Legal

Privacy Policy

(WAITLIST VERSION) This Privacy Policy explains how Nuxa Financial App Limited ("Nuxa", "we", "us") collects, uses, and protects your personal data when you visit our landing page and join our Waitlist.

Introduction

We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Key Privacy Principles

Controller Status: Nuxa is the Data Controller for the contact information you provide on the Waitlist.

Purpose Limitation: We only use your data to manage your position on the Waitlist and update you about our product launch.

No Data Sale: Nuxa does not sell your email address or personal details to third parties.

Future Functionality: References to "Zero-Knowledge" encryption or "Open Banking" on our marketing site describe future product features. We do not currently collect or process financial banking data during this Waitlist phase.

1. Information We Collect

Currently, we collect only the minimum amount of data necessary to manage the Waitlist:

  • Identity & Contact Data: Your name and email address when you sign up.
  • Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, and operating system (collected automatically via cookies/analytics to ensure website security and performance).
  • Usage Data: Information about how you use our website (e.g., button clicks, time spent on page).

2. Lawful Basis for Processing

Under UK GDPR, we process your data under the following legal bases:

  • Consent: You explicitly provide your email address to join the Waitlist and receive updates. You can withdraw this consent at any time by unsubscribing.
  • Legitimate Interest: We process Technical and Usage data to prevent fraud (e.g., bot sign-ups), ensure network security, and improve the performance of our landing page.
  • Legal Obligation: To comply with regulatory requirements where applicable.

3. Third-Party Processors

We do not sell your data. We share strictly necessary data with the following categories of trusted service providers who help us operate the Waitlist:

  • Cloud Hosting & Infrastructure: (e.g., AWS, Vercel) to host the website securely.
  • Email Services: (e.g., Resend, SendGrid, Mailchimp) to send you confirmation emails and launch updates.
  • Analytics: (e.g., PostHog, Google Analytics) to understand website traffic and performance. These providers use anonymized data where possible.

4. Your Rights

Under data protection law, you have rights including:

  • Right to Erasure: You can ask us to delete your email from the Waitlist and remove your data entirely.
  • Right of Access: You can ask for copies of your personal data.
  • Right to Withdraw Consent: You can unsubscribe from our emails at any time by clicking the "Unsubscribe" link in the footer of any email we send.
  • Right to Complain: If you believe we have not handled your data in accordance with the law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO.

5. Cookies

Essential Cookies: We use simple cookies to ensure the website functions correctly (e.g., ensuring the "Join Waitlist" button works).

Analytics Cookies: We may use cookies to see how many people are visiting our site. You can disable these in your browser settings, though some parts of the website may become inaccessible.

6. Data Retention & Security

Retention: We will retain your email address until the product launches (at which point you will be invited to create a full account) or until you unsubscribe/request deletion.

Security: We implement industry-standard safeguards (TLS encryption) to protect your data during transmission and storage.

7. International Data Transfers

We store data primarily in the UK/EEA. However, some of our service providers (e.g., cloud infrastructure or email delivery services) may process data in the USA. Where this occurs, we ensure protection through UK Government-approved International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs) to ensure your data remains secure.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us:

  • Data Controller: Nuxa Financial App Limited
  • Registