---
title: Privacy Policy | Veylinx
description: Read Veylinx's Privacy Policy in full.
---

# Privacy Policy

**Effective date: 7 October 2026**  
**Last updated:** **7 October 2026**

Veylinx is a market research technology company. We run studies for brands and other organisations to understand how people value and choose products, using surveys and real purchase decisions. This policy explains how we handle personal data when you:

- **take part in a study** we run (a "**participant**");
- **work with us** as a customer, partner or supplier, or are a business contact of ours; or
- **visit our website**, veylinx.com.

All our research follows the codes of conduct of ESOMAR and MOA, the Dutch association for market research.

#### **At a glance**

- **We do not sell personal data**, and we never use participants' data for marketing.
- When you take part in a study, we usually process your data **on behalf of the client** who commissioned the research. We explain below when we decide how data is used ourselves.
- Our clients usually receive **aggregated results**. Where a project requires more detailed data, we share it only as our contract with that client allows, and never your contact or payment details.
- We only use AI tools on **de-identified data**, and our AI providers may not use your data to train their models.
- You can contact us directly at **privacy@veylinx.com** about any of your data, including data from a study.

#### **1. Who we are**

This policy applies to **Veylinx B.V.** and its group companies (together "**Veylinx**", "**we**" or "**us**"). Veylinx B.V. is your point of contact for all privacy matters. Our address is Recht Boomssloot 5, 1011 CR Amsterdam, the Netherlands.

Our Operations Lead oversees privacy at Veylinx. You can reach them at privacy@veylinx.com.

#### **2. Our role: processor and controller**

Data protection law distinguishes between a **controller**, which decides why and how personal data is used, and a **processor**, which handles data on a controller's behalf.

- **Research participants.** In most cases we are a **processor**. The client that commissioned the study, and the panel provider that invited you, decide what the research is for. We follow their instructions and our contracts with them. We act as a **controller** only for a few activities we carry out ourselves, explained in sections 3.6 and 3.7: preventing fraud, creating anonymised data, and processing payments for real purchases.
- **Business contacts and website visitors.** **Veylinx B.V.** is the controller.

 

#### **3. Research participants**

##### **3.1 How you come to take part**

You are usually invited by a **third-party panel provider** you have signed up with, or by a **client** you already have a relationship with, for example as their customer. Taking part is always voluntary. You can stop at any time, and you can skip questions you don't want to answer, apart from questions needed to check that you qualify for the study.

Most studies run on our own research platform. For some research questions we use specialised third-party research tools. These providers work for us under contract and follow our instructions.

##### **3.2 What we collect**

Depending on the study, we may collect:

- **Your responses**: answers to survey questions, product choices, bids, and willingness to pay or commitments to buy.
- **Profile information**: for example age, gender, region, household composition or income bracket.
- **Technical information**: IP address, device and browser type, timestamps, and the respondent ID from your panel provider.
- **Contact and delivery details**: only when needed, for example your name, email and address to complete a real purchase (see section 3.7).

 

We do **not** need your name or contact details to take part in most studies.

##### **3.3 Sensitive information**

Some studies ask about sensitive topics, for example health conditions for a study about medicines or nutrition. We only collect this information with your **explicit consent**, which we ask for in the survey on behalf of the client before any such questions. You can decline and still leave the study without any consequence.

##### **3.4 How your data is used**

We use participant data to:

- run the study and check that you qualify;
- analyse results and report insights to the client;
- maintain the quality of research, for example by detecting duplicate, automated or fraudulent responses; and
- complete real purchases where a study includes them.

We **never** use participant data to send you marketing.

##### **3.5 What clients receive**

Clients usually receive **aggregated or anonymised results**. Some projects need more detailed, respondent-level data. In those cases we share only what our contract with the client allows. We do not include your contact or payment details, unless you have specifically agreed to it in the survey.

##### **3.6 Anonymised data and research quality**

We may turn study data into **anonymised** data that can no longer be linked to you. We use this for benchmarks, for comparing results across studies, and for improving our research methods and models. Anonymised data is not personal data.

To protect the quality of research, we may compare technical information, such as device and response patterns, across studies to detect fraud and duplicate responses. We are the controller for these activities and rely on our **legitimate interest** in reliable, high-quality research.

##### **3.7 Real purchases and payments**

Some studies let you actually buy a product at the price you choose or bid. If you complete a purchase, we are the controller for that transaction. We process your payment through our payment providers (currently Stripe and PayPal), who handle your card or account details directly. We **never** see or store your full card details. We use your contact and delivery details to complete your order, and we keep transaction records for as long as tax and accounting laws require.

Study rewards, such as points or incentives, are provided by your panel provider, not by Veylinx.

##### **3.8 Children and young people**

Our studies are for adults aged **18 and over**. Occasionally a study involves younger people, aged 12 or older. In those cases we work only with specialised panel providers who obtain **verifiable consent from a parent or guardian** in advance, as required by applicable law, including the US Children's Online Privacy Protection Act (COPPA). We do not knowingly collect data from anyone under 18 outside those arrangements. If you believe we have, please contact us and we will delete it.

#### **4. Customers and business contacts**

When you work with us, or we are in contact with you for business purposes, we collect:

- **Contact details**: name, job title, company, business email and phone number.
- **Communications**: emails, meeting notes and, where we tell you at the start, **recordings or transcripts of calls**.
- **Contract and billing information**: for you or your organisation.
- **Platform account details**: if you have a login for a Veylinx client platform.
- **Event and form information**: when you request a demo, register for a webinar or event, or download content.

We use this information to deliver our services, manage our relationship with you, send invoices, and keep you informed about our services. We may send business contacts newsletters or updates about our services. You can unsubscribe at any time using the link in every email.

