Privacy Policy

1. Who We Are

Nexus MSP is a trading name of Nexus eTech Ltd, a company registered in England and Wales. We provide digital sovereignty consultancy, managed migration services, and technology advisory to European public and private sector organisations.

Our registered address is available upon request. Our primary point of contact for data protection matters is: privacy@nexus-msp.co.uk

2. What Data We Collect

We collect only the data necessary to respond to your enquiries and deliver our services. This includes:

• →Contact information you provide via our website contact form or email, including your name, email address, organisation, and any information you choose to share
• →Basic website analytics data such as page visits and general geographic region — collected anonymously and never linked to individuals
• →Communication records when you correspond with us by email

We do not collect sensitive personal data. We do not use cookies beyond what is strictly necessary for the site to function.

3. How We Use Your Data

We use your data solely to:

• →Respond to your enquiries and provide the services you have requested
• →Communicate with you about relevant services, updates, or changes — only where you have given us permission or where we have a legitimate business interest
• →Comply with our legal obligations

We will never sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• →Legitimate interests — when responding to business enquiries and maintaining client relationships
• →Contract performance — when processing data as part of delivering our services
• →Legal obligation — when required to process data to comply with applicable law

5. Data Storage and Security

All data we hold is stored on European infrastructure. We do not transfer your personal data outside the UK or European Economic Area. Our email infrastructure is hosted by IONOS, a European provider, ensuring your data remains under European legal jurisdiction and is not subject to the US CLOUD Act.

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.

6. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes it was collected, or as required by law. Enquiry data is retained for up to 24 months. Client data is retained for the duration of the engagement and up to 6 years thereafter in line with legal requirements.

7. Your Rights

Under UK GDPR, you have the right to:

• →Access the personal data we hold about you
• →Request correction of inaccurate data
• →Request erasure of your data where there is no compelling reason for its continued processing
• →Object to processing based on legitimate interests
• →Request restriction of processing in certain circumstances
• →Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at privacy@nexus-msp.co.uk. We will respond within 30 days.

8. Changes to This Policy

We may update this policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of our website or services after changes constitutes acceptance of the updated policy.

Nexus eTech Ltd · Registered in England & Wales · privacy@nexus-msp.co.uk