Privacy Policy

1. Who We Are

This Privacy Policy is issued by Nexus Collective Ltd ("Nexus Collective", "we", "us", or "our"), a company incorporated in England and Wales, with its registered office at 45, 3rd Floor Albemarle Street, London, United Kingdom, W1S 4JL.

We operate the website at wearenexuscollective.co.uk (the "Website") and provide consultancy matching, staff augmentation, product discovery, and project-based outsourcing services (collectively, the "Services").

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Nexus Collective Ltd is the data controller of your personal data.

Contact us regarding data protection matters at: privacy@wearenexuscollective.co.uk

2. What Personal Data We Collect

We collect and process the following categories of personal data:

• Identity Data: first name, last name, job title, company name.
• Contact Data: email address, telephone number, business address.
• Communications Data: the content of enquiries, messages, and correspondence you send to us.
• Technical Data: IP address, browser type and version, time zone, operating system, and device identifiers.
• Usage Data: information about how you use our Website, including pages viewed, referral URLs, and session duration.
• Marketing Preferences: your preferences for receiving marketing from us.

We do not collect any Special Category personal data (such as health, racial origin, or biometric data) through this Website.

3. How We Collect Personal Data

• Directly from you: when you complete our contact form, correspond by email or telephone, or engage our Services.
• Automatically: as you browse our Website, we collect Technical Data and Usage Data via cookies and similar tracking technologies.
• From third parties: publicly available sources such as LinkedIn, Companies House, or referrals from existing clients.

4. Legal Bases for Processing

We rely on the following lawful bases under UK GDPR Article 6:

• Performance of a contract (Art. 6(1)(b)): where processing is necessary to deliver the Services you have engaged us for.
• Legitimate interests (Art. 6(1)(f)): for responding to enquiries, improving our Website, fraud prevention, and direct marketing to existing clients.
• Compliance with a legal obligation (Art. 6(1)(c)): where processing is necessary to comply with applicable law, including tax and accounting obligations.
• Consent (Art. 6(1)(a)): where you have given clear, freely withdrawable consent, for example, to receive marketing communications if you are not an existing client.

5. Purposes of Processing

6. Disclosure of Personal Data

We may share your personal data with:

• Service providers and processors: IT, hosting, CRM, and analytics providers acting as our data processors under binding data processing agreements.
• Professional advisers: lawyers, accountants, and auditors under duties of professional confidentiality.
• Regulatory authorities: HMRC, ICO, or other competent authorities where required by law.
• Business transferees: in the event of a merger, acquisition, or sale of assets, subject to appropriate confidentiality protections.

We do not sell, rent, or trade personal data to third parties for their own marketing purposes.

7. International Transfers

Where we transfer personal data outside the UK, we ensure an equivalent level of protection by using: (a) UK adequacy regulations; (b) UK International Data Transfer Agreements (IDTAs) or addenda; or (c) other lawful transfer mechanisms approved by the ICO. A copy of the applicable safeguards is available on request.

8. Data Retention

We retain personal data only for as long as necessary for the purposes set out in this Policy, or as required by law. Our standard retention periods are:

• Client and contract records: 7 years from contract end, in accordance with HMRC requirements.
• Enquiry and contact form data (non-clients): 2 years from last contact, unless you become a client.
• Marketing preferences: until you withdraw consent or object.
• Website analytics: 26 months (rolling).

9. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: to receive a copy of your personal data (Subject Access Request).
• Right to rectification: to have inaccurate data corrected.
• Right to erasure: to have data deleted in certain circumstances ("right to be forgotten").
• Right to restriction: to restrict processing in certain circumstances.
• Right to data portability: to receive data in a structured, machine-readable format.
• Right to object: to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: at any time where processing is based on consent, without affecting prior lawful processing.

To exercise any right, contact us at privacy@wearenexuscollective.co.uk. We will respond within one calendar month of receipt. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

10. Cookies

Our Website uses cookies and similar technologies. Strictly necessary cookies are used without consent. Analytics and preference cookies are only placed with your prior consent, obtained via our cookie consent mechanism on first visit. You may withdraw consent or manage cookie preferences at any time through your browser settings.

11. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These include TLS encryption in transit, access controls, and regular security assessments. However, no internet transmission is completely secure and we cannot guarantee absolute security.

12. Children

Our Website and Services are directed at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected personal data from a minor, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent revision. Material changes will be communicated to existing clients by email. Continued use of our Website after an update constitutes acceptance of the revised Policy.

14. Contact

For any data protection queries, to exercise your rights, or to make a complaint, please contact us: