Privacy Policy

Nuukxio Oy ("Varihunt", "we", "us") is a cybersecurity company registered in Finland. This policy explains how we collect, use, and protect personal data when you interact with our website or engage our services.

Data controller

Nuukxio Oy is the data controller responsible for your personal data. For data protection enquiries, contact us at privacy@varihunt.com or at Metsänvartijantie 2, 02720 Espoo, Finland.

What we collect

We collect information you provide directly — through our contact form, email correspondence, or during a service engagement. This includes your name, company, work email address, phone number, country, and any information you choose to share about your security needs.

We do not use third-party tracking pixels, advertising cookies, or behavioural profiling on this website.

Legal basis

We process your personal data under the following lawful bases under the EU GDPR:

• Legitimate interest — to respond to your enquiry and assess whether we can help you.
• Contract — to deliver services you have engaged us for, and to meet our contractual obligations.
• Legal obligation — where we are required to retain data under applicable law or regulation.
• Consent — where you have explicitly agreed to a specific use of your data.

How we use your data

We use the information you provide to respond to your enquiry, scope potential engagements, deliver contracted services, maintain communication, and meet legal and regulatory obligations. We do not sell your personal data to third parties.

Data retention

We retain enquiry data for as long as necessary to respond and for a reasonable period thereafter in case follow-up is needed. Data related to service engagements is retained according to the terms of the engagement and applicable legal requirements. You can request deletion of your personal data at any time.

Your rights under GDPR

Under the EU General Data Protection Regulation, you have the right to access, correct, delete, restrict, or object to the processing of your personal data. You also have the right to data portability and the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuojavaltuutettu) if you believe your rights have been violated.

To exercise any of these rights, contact us at privacy@varihunt.com.

Security of your data

As a cybersecurity firm, we apply security practices to our own operations. Access to personal data is restricted to authorised personnel, and data is stored on systems with appropriate access controls and encryption.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected on this page with an updated revision date.