Privacy Policy

This Privacy Policy explains how Nexiiom ("we", "us", "our") collects, uses, shares and protects your personal information, and the rights you have. We comply with Canada's PIPEDA; the EU and UK General Data Protection Regulation (GDPR) where it applies; the California CCPA/CPRA; Australia's Privacy Act 1988 where it applies; and other applicable privacy laws.

For the purposes of the GDPR, Nexiiom is the data controller of the personal information described here.

Information we collect

Information you give us, when you submit a form, email us, or book a call:

• Name and email address
• Website, business details and the service you're interested in, if provided
• The content of your enquiry or message

Information collected automatically, when you use the site (only to the extent you consent to non-essential cookies):

• Device, browser and approximate location data
• Pages visited and how you interact with the site (analytics)
• Cookies and similar technologies (see our Cookie Policy)

How we use your information & our legal bases

We use your information to:

• Respond to your enquiry and provide the services you ask about (legal basis: performance of a contract, or steps prior to a contract)
• Send information you've requested, such as an audit or resource (legal basis: consent)
• Operate, secure and improve our website (legal basis: legitimate interests)
• Send marketing where you've agreed (legal basis: consent); you can opt out at any time
• Meet legal and regulatory obligations (legal basis: legal obligation)

Cookies & consent

We load analytics and marketing cookies only after you consent via our cookie banner, using Google Consent Mode (so tracking stays off until you agree). You can change or withdraw consent at any time via the "Cookie settings" link in the footer. Full detail is in our Cookie Policy.

Who we share it with

We do not sell your personal information. We share it only with trusted service providers (processors) who help us operate, under contracts that require them to protect it. These include email and CRM (Brevo), email and productivity (Microsoft 365), analytics and tag management (Google), and hosting and security (ChemiCloud, Cloudflare). We may also disclose information where required by law.

International transfers

Some of our providers process data outside your country (including outside Canada, the EEA and the UK). Where we transfer personal information internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

How long we keep it

We keep personal information only as long as needed for the purposes above, to comply with legal obligations, resolve disputes and enforce agreements. That is typically up to 7 years for enquiry records, after which it is securely deleted or anonymised.

Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your information ("right to be forgotten")
• Object to or restrict certain processing
• Receive your data in a portable format (data portability)
• Withdraw consent at any time
• Opt out of marketing
• California residents: know, delete, correct, and opt out of "sale" or "sharing". We don't sell or share your data, and we honour Global Privacy Control (GPC) signals. You also have the right not to be discriminated against for exercising these rights.

To exercise any right, email hello@nexiiom.com. We'll respond within the timeframe required by law. You won't be charged or treated differently for making a request.

Children

Our services are not directed to children, and we don't knowingly collect information from anyone under 16.

Security

We take reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS) and access controls. No method of transmission is completely secure, but we work to keep your data safe and will notify you and the relevant authority of an eligible data breach as required by law.

Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the latest version.

Contact & complaints

Questions, requests or complaints? Email hello@nexiiom.com. We're based in Brampton, Canada.

If you're not satisfied with our response, you can complain to your local data protection authority. In Canada that's the Office of the Privacy Commissioner of Canada (OPC); in the EU or UK, your supervisory authority; in Australia, the Office of the Australian Information Commissioner (OAIC).