Privacy Policy
Effective date: 27 April 2026
1. Who We Are
Nexus Sentry Ltd ("we", "us", "our") is a company registered in England and Wales. We operate the NEXUS Sentry platform and the nexussentry.uk website (together, the "Service"). We are the data controller for the personal data described in this policy.
Contact: contact@nexussentry.uk
2. What Data We Collect
We collect the minimum personal data needed to respond to your enquiry and operate the Service.
Contact form submissions
- Full name
- Email address
- Company name
- Job title (optional)
- Industry sector
- Message content (optional)
Automatically collected data
- IP address (for rate limiting and security)
- Browser type and version
- Pages visited and timestamps
We do not use cookies for tracking or advertising. We do not use any third-party analytics services on this website.
3. How We Use Your Data
We process your personal data for the following purposes:
- Responding to enquiries — when you submit the contact form, we use your details to reply to you. Legal basis: legitimate interest.
- Early access onboarding — if you register for early access, we use your information to evaluate your suitability and contact you about the programme. Legal basis: legitimate interest.
- Security and abuse prevention — we log IP addresses to enforce rate limits and prevent misuse of the contact form. Legal basis: legitimate interest.
4. How We Store Your Data
Contact form submissions are delivered to our team via email. We do not store form submissions in a database on this website.
Our infrastructure is self-hosted on privately owned servers located in a data centre in Germany within the European Union. Your data does not leave the EU except where you are located outside the EU and we reply to your email.
5. Data Sharing
We do not sell, rent, or trade your personal data. We do not share your data with third parties except:
- Email delivery — form submissions are sent via our own mail server infrastructure.
- Cloudflare — our website is served through Cloudflare, which may process your IP address and request headers to provide DNS, CDN, and DDoS protection. Cloudflare acts as a data processor. See Cloudflare's Privacy Policy.
- Legal obligation — we may disclose data if required by law or in response to a valid legal request.
6. Data Retention
We retain contact form emails for up to 12 months from the date of submission, after which they are deleted. If you become a customer, your data is retained in accordance with our customer data retention policy for the duration of the business relationship plus any legally required retention period.
7. Your Rights
Under the UK GDPR and EU GDPR, you have the following rights:
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate data.
- Erasure — request deletion of your data ("right to be forgotten").
- Restriction — request that we limit how we use your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest.
To exercise any of these rights, email us at contact@nexussentry.uk. We will respond within 30 days.
8. Children
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated by updating the effective date at the top of this page. Continued use of the Service after changes constitutes acceptance of the revised policy.
10. Complaints
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or your local data protection authority.