Policies & Compliance
Legal
Corporate policies, terms, and compliance documentation.
Privacy Notice
Controller: Valfox Ltd, trading as "Equilens", is the controller for personal data processed through this website, sales enquiries, procurement discussions, support requests, and company communications. Valfox Ltd is registered in England & Wales (Company number 14469638). Registered office: Apollo House, Hallam Way, Whitehills Business Park, Blackpool, England, FY4 5FS.
Data protection contact: You can contact Equilens about privacy or data protection matters at privacy@equilens.io.
Product privacy scope: FL-BSA is designed to run inside the customer's controlled environment. In that configured customer-hosted posture, Equilens does not receive the customer's borrower datasets, model parameters, or protected-attribute data as part of normal appliance operation. Equilens separately processes business contact information, website enquiries, procurement communications, support requests, and similar company communications as described in this notice.
What we collect
- Business contact details such as name, role, organisation, email address, and related company contact information you provide to us.
- Enquiry and communications content from website, email, procurement, supplier, sales, partner, and support conversations.
- Social and professional-network interactions where you interact with Equilens pages, posts, messages, or profiles.
- Minimal server/CDN logs (IP address, user agent, timestamp, requested URL) required to deliver the site and investigate security issues.
- Aggregate website analytics from Plausible Analytics: page path, referrer, device type, browser, operating system, country-level location, outbound link clicks, file download clicks, and selected static CTA/custom-event labels such as page surface, button role, intent, and asset type. Plausible does not use cookies or persistent visitor identifiers; it reads a browser-local exclusion preference if you choose to save one; raw IP addresses and full user-agent strings are not stored.
- LinkedIn advertising: we target LinkedIn ads using professional criteria held by LinkedIn, such as location, employer, job title and seniority. LinkedIn does not tell us who sees or clicks an ad; for ad delivery we receive only aggregate reports, such as clicks by job title, company or region. We do not use the LinkedIn Insight Tag or upload contact lists.
- LinkedIn lead forms: if you submit an Equilens lead form on LinkedIn, for example to download a checklist, LinkedIn shares the details in that form with us: your name, work email address, company name, job title, your answer to any question on the form, and whether you asked to receive updates.
Purposes & legal bases
We process this limited data to respond to enquiries, manage sales and partner communications, support procurement and supplier discussions, provide customer support, operate a reliable and secure website, understand aggregate site usage, and meet legal, accounting, and administration obligations. Depending on context, our legal bases are our legitimate interests (UK GDPR Art. 6(1)(f)), steps before entering or performing a contract, and legal obligation where records are required by law. We use LinkedIn lead-form details to send what you asked for and to follow up about it, on the basis of our legitimate interests. If you tick a box asking for updates, we rely on your consent (UK GDPR Art. 6(1)(a)), which you can withdraw at any time. If you submit one of our lead forms from the EU, we send what you asked for on the basis of our legitimate interests (GDPR Art. 6(1)(f)), and any further email relies on your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.
Recipients
Personal data may be processed by our service providers strictly for the purposes above, including:
- Email provider (Google Workspace).
- Static hosting/CDN provider (GitHub Pages / GitHub, Inc.).
- Website analytics provider (Plausible Analytics / Plausible Insights OÜ).
- Contact-form processing provider (Formspark / Trampoline Software SRL, Belgium; submissions stored in the EEA).
- Professional, accounting, legal, procurement, or support service providers where needed for company operations.
LinkedIn (LinkedIn Ireland Unlimited Company) runs our ads and lead forms on its own platform and processes your data there under its own privacy policy. It is not a service provider acting for us.
International transfers
Where these providers process data outside the UK/EEA (e.g., United States), we rely on appropriate safeguards such as UK adequacy decisions or standard contractual clauses. Details are available on request.
Retention
- Business, sales, procurement, and support correspondence: retained as needed for communications, customer support, relationship management, audit trails, and legal or accounting records, then deleted when no longer required.
- Server/CDN logs: rotated automatically and retained for approximately 30 days for diagnostics and security.
- Aggregate Plausible analytics: retained while needed for trend reporting and deleted when no longer required or when the site analytics account is removed.
- LinkedIn lead-form submissions: retained for up to 12 months after our last contact with you, then deleted, unless they become part of an ongoing business relationship. If you submit a lead form from the EU and do not tick the consent box, we delete your details 30 days after sending what you asked for.
Your rights
You have UK/EU data protection rights (access, rectification, erasure, restriction, objection, portability where applicable). To exercise these rights, email privacy@equilens.io.
You may lodge a complaint with the UK Information Commissioner's Office (ico.org.uk). If you are in the EU or EEA, you can also complain to the data protection authority in the country where you live or work.
Cookies & similar technologies
We use Plausible Analytics for aggregate, cookieless website measurement, including outbound link clicks, file download clicks, and selected static CTA/custom-event labels. We count contact-form submissions as an anonymous event without collecting or transmitting form contents, and we do not use advertising or social media cookies. You can exclude this browser from website analytics. See our Cookie Policy for details. We also count form starts, validation problems, submission errors and email-fallback clicks using fixed request-type, field and error-category labels, never entered values or populated email links. Missing-page events use a fixed error-page address, without the requested path or query.
Updates: We may update this notice; the effective date will change accordingly.
Effective date: 2026-10-08
Cookie Policy
Note: We do not use advertising or social media cookies. The optional browser preference below is used only to exclude your visits.
