CAYPAXLoading
Loading
Effective: 2026-07-22 · Last updated: 2026-07-24
This website is operated by CAYPAX INC. (“CAYPAX”, “we”, “us”), a technology company established in the Cayman Islands and operating within the Cayman Enterprise City special economic zone. For the purposes of the Cayman Islands Data Protection Act (2021 Revision) (the “DPA”), CAYPAX INC. is the data controller of personal data collected through this website.
Privacy enquiries and data subject requests may be submitted through the contact page of this website.
The DPA is the primary data protection legislation of the Cayman Islands. It sets out eight data protection principles requiring, among other things, that personal data is processed fairly and lawfully, collected for specified purposes, adequate and not excessive, accurate, retained no longer than necessary, processed in accordance with the rights of data subjects, kept secure, and not transferred internationally without adequate protection.
Compliance with the DPA is supervised by the Office of the Ombudsman of the Cayman Islands, which handles complaints from data subjects.
When you submit an enquiry form, we collect the information you provide, such as your name, work email address, organisation, role, jurisdiction, and the content of your message.
We collect limited technical information necessary to operate the website securely, such as request metadata used for rate limiting and abuse prevention. We do not use this information to build profiles of individual visitors.
We process enquiry information on the basis of your consent (given when you submit a form) and our legitimate interests in responding to your request, assessing suitability for engagements, pilots, or research collaborations, and maintaining records of our correspondence.
We do not sell personal data, and we do not use personal data for automated decision-making that produces legal or similarly significant effects.
This website is hosted on infrastructure provided by Vercel Inc., and enquiry records are stored in a managed PostgreSQL database provided by Neon Inc., in each case on servers located in the United States. Where transactional email or analytics providers are engaged, they will be disclosed in this policy.
Because these providers are located outside the Cayman Islands, personal data submitted through this website is transferred internationally. In accordance with the eighth data protection principle of the DPA, we take reasonable steps to ensure such transfers are subject to appropriate safeguards, including contractual commitments from our providers regarding the security and confidentiality of personal data.
We use Vercel Web Analytics, a privacy-conscious, cookieless analytics service provided by Vercel Inc., to measure aggregate usage of the website. It does not use cookies, does not store identifiers on your device, and is not designed to identify individuals. Analytics data is used only to understand how the website is used in aggregate.
The website may offer an AI-powered assistant that answers questions about CAYPAX using our published website content. Messages you type into the assistant are sent to OpenAI, L.L.C. (United States) for processing in order to generate responses; we instruct visitors not to include sensitive personal data in chat messages.
If you ask the assistant to pass your details to our team and confirm your acceptance of this policy, the contact details and message you provide are stored as an enquiry record and handled in the same way, and for the same retention period, as enquiries submitted through our forms. Chat conversations are not otherwise stored by us or used to train AI models by us.
Enquiry records are retained for up to 24 months from the date of the last related correspondence, unless a longer period is required for an active engagement, to comply with legal obligations, or to establish, exercise, or defend legal claims.
You may request earlier deletion of your enquiry data by contacting us through the contact page.
We apply technical and organisational measures appropriate to the nature of the data we process, including encrypted transport (HTTPS with HTTP Strict Transport Security), access controls on administrative functions, input validation, rate limiting, and audit logging of administrative actions.
No method of transmission or storage is completely secure. In the event of a personal data breach affecting you, we will act in accordance with the breach notification requirements of the DPA.
Under the DPA you have rights in relation to your personal data, including the right to be informed about processing, the right of access, the right to rectification of inaccurate data, the right to request cessation of processing (including erasure in appropriate cases), and the right to object to processing likely to cause damage or distress.
Requests can be made through the contact page. If you are dissatisfied with our response, you may complain to the Office of the Ombudsman of the Cayman Islands (ombudsman.ky).
This policy reflects our practices as at the effective date and is subject to change as our services, providers, or applicable law evolve. Material changes will be published on this page with an updated revision history. Your continued use of the website after changes are published constitutes acceptance of the revised policy.