Privacy policy

Scope

This policy describes how Nodexa handles personal information collected through this website. It applies to nodexa.us and its subdomains. It does not cover information processed under a signed services agreement, which is governed by that agreement.

Information we collect

We collect information in two ways.

• Information you submit. When you use the contact or project intake form we collect your name, company, business email, optional phone number, service category, project details, site count and location, target start date, urgency, and anything else you choose to write in the description field.
• Information collected automatically. Standard web server and content delivery logs, including IP address, user agent, requested page and timestamp. These are generated by our hosting and security infrastructure and are used for delivery, security and abuse prevention.

Why we use it

• To respond to your enquiry and scope the work you are asking about
• To contact you about the specific request you submitted
• To maintain security, prevent abuse and investigate suspected misuse
• To meet legal or regulatory obligations

We do not sell personal information. We do not share it with third parties for their own marketing purposes.

Legal basis and consent

Form submissions require you to confirm consent before sending. We record that consent alongside the submission. You can withdraw it at any time by contacting us, after which we will stop using your information to contact you and will delete it unless we are required to retain it.

Service providers

We use third-party infrastructure to operate this site and process submissions. These providers process information on our behalf and under contract:

• Cloudflare — DNS, content delivery, security filtering, site hosting and the database storing form submissions
• Email delivery — routing of notification and confirmation messages

Retention

Form submissions are retained while we are in active discussion with you and for a reasonable period afterwards for business record purposes. Server and security logs are retained on a shorter rolling basis as determined by our infrastructure providers. When information is no longer needed for the purpose it was collected, it is deleted.

Security

This site is served over HTTPS. Submissions are transmitted over encrypted connections and stored in access-controlled infrastructure. Access is limited to personnel who need it to respond to your enquiry. No system is perfectly secure, and we do not claim otherwise.

International data transfers

Nodexa is established in the United States and our infrastructure providers operate globally. If you contact us from outside the United States, the information you submit will be transferred to and processed in the United States and in other countries where our providers operate data centers.

These countries may not provide the same level of data protection as your own. Where required, our providers rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses. Our content delivery and database provider (Cloudflare) publishes its own data processing and transfer terms, which apply to information processed on our behalf.

If you are in the EEA, UK or Switzerland

Where the EU or UK General Data Protection Regulation applies to our processing, the legal basis for handling your enquiry is your consent, given when you submit a form, and our legitimate interest in responding to business enquiries addressed to us.

In addition to the rights listed below, you may have the right to lodge a complaint with your local supervisory authority. We would prefer the opportunity to address your concern first, but that right is not conditional on contacting us.

Your rights

Depending on your location, you may have the right to request access to the personal information we hold about you, request correction or deletion, object to or restrict certain processing, and withdraw consent. To exercise any of these, contact us using the details below. We will respond within the period required by applicable law.

Cookies and analytics

This site does not use advertising cookies or cross-site tracking. If analytics are enabled, they are configured to collect aggregate usage information only. Form contents are never sent to analytics. Any change to this that requires consent will be accompanied by an appropriate consent control.

Children

This site is directed at businesses and is not intended for children. We do not knowingly collect information from children.

Changes

If this policy changes materially we will update the date at the top of this page. Continued use of the site after a change indicates acceptance of the updated policy.

Contact

Questions about this policy or about information we hold: [email protected].