error events.

IP address

Your IP address is processed automatically by our hosting and security infrastructure, and, where enabled, by Google reCAPTCHA and, if you have consented, Google Analytics. We do not use IP addresses to identify you personally.

Browser/device information

We may process general browser and device information, such as browser type and version, operating system, and screen size, to ensure the website displays correctly and, where you have consented, to compile aggregated analytics.

4. Cookies and Analytics

We use a small number of cookies to run this website and, where you consent, to understand how it is used. You can accept, reject, or customize non-essential cookies at any time using the cookie banner or the "Cookie Preferences" link in the website footer. For details on the individual cookies we use, please see our Cookie Policy.

Google Analytics

With your consent, we use Google Analytics to understand how visitors use our website, such as which pages are viewed and how visitors navigate the site. This processing only takes place after you give consent through our cookie banner, and you can withdraw consent at any time. Data collected by Google Analytics is processed by Google in accordance with Google's own data processing terms.

5. Google reCAPTCHA

We use Google reCAPTCHA Enterprise on our demo request form to protect the website against spam and automated abuse. reCAPTCHA analyses interactions with the form and may process technical and usage data, including your IP address and device information, to distinguish human visitors from automated software.

This processing is necessary for the security of our website and forms, and does not depend on cookie consent. Google's use of this data is described in the Google Privacy Policy (policies.google.com/privacy) and Google Terms of Service (policies.google.com/terms).

6. How We Use Your Information

To respond to demo requests and other enquiries you submit to us
To provide, operate, and maintain the pillarix.io website
To protect the website and our systems against fraud, abuse, and security incidents
To understand how visitors use our website, where you have given consent, so that we can improve it
To comply with our legal obligations

7. Legal Basis for Processing (GDPR)

Depending on the purpose, we rely on the following legal bases under Article 6 GDPR:

Responding to demo requests and business enquiries: Article 6(1)(b), steps necessary prior to entering into a contract, and Article 6(1)(f), our legitimate interest in responding to prospective customers.
Operating and securing the website, including Google reCAPTCHA: Article 6(1)(f), our legitimate interest in keeping the website functional, available, and secure.
Google Analytics and other non-essential cookies: Article 6(1)(a), your consent, given through the cookie banner, which you may withdraw at any time.
Compliance with legal obligations: Article 6(1)(c).

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy. Demo request and business correspondence data is generally retained for as long as needed to progress the relevant business relationship and a reasonable period afterwards, and is deleted or anonymised when no longer needed.

Technical and security logs are retained for a limited period sufficient to investigate incidents. Analytics data collected with your consent is retained in accordance with Google Analytics' standard retention settings, and is deleted earlier if you withdraw your consent.

We do not sell personal data. We share personal data only with service providers who process it on our behalf and under contract, including our email and CRM providers used to manage demo requests, our hosting provider, and Google (for reCAPTCHA and, with your consent, Analytics), and, where required, professional advisers or authorities to comply with a legal obligation.

10. International Transfers

Some of our service providers, including Google, may process personal data outside the European Economic Area (EEA). Where this occurs, we rely on appropriate safeguards recognised under GDPR, such as the European Commission's Standard Contractual Clauses, so that your personal data continues to receive an equivalent level of protection.

Subject to the conditions and exceptions set out in applicable law, you have the following rights in relation to your personal data:

Right of access to the personal data we hold about you
Right to rectification of inaccurate or incomplete data
Right to erasure of your personal data, where applicable
Right to restriction of processing, where applicable
Right to data portability, where applicable
Right to object to processing based on our legitimate interests
Right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
Right to lodge a complaint with your local data protection supervisory authority

12. Security

We apply appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, or alteration, including encryption in transit, access controls, and the use of reputable, security-conscious infrastructure and service providers.

No method of transmission or storage is completely secure, and we cannot guarantee the absolute security of information transmitted to us.

13. Contact Information

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at contact@pillarix.io.