Privacy Policy

01Who this policy applies to

This policy applies to visitors to our website, people who contact us with an enquiry, representatives of our clients, suppliers and partners, and candidates who apply to work with us.

02Personal data we collect

We may collect and process the following categories of data:

• Identity data: first and last name, job title and company name.
• Contact data: email address and business address.
• Enquiry data: the services you are interested in, the content of your messages and any documents you share.
• Contract data: information needed to deliver services, issue invoices and manage our relationship.
• Technical data: IP address, browser type and version, device information, time zone and pages visited.

03How we collect data

We collect data directly from you when you complete the contact form or send us an email or message. We collect technical data automatically through essential cookies and server logs. We may also receive business contact details from your colleagues or from public sources such as company websites and Companies House.

04How we use your data

We use personal data to:

• respond to enquiries and messages;
• prepare proposals and estimates;
• enter into and perform contracts with clients and suppliers;
• manage invoicing, payments and accounting;
• operate, secure and improve the website;
• comply with legal and regulatory obligations.

05Legal bases for processing

We rely on one or more of the following legal bases: your consent (for example, when you submit the contact form); the performance of a contract or steps taken at your request before entering into one; our legitimate interests in running, developing and protecting our business, provided these are not overridden by your rights; and compliance with legal obligations.

06Sharing your data

We do not sell, rent or trade personal data. We may share it with:

• service providers who host our website, email and project management systems;
• professional advisers such as accountants, lawyers and insurers;
• subcontractors engaged to help deliver a client project, under confidentiality obligations;
• public authorities where required by law.

07International transfers

Some of our service providers may process data outside the United Kingdom. Where this happens, we ensure an adequate level of protection, for example through UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.

08Data security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, multi-factor authentication and staff confidentiality obligations. Access is limited to people who need it to perform their work.

09How long we keep data

Enquiry data that does not lead to a contract is deleted within 24 months of our last contact. Client and supplier records are kept for the duration of the relationship and up to six years afterwards to meet legal, tax and accounting requirements.

10Your rights

Under data protection law you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to erase your data in certain circumstances;
• restrict or object to our processing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting earlier processing.

11Complaints

If you are unhappy with how we handle your data, please contact us first so we can try to resolve the issue. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk.

12Changes and contact

We may update this policy from time to time; the current version is always published on this page. For any question about this policy or your data, email hello@nexalume.com or write to NEXALUME LTD, Suite 6075, 128 Aldersgate Street, Barbican, London, England, EC1A 4AE.