Nexaro Labs Ltd ("Nexaro Labs", "we", "us" or "our") respects your privacy and is committed to protecting personal information.
This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, enquire about our services or become a customer.
For personal information collected directly through our own website and sales processes, Nexaro Labs generally acts as a data controller.
Where we process customer information on behalf of a business client through its CRM or automation systems, we may act as a data processor or service provider under the applicable arrangements.
2. Information We Collect
We may collect the following categories of personal information:
Contact information
Names, email addresses, telephone numbers, business names and business addresses.
Enquiry information
Information submitted through website forms, messages, telephone calls, emails or other communications.
Customer account information
Business details, subscription information, service preferences, onboarding responses and technical configuration details.
Payment information
Payments are processed by Stripe or another authorised payment provider. We may receive transaction details, payment status, billing information and limited payment method information.
We do not ordinarily receive or store complete payment card numbers through our website.
Technical and website information
Depending on the technologies in use, we may collect IP addresses, browser information, device details, website interactions and cookie information.
Communications information
Where relevant, we may maintain records of communications with prospective and existing customers, including support requests and messages.
3. How We Use Personal Information
We use personal information to:
Respond to enquiries and provide requested information.
Arrange demonstrations and sales consultations.
Provide, configure and maintain our services.
Manage customer accounts and subscriptions.
Process payments and maintain financial records.
Provide technical support and customer communications.
Improve our website, services and business operations.
Send marketing communications where permitted by law.
Maintain security and prevent misuse.
Comply with legal and regulatory obligations.
We do not use personal information for purposes incompatible with those for which it was collected without an appropriate lawful basis.
4. Legal Bases for Processing
Where UK data protection law applies, we rely on one or more of the following legal bases:
Contract: Where processing is necessary to provide services or take steps requested before entering into a contract.
Legitimate interests: Where processing is reasonably necessary for business administration, responding to appropriate business enquiries, maintaining security or improving our services, provided those interests are not overridden by individuals' rights.
Consent: Where consent is required, including for certain marketing communications or non-essential cookies.
Legal obligations: Where processing is necessary to comply with applicable laws, accounting requirements or lawful requests.
The appropriate basis depends on the particular processing activity.
5. Marketing Communications
We may contact businesses and individuals about our services where permitted by applicable law.
Where consent is required for marketing communications, we will seek that consent before sending them.
Recipients can opt out of marketing emails using an unsubscribe link where provided or by contacting us.
Recipients of automated SMS communications may opt out by replying STOP where supported.
We respect applicable marketing preferences and suppression requests.
6. Cookies and Analytics
Our website may use cookies and similar technologies for essential functionality, performance measurement and, where implemented, advertising.
Essential cookies help the website operate correctly.
Analytics and advertising technologies may collect information about website interactions.
Where required by law, we will request consent before setting non-essential cookies or activating relevant tracking technologies.
You may also manage cookies through your browser settings.
Any additional cookie notices or preference controls will reflect the technologies actually deployed on our website.
7. Sharing Personal Information
We may share information with trusted service providers where reasonably necessary to operate our business and deliver services.
These may include:
Stripe for payment processing.
HighLevel and related service providers for CRM, website and automation functionality.
Hosting and infrastructure providers.
Email and telecommunications service providers.
Analytics and advertising platforms where used.
Professional advisers, accountants and relevant legal or regulatory authorities.
Service providers may process information according to their contractual obligations and applicable privacy requirements.
We do not sell personal information to third parties for monetary payment.
We may disclose information where required by law, to protect legal rights or in connection with a legitimate business reorganisation.
8. Client Customer Data
Our business clients may use Nexaro Labs-managed systems to collect enquiries, communicate with customers and manage customer relationships.
In these situations, the business client generally determines why and how its customer information is used.
Nexaro Labs may process that information on the client's behalf to provide the agreed services.
Individuals wishing to exercise rights concerning information collected by one of our clients should ordinarily contact that business directly. We will assist our clients with relevant requests where appropriate.
9. International Data Transfers
Nexaro Labs is based in the United Kingdom and may use service providers that process information in other countries, including the United States.
Where UK data protection law requires safeguards for international transfers, we will use appropriate mechanisms, such as applicable adequacy arrangements or approved contractual safeguards.
10. Data Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.
These may include access controls, secure service providers and appropriate account security practices.
No internet-based system can be guaranteed to be completely secure.
11. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing services, maintaining business records, resolving disputes and meeting legal obligations.
Retention periods depend on the type of information and the applicable purpose.
When information is no longer required, we will delete, anonymise or otherwise handle it appropriately, subject to lawful retention requirements and technical limitations.
12. Your Privacy Rights
Depending on your location and the applicable law, you may have rights relating to your personal information.
These may include the right to:
Request access to personal information held about you.
Request correction of inaccurate information.
Request deletion in applicable circumstances.
Object to or restrict certain processing.
Request data portability where applicable.
Withdraw consent where processing relies on consent.
To make a privacy request, contact [INSERT CONTACT EMAIL].
We may need to verify your identity before fulfilling certain requests.
Where UK data protection law applies, you may also complain to the Information Commissioner's Office (ICO) at https://ico.org.uk.
Residents of certain US states may have additional privacy rights under applicable state laws. We will respond to qualifying requests as required by those laws.
13. Third-Party Websites
Our website may contain links to third-party websites and services.
We are not responsible for the privacy practices of independently operated websites. We encourage visitors to review their respective privacy policies.
14. Children's Privacy
Our services are intended for businesses and are not directed at children.
We do not knowingly collect personal information from children through our sales or business subscription processes.
If we become aware that we have collected such information inappropriately, we will take reasonable steps to address it.
15. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business practices, technologies or legal obligations.
The latest version will be published on our website with an updated effective date.
Where legally required, we will provide additional notice of material changes.
16. Contact Us
For privacy questions or requests, please contact: