Privacy Policy
This policy explains how Nexus Neurodevelopment Centre handles personal information collected through this website. It does not cover data processed inside Nexus CMS deployments, which is governed by separate Data Processing Agreements with each licensee.
1. Who we are
This site is operated by Nexus Neurodevelopment Centre, a company registered in Scotland. For privacy questions you can contact us at info@nexusndc.co.uk.
2. What we collect
We collect a limited amount of personal information through this website:
- Enquiry forms. Name, email, organisation, and the content of any message you send through the demo, investor, or partner enquiry forms.
- Server logs. Standard web server logs including IP address, user agent, requested URL, and timestamp. Used for security and troubleshooting only.
- Spam-protection signals. Cloudflare Turnstile tokens and a hidden honeypot field, used purely to filter out automated abuse. No tracking cookies are issued by these mechanisms.
- Optional website analytics. If you choose “Allow analytics”, we record a random visitor identifier, page paths, broad referral source, viewport width, active time, navigation and contact-form milestones. We do not record names, email addresses, message contents, keystrokes, or session replays.
We do not run advertising trackers or share analytics data for advertising.
3. How we use it
- To respond to your enquiry.
- To follow up on partnership, investor, or demo conversations.
- To maintain the security and integrity of the website.
- With your permission, to understand which pages are useful and improve the route from initial visit to enquiry.
We never sell personal data. Website infrastructure providers process limited data on our behalf: Vercel hosts the site, Google Firebase stores consented analytics events, Resend delivers enquiries, and Cloudflare provides optional spam protection.
4. Lawful basis
Under UK GDPR our processing of website enquiries relies on legitimate interests — specifically, our interest in responding to inbound business communications and yours in receiving a response.
Optional website analytics rely on your consent. Declining analytics has no effect on access to the site or enquiry forms.
5. Retention
Enquiry messages are retained for as long as they remain operationally relevant — typically up to 24 months — after which they are deleted unless retained for a specific contractual or legal reason. Server logs are retained for 90 days. Consented analytics events are retained for up to 12 months.
6. Your rights
You have the right to:
- Access the personal data we hold about you.
- Request correction or deletion of inaccurate or outdated data.
- Object to processing or request restriction of processing.
- Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any of these rights, email info@nexusndc.co.uk.
7. Cookies
This website does not set analytics cookies. If you allow analytics, local storage holds a random visitor identifier and your consent choice, while session storage holds a random 30-minute visit identifier. We do not use advertising or session-replay tools.
8. Updates
We may update this policy from time to time. Material changes will be notified at the top of this page. The version date at the top of this document indicates the most recent change.