Privacy Policy — NEXALINK COMMERCE & TECH LTD

1. Introduction

NEXALINK COMMERCE & TECH LTD (Company #17246946) ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or use our software services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the data controller for the personal data we collect through our website and services.

2. Information We Collect

Information you provide:

Name, email address, and company name when you submit our contact form
Billing information and payment details when you subscribe to our Services (processed securely by our payment processor)
Communication preferences and correspondence with our support team

Information collected automatically:

Technical data such as IP address, browser type, device information, and operating system
Usage data such as pages visited, time spent on pages, and referral sources
Cookie data as described in our Cookie Notice below

3. How We Use Your Information

We use your personal data for the following purposes:

To provide, maintain, and improve our Services
To process subscriptions and send billing communications
To respond to your inquiries and provide customer support
To send service-related communications (e.g., updates, security notices)
To comply with legal obligations and regulatory requirements

4. Lawful Basis for Processing

Under UK GDPR, we process your personal data on the following lawful bases:

Contractual necessity: To fulfil our obligations under our Terms of Service
Legitimate interests: To improve our Services and ensure network security
Consent: Where you have given explicit consent (e.g., marketing communications)
Legal obligation: To comply with applicable laws and regulations

5. Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your data with:

Service providers: Payment processors, hosting providers, and email delivery services that help us operate our business (e.g., Stripe, Namecheap)
Legal authorities: When required by law or to protect our legal rights
Business transfers: In connection with a merger, acquisition, or sale of assets

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by law. Specifically:

Contact form submissions: 2 years
Subscription and billing records: 6 years (UK tax requirement)
Analytics data: 26 months

8. Your Rights

Under UK GDPR, you have the following rights:

Right of access: Request a copy of the personal data we hold about you
Right to rectification: Request correction of inaccurate data
Right to erasure: Request deletion of your data ("right to be forgotten")
Right to restrict processing: Request limited use of your data
Right to data portability: Request transfer of your data to another service
Right to object: Object to processing based on legitimate interests

To exercise any of these rights, contact us at nexalinkcommerce@mindsparklearn.com. We will respond within 30 days.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

10. Cookie Notice

Our website uses only essential cookies required for basic functionality and security. We do not use tracking cookies, advertising cookies, or third-party analytics cookies without your explicit consent.

As we only deploy strictly necessary cookies, no cookie consent banner is required under UK PECR. If we introduce non-essential cookies in the future, we will implement a cookie consent mechanism before deployment.

Essential cookies we use:

Session cookie — to maintain your browsing session
Security cookie — to protect against cross-site request forgery (CSRF)

You can control cookies through your browser settings. Disabling essential cookies may affect website functionality.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. We encourage you to review this Policy periodically.

12. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: nexalinkcommerce@mindsparklearn.com
Company: NEXALINK COMMERCE & TECH LTD
Company Number: 17246946
Address: UNIT 82A JAMES CARTER ROAD, MILDENHALL, BURY ST EDMUNDS, IP28 7DE, UNITED KINGDOM

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

ICO Contact Details:
Website: https://ico.org.uk
Phone: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF