Privacy Policy

Who we are

This notice explains how personal information is handled when you use NexaStrategic websites, make an enquiry, join a Professional Devil’s Advocate waitlist or buy a digital tool. The contact for privacy enquiries is milica@nexastrategic.com. The legal identity and postal address of the contracting data controller must be confirmed in the transaction documents and supplied on request. NexaStrategic and Concentric are separate activities and this notice does not replace any Concentric privacy notice.

Information we collect

We may collect your name, email address, enquiry and correspondence, product interests, optional marketing consent, purchase and access records, and technical information necessary to operate and secure the website. Payment card details are processed by the payment provider and are not collected directly through our website forms.

Decision tool inputs may contain personal information. Do not enter sensitive personal information about yourself or others unless it is necessary and you understand the processing arrangements. We cannot promise that information entered into an AI supported tool remains exclusively on your device.

Why we use information and our lawful bases

We respond to enquiries and take steps towards providing requested services on the basis of legitimate interests or steps taken before entering a contract. We process purchases and access details to perform our contract. We retain necessary financial records to comply with legal obligations. We use essential technical information for site security and fraud prevention on the basis of legitimate interests. We send Build Notes or marketing emails only where we have the consent or other lawful permission required by applicable marketing law. You can withdraw marketing consent at any time.

Providers and international processing

Depending on the service used, information may be processed by Netlify for hosting, Airtable for waitlist records, Stripe for payment processing, Beehiiv for optional publications, Supabase for tool access and records, and any AI service integrated into a product. Providers may process information outside the UK. Where a restricted transfer takes place, we assess the applicable transfer rules and safeguards. Contact us for details relevant to your data.

How long information is kept

We keep personal information only for as long as reasonably needed for the relevant purpose, including fulfilling purchases, responding to enquiries, managing access, maintaining records required by law and resolving disputes. You may ask us for the retention period applicable to a particular record. We do not represent that decision content is automatically deleted unless the product expressly confirms this.

Cookies and analytics

Essential cookies or similar technologies may be used to deliver and secure the site. Nonessential analytics or marketing technologies, if enabled, require an appropriate consent mechanism under applicable UK rules. The site should not deploy nonessential trackers before the required consent is obtained.

Your rights

Depending on the circumstances, you may request access, correction, erasure, restriction, portability or objection to processing. You can withdraw consent where processing is based on consent. Contact milica@nexastrategic.com. You may complain to the UK Information Commissioner’s Office at ico.org.uk.

Security and updates

We take reasonable steps to protect information, but no online system is completely secure. We may update this notice when services or providers change. Material changes will be communicated where required.