We get this information from you, from your colleagues, or from events you attend. We do **not** buy contact lists or use data-enrichment services.

#### **5. Website visitors**

When you visit veylinx.com, we use:

- **Necessary cookies**, which the website needs to work, for example to remember your cookie choices.
- **Analytics**, to understand how visitors use the site so we can improve it.
- **Session recording**, which records interactions such as clicks and scrolling to help us improve the site's usability. We configure these tools to mask text you type into form fields.

We use analytics and session recording only **with your consent**, which you give or decline in our cookie banner. You can change your choice at any time through the cookie settings link on our website. Our survey platform uses **only necessary cookies**.

#### **6. Legal bases (EU and UK)**

Where we are the controller, we rely on the following legal bases:

| **Purpose** | **Legal basis** |
| --- | --- |
| Completing real purchases | Performance of a contract |
| Keeping transaction and accounting records | Legal obligation |
| Fraud prevention, research quality and anonymisation | Legitimate interests |
| Managing customer and business relationships, including call recordings | Performance of a contract or legitimate interests |
| Newsletters to business contacts | Consent, or legitimate interests for existing customers where the law allows |
| Analytics and session recording on our website | Consent |
| Sensitive information in studies | Explicit consent (collected on the client's behalf) |

 

Where we act as a processor, the client is responsible for its legal basis, and we process the data only on its instructions.

#### **7. Who we share data with**

- **Clients**: research results, as described in section 3.5.
- **Panel providers**: limited information such as completion status and quality flags, so they can manage their panel and give you your reward.
- **Veylinx group companies**: our group companies work together on research operations, engineering and customer support.
- **Service providers**: companies that support our work, such as cloud hosting (Amazon Web Services and Google Cloud), specialised research tools, payment processing, email, CRM, analytics and AI tools. They may use the data only to provide their services to us. Corporate customers can request our current list of sub-processors at privacy@veylinx.com.
- **Authorities and advisers**: where the law requires it, or to protect our rights or the safety of others.
- **Buyers or successors**: if we are involved in a merger, acquisition or sale of assets. In that case we will give notice before your data becomes subject to a different privacy policy.

We do **not** sell personal data. We also do not share it for cross-context behavioural advertising.

#### **8. International transfers**

We process personal data in the European Union and in countries outside it, including the United States and Morocco. Some of these countries do not offer the same level of data protection as the EU or UK. When we transfer personal data outside the EU or UK, we use appropriate safeguards, such as the **European Commission's Standard Contractual Clauses** (with the UK addendum where relevant). Where a provider is certified under the **EU-US Data Privacy Framework**, we may rely on that certification instead. You can ask us for more information about these safeguards.

#### **9. AI and automated processing**

We use AI tools to help analyse **de-identified** survey responses, for example to group open-ended answers by theme. Our staff also use AI tools for everyday work. We do not give identifiable personal data to AI tools, and our contracts with AI providers prohibit them from using our data to train their models.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

#### **10. How long we keep data**

We keep personal data only as long as we need it for the purposes in this policy:

- **Study data**: for the period agreed with the client, within the limits of applicable law in the relevant jurisdiction. After that, we delete it or anonymise it.
- **Transaction records**: for as long as tax and accounting laws require (in the Netherlands, generally 7 years).
- **Business contact data**: for as long as we have a business relationship with you or your organisation, and then for a reasonable period consistent with applicable law.
- **Website analytics and session recordings**: for a limited period set in our tools.

#### **11. Security**

We protect personal data with technical and organisational measures. These include encryption, access controls based on what each person needs for their work, pseudonymisation of research data, and confidentiality obligations for our staff and service providers. No system is completely secure, but we work to prevent unauthorised access, loss or misuse. If a data breach affects your data, we will notify you and the relevant authorities where the law requires.

#### **12. Your rights**

##### **Everyone**

Depending on where you live, you may have the right to:

- **access** your personal data and receive a copy;
- **correct** inaccurate data;
- **delete** your data;
- **restrict** or **object to** certain processing, including processing based on legitimate interests;
- **receive your data** in a portable format; and
- **withdraw consent** at any time, without affecting processing that happened before you withdrew it.

##### **How to make a request**

Email **privacy@veylinx.com**. Participants can contact us directly, even when we act on a client's behalf. We will handle your request or pass it promptly to the right controller, and keep you informed. To help us find your data, please include your panel name and respondent ID if you have them. We may need to verify your identity before acting on a request.

We respond within one month. Where the law allows, this can be extended for complex requests, and we will tell you if it is. We do not charge for requests unless they are clearly unfounded or excessive.

##### **European Union and United Kingdom**

You can complain to a data protection authority, such as the **Dutch Data Protection Authority** (Autoriteit Persoonsgegevens), the authority in your country of residence, or, in the UK, the **Information Commissioner's Office**. We'd appreciate the chance to resolve your concern first.

##### **United States**

Residents of California and other US states with consumer privacy laws may have the right to know what personal information we collect, use and disclose, and to request access, correction or deletion. We do not sell personal information or share it for cross-context behavioural advertising. We do not use sensitive personal information for purposes that would require offering a right to limit its use. We will not discriminate against you for exercising your rights. You can make a request, or appoint an authorised agent to make one for you, by emailing privacy@veylinx.com. We will respond within the time required by law, generally 45 days.

#### **13. Changes to this policy**

We may update this policy when our services or legal requirements change. We will post the updated version on this page with a new "Last updated" date. If we make significant changes, we will also notify our customers and business contacts.

#### **14. Contact us**

**Veylinx B.V.**, attn: Operations Lead  
Recht Boomssloot 5, 1011 CR Amsterdam, the Netherlands  
privacy@veylinx.com