Privacy policy

Nexus Cove (“we”, “us”, “our”) is the trading name behind the AI Value Realisation platform offered at nexuscove.com. We are the data controller for personal information processed in connection with this website and the services described on it. Where we deliver an AI Value Realisation Sprint or related engagement for a client, we typically act as a data processor on that client’s instructions; this is documented separately in the engagement agreement.

We collect only the information we genuinely need. In practice this means three categories.

Information you give us. When you complete the contact form, ask for a demo, or correspond with us by email, we record your name, work email address, employer, role, and the message you send. If you take part in a sprint or pilot, we may also collect details of the AI initiatives, strategy materials, and operational context that you choose to share with us.

Information collected automatically. When you visit nexuscove.com we record basic technical information such as the pages viewed, the approximate region of the visit, the referring page, and the type of device and browser. This helps us understand which content is useful and detect abuse. We do not build advertising profiles and do not sell this data.

Information from third parties. If you reach us through a partner or referral, we may receive your name, employer, and a short note describing the introduction. We treat this information with the same care as information you give us directly.

Under the UK GDPR we must have a lawful basis for processing personal information. The bases we rely on are summarised in the table below.

We do not sell personal information. We share it only with carefully chosen service providers who help us run the business, and only to the extent each provider needs it for the service they provide.

Today this includes our hosting provider (the Plesk-managed server that serves nexuscove.com), our email provider, and the small set of cloud tools we use for analytics, scheduling, and document storage.

When you submit the contact form on this site, the message is delivered to our inbox via Web3Forms, a form-relay sub-processor we use to keep the website itself static and free of bespoke server code. Web3Forms only sees the data you choose to put in the form (your name, work email, company, role, persona, and message); it does not place tracking cookies on your visit, and it forwards the message to a single named inbox under our control. Their privacy notice is at web3forms.com/privacy.

If we engage additional sub-processors for a sprint, we name them in the engagement agreement so the client can object before we start. If we are ever required to disclose information by law or to protect our rights, we will only disclose what is strictly necessary.

We keep personal information only as long as it is needed for the purpose we collected it. Enquiry messages are retained for up to 24 months unless they lead to an active engagement, in which case they form part of the engagement record. Engagement records are retained for the period set out in the relevant agreement, and in any event for the minimum period required by accounting and tax law (currently six years in the UK). Website analytics and security logs are retained for up to 12 months.

We treat security as part of the product, not as a feature. The site is served over HTTPS with automatically renewed certificates, the production server is hardened following Plesk and Ubuntu security guidance, and access to administrative tools is protected by strong, unique credentials. Our source code lives in a private GitHub repository, and we do not place client production data into public services. A fuller description is in our Security overview.

Under the UK GDPR you have the right to ask us for a copy of the personal information we hold about you, to ask us to correct it if it is wrong, to ask us to delete it where there is no good reason for us to keep it, to object to our processing, and to ask us to restrict processing in certain circumstances. You can exercise any of these rights at no cost by emailing us at admin@nexuscove.com.

If you are unhappy with how we handle your information, you also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk. We would prefer the chance to put things right first, so please do contact us before escalating.

We use a small number of cookies for site analytics and to remember basic preferences. We do not use third-party advertising cookies. The full breakdown is in our Cookies notice.

We may update this policy from time to time, for example when we add new services or when the law changes. We will indicate the new version number and the “last updated” date at the top of the page. For material changes that affect existing contacts we will give reasonable advance notice by email.

The contact for all privacy matters is admin@nexuscove.com. Please put “Privacy enquiry” in the subject line so we can route it quickly.