Privacy Policy

1. Information collected from visitors

Technical data collected automatically when you browse: browser type and version, device type, operating system, approximate location derived from IP address, referring source, and the pages you visit.

This data is collected in aggregated form through privacy-respecting analytics and is used to understand how the site performs, not to identify individuals.

2. Contact form information

When you submit an enquiry we collect the details you provide: name, company name, email address, business type, the package you are interested in, your budget indication and your project description.

This information is used only to respond to your enquiry, prepare a proposal and maintain a record of our correspondence. It is not sold, rented or used for unrelated marketing without your consent.

3. Client project information

During an engagement we may process business content, brand assets, product data, analytics access, and credentials for systems required to build and deploy your solution.

Where a project involves personal data belonging to your own customers, you remain the data controller and Nexora acts as a processor, handling that data solely on your documented instructions and only for the duration of the engagement.

Credentials are stored in an encrypted password manager, access is limited to the team members delivering the work, and access is revoked at handover.

4. Data usage

To respond to enquiries and prepare proposals; to deliver contracted services; to issue invoices and meet accounting obligations; and to improve the performance and content of our website.

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

5. Legal basis and retention

We process data on the basis of your consent, the performance of a contract, our legal obligations, and our legitimate interest in operating and improving the studio.

Enquiry data is retained for up to 24 months. Project files are retained for the duration of the engagement plus 24 months. Accounting records are retained for the period required by applicable law.

6. Data protection

Data is stored with reputable providers using encryption in transit and at rest, with access limited to team members who need it for delivery.

We apply least-privilege access, multi-factor authentication on business systems, and periodic reviews of who holds access to what.

In the event of a personal-data breach affecting your rights, we notify affected parties and, where required, the relevant supervisory authority without undue delay.

7. Third-party services

We rely on carefully selected providers for hosting and content delivery, analytics, email delivery, scheduling, file storage, invoicing and AI processing.

These providers process data only as necessary to provide their service to us. Where data is transferred outside your jurisdiction, we rely on recognised safeguards such as standard contractual clauses.

Content you submit through a form may be transmitted to an email or storage provider so that we can read and respond to it.

8. User rights

You may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, portability, and you may object to processing based on legitimate interest.

Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing.

Requests can be sent to hello@nexorastudio.io and are answered within 30 days. You also have the right to lodge a complaint with your local data protection authority.