Summary
We use Plausible Analytics to understand aggregate visits to the public website, outbound link clicks, file download clicks, and selected static CTA/custom-event labels. Plausible runs as a third-party script but does not set cookies or create persistent visitor identifiers. We count contact-form submissions as an anonymous event without collecting or transmitting form contents, and we do not use advertising or social media cookies. We also count form starts, validation problems, submission errors and email-fallback clicks using fixed request-type, field and error-category labels, never entered values or populated email links. Missing-page events use a fixed error-page address, without the requested path or query.
Exclude your own visits
You can exclude this browser from website analytics. If you choose this option, we save a preference in this browser. It contains no visitor identifier and is used only to suppress analytics. It remains until you re-enable counting or clear this site's browser data. Set it separately in each browser you use.
Strictly necessary operation
Our hosting provider may use infrastructure-level caching or logs to deliver the site reliably. These mechanisms fall under the UK PECR exemption for strictly necessary storage/access and are not used for profiling.
Future changes
If we introduce functionality that requires cookies or similar technologies (for example, advertising pixels, authenticated docs, or analytics that uses persistent identifiers), we will update this policy and deploy appropriate consent controls before enabling them.
Contact
Questions: hello@equilens.io
Website Terms
Note: These terms do not grant a licence to FL-BSA. Product use is governed by the licence/EULA agreed during qualification, through a Private Offer or an agreed private handoff. Public AWS Marketplace access is not yet available.
Effective date: 2026-05-21.
Scope
This website provides information about Equilens and FL-BSA. Content is provided "as-is" for general information and does not constitute legal, regulatory, or technical advice.
Intellectual property
Logos and other marks are owned by Equilens/Valfox Ltd. Do not reuse or modify without permission. References to third-party trademarks are for identification only.
No warranties & liability
We make no warranties as to accuracy, completeness, or fitness. To the fullest extent permitted by law, we disclaim liability for reliance on this site's content. We exclude all indirect, consequential, and incidental losses. Our maximum aggregate liability for any claim arising from use of this free website shall not exceed £100 (GBP).
Acceptable use
You must use this site lawfully and not engage in security testing, overload attempts, or reverse engineering of site code without prior written consent.
Governing law
These website terms are governed by the laws of England & Wales. Courts of England & Wales have exclusive jurisdiction over any disputes relating to this site.
Links
External links (e.g., GitHub documentation) are provided for convenience. We are not responsible for third-party content.
Contact
Questions: hello@equilens.io
Legal notices: legal@equilens.io
Product terms and SLA terms are supplied separately via contract.
Open Source
This site and the Equilens appliance use open-source software. Licences and attributions are recorded in our SBOM.
SBOM and NOTICE files are available on request: support@equilens.io.
Where a licence requires reproduction of a NOTICE file (for example, Apache-2.0 §4), the relevant text is provided via the request above.
Accessibility
We aim to meet WCAG 2.1 AA guidelines and make reasonable adjustments in line with the UK Equality Act 2010.
If you encounter any barriers or need the information in an alternative format, email hello@equilens.io. We review and address accessibility requests as quickly as possible.
DPA Position
Posture statement
We provide a self-hosted software product (FL-BSA). We do not receive or process your production datasets in our systems when you deploy the product in your own environment.
Roles
Controller: We act as controller for website enquiries, support mailboxes, sales communications, and vendor management.
Processor: We act as processor only if you ask us to handle support materials that include personal data (e.g., logs, dumps) or if you enable telemetry to us (off by default).
DPA triggers
We will sign our DPA when we process customer personal data as a processor (support logs/telemetry/pilots). No DPA is required for self-hosted use where no customer personal data is sent to us.
Contact privacy@equilens.io to request a DPA or initiate that process.
Responsible Use
Prohibited uses
You must not use FL-BSA for:
- Unlawful discrimination or contravention of fair-lending/EEA equality laws
- Attempts to evade law or regulation
- Use on unlawfully obtained datasets
- Uses that violate export or sanctions laws
- Production lending decisioning of any kind: FL-BSA is a simulation tool and must not be used to make, execute, or batch-score live credit decisions
Customer responsibility
FL-BSA runs entirely within your environment and generates synthetic data for fairness testing. You remain responsible for regulatory compliance, dataset rights, model governance, and human review. Outputs are interpreted by qualified personnel.
Research vs production
Demo and evaluation outputs are not production approvals. FL-BSA is a simulation tool: do not use it to make, execute, or batch-score production lending decisions in any configuration. Simulation outputs may inform your governance processes only through your own qualified review.
Contact
Contact hello@equilens.io if you need guidance on governance controls or model risk policies.
Imprint
Company details
- Legal name: Valfox Ltd (trading as "Equilens").
- Company number: 14469638 (Companies House).
- Registered office: Apollo House, Hallam Way, Whitehills Business Park, Blackpool, England, FY4 5FS.
- Place of registration: England & Wales.
- Legal form: Private limited company.
Contact
Email: hello@equilens.io
Export Control
You must comply with all applicable export control and sanctions laws of the UK, EU, and U.S. You may not use, export, re-export, transfer, or provide the software to restricted countries or listed parties. You must not use the software for prohibited end-uses (e.g., weapons of mass destruction).
Restricted territories
Refer to the standard UK/EU/US consolidated sanctions lists for current restrictions. We do not publish a specific ECCN or DUC classification on this page; classification details are provided on request.
Resources
For general guidance see the UK Strategic Export Controls resources on GOV.UK. Contact us if you require additional information.