How we handle your personal data under UK GDPR and the Data Protection Act 2018.
Last updated: 31 July 2026
Nexora Digital is a web design and development business operating in the United Kingdom. For the purposes of UK GDPR and the Data Protection Act 2018, Nexora Digital is the data controller for personal data collected through this website. You can contact us at nexoradigitalweb@outlook.com for any privacy matter, including data access or deletion requests.
Enquiry data: when you submit our contact form we collect the name, business name, email address, phone number (if given) and message content you provide. Payment data: if you purchase a package, card details are collected and processed directly by Stripe. We never see or store your full card number. We receive only a payment reference, amount, currency and status. Technical data: standard server and analytics data such as pages visited, approximate location derived from IP address, browser type and referring site.
Responding to enquiries and preparing a free homepage concept — legitimate interests, and steps taken at your request prior to entering a contract. Delivering and supporting a purchased project — performance of a contract. Taking payment, issuing receipts and keeping accounting records — performance of a contract and compliance with a legal obligation. Keeping the site secure and improving it — legitimate interests. We do not use your data for automated decision-making or profiling, and we do not sell your data.
We only send marketing emails if you have asked us to, or where permitted under the soft opt-in for existing customers. Every marketing email includes an unsubscribe link, and you can withdraw consent at any time by emailing us.
We use a small number of trusted processors to run this business: Lovable (website hosting and application platform), Supabase (database hosting for enquiry records), Stripe (payment processing), and our email provider for correspondence. Each acts under contract and processes data only on our instructions, except Stripe which is an independent controller for payment data under its own privacy policy. Some providers may process data outside the UK; where they do, transfers are covered by the UK International Data Transfer Agreement, UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.
Enquiries that do not become projects are deleted within 12 months. Project records, contracts and correspondence are kept for the duration of the engagement and up to 6 years afterwards to handle disputes and warranty questions. Financial and tax records are kept for 6 years plus the current tax year, as required by HMRC. Backups may retain copies for a short additional period before rotation.
This website uses only the cookies needed for it to function, plus privacy-friendly aggregate analytics where enabled. We do not run advertising or cross-site tracking cookies. Full detail is in our Cookie Policy.
Enquiry data is stored in a managed database with row-level access controls, encrypted in transit over HTTPS and encrypted at rest by our hosting providers. Access is limited to the people who need it to deliver your project. No online service can be guaranteed completely secure, so if you believe your data has been compromised please contact us immediately.
Under UK GDPR you have the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object, and the right to withdraw consent. To exercise any of these, email nexoradigitalweb@outlook.com. We will respond within one month. There is no charge in normal circumstances.
This website and our services are aimed at businesses. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted data to us, contact us and we will delete it.
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, or by calling 0303 123 1113.
We may update this policy as our services or providers change. The date at the top of this page shows when it was last revised, and material changes will be highlighted on this page.
Nexora Digital is a web design business trading in the United Kingdom. Questions about this policy can be sent to nexoradigitalweb@outlook.com.