Privacy Policy

Last updated: March 2026  ·  Nexasecure Advisory Ltd

1. Who We Are

Nexasecure Advisory Ltd is a company registered in England and Wales. Our registered address is 124 City Road, London, EC1V 2NX. We are the data controller for any personal data collected through this website.

Contact us at: info@nexa-secure.com

2. What Data We Collect

We collect personal data in the following circumstances:

• Contact form submissions — your name, business email address, company name, and the content of your message when you submit an enquiry.
• Dark Web Exposure Assessment — your business domain name when you use the free assessment tool on our website. We do not collect email addresses as part of this tool.
• Email correspondence — any personal data you include when corresponding with us directly by email.

We do not collect any sensitive personal data. We do not collect payment card information through this website.

3. How We Use Your Data

We use personal data solely for the following purposes:

• Responding to your enquiry or request
• Providing the advisory service you have engaged us for
• Sending service-related communications relevant to your engagement
• Complying with our legal obligations

We do not use your data for marketing without your explicit consent. We do not use automated decision-making or profiling.

4. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Legitimate interests — responding to business enquiries submitted through our contact form
• Contract performance — processing data necessary to deliver the advisory services you have engaged us for
• Legal obligation — where processing is required to comply with applicable law

5. Cookies

This website uses strictly necessary cookies only. Specifically:

• A cookie preference cookie that stores your acknowledgement of this notice, so the banner does not reappear on every visit

We do not use analytics cookies (Google Analytics or equivalent), advertising cookies, social media tracking pixels, or any other third-party tracking technology.

Our website fonts are self-hosted. No requests are made to Google Fonts or other third-party font services.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data in the following limited circumstances:

• Service delivery — where a third-party service provider processes data on our behalf under a data processing agreement (for example, our email hosting provider)
• Legal requirement — where we are required to disclose data by law, court order, or regulatory authority

7. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected:

• Enquiry data where no engagement follows — deleted within 12 months
• Client engagement data — retained for 6 years following the end of the engagement, in line with standard UK legal requirements

8. Saudi Arabia — Personal Data Protection Law (PDPL)

Where we collect or process personal data from individuals based in the Kingdom of Saudi Arabia, we comply with the Saudi Arabia Personal Data Protection Law (PDPL) and its implementing regulations, which came into full effect in September 2024 under the supervision of the Saudi Data and Artificial Intelligence Authority (SDAIA).

Specifically, in relation to Saudi residents:

• We collect only the personal data necessary for the purpose for which it is collected
• We do not transfer personal data outside Saudi Arabia except where permitted under PDPL and with appropriate safeguards in place
• You have the right to access, correct, and request deletion of your personal data under PDPL
• We do not use personal data from Saudi residents for direct marketing without consent
• Sensitive personal data as defined under PDPL is not collected through this website

To exercise your rights under PDPL, contact us at info@nexa-secure.com. You may also raise a complaint with SDAIA at sdaia.gov.sa.

9. International Transfers

Personal data may be transferred between the UK and Saudi Arabia in connection with service delivery. Where such transfers occur, we apply appropriate safeguards consistent with both UK GDPR and Saudi PDPL requirements.

9. Your Rights

Under UK GDPR you have the following rights in relation to your personal data:

• The right to access the data we hold about you
• The right to correct inaccurate data
• The right to request deletion of your data
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at info@nexa-secure.com. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Changes to This Policy

We may update this policy from time to time. The date at the top of this page reflects when it was last updated. Continued use of the website following any update constitutes acceptance of the revised policy.

11. Contact

If you have any questions about this privacy policy or how we handle your data, please contact:

Nexasecure Advisory Ltd
124 City Road, London, EC1V 2NX
info@nexa-secure.com
www.nexa-secure.com