Privacy Policy

1. Introduction

Nexabeta Limited ("we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website nexabetalimited.co.uk or engage our services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when you:

• Contact us through our website contact form
• Email us directly
• Engage our professional services
• Subscribe to communications (if applicable)

This may include: name, email address, phone number, company name, job title, and any information you choose to include in your message or communications.

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including IP address, browser type, operating system, and browsing behavior. This is collected through standard web server logs and, if enabled, analytics tools.

3. Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Consent: When you provide information through our contact form or subscribe to communications
• Contract: When necessary to perform services you have engaged us for
• Legitimate Interests: For business operations, security, and service improvement
• Legal Obligation: When required by law or regulation

4. How We Use Your Information

We use collected information to:

• Respond to your enquiries and provide requested information
• Deliver professional services and support
• Communicate about projects, services, and business matters
• Improve our website and services
• Comply with legal obligations and protect our rights
• Prevent fraud and maintain security

5. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Contact form submissions are typically retained for 2 years. Client project data is retained according to contractual terms and legal requirements, typically 6-7 years for business records.

6. Information Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Service Providers: Third parties who assist with business operations (e.g., email hosting, cloud storage) under appropriate data processing agreements
• Legal Requirements: When required by law, court order, or legal process
• Business Transfers: In connection with any merger, sale, or transfer of business assets

All third-party service providers are required to maintain appropriate security measures and use data only for specified purposes.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption, access controls, secure communication channels, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Under UK GDPR, you have the following rights:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected]. We will respond within one month.

9. Cookies and Tracking

Our use of cookies and similar technologies is detailed in our Cookie Policy. We use only necessary cookies by default, with optional analytics cookies requiring your consent.

10. International Transfers

We primarily process data within the United Kingdom. If data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

11. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last updated" date. Continued use of our website or services after changes constitutes acceptance of the updated policy.

13. Contact Us

For questions about this Privacy Policy or to exercise your data protection rights, contact us:

14. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:

www.ico.org.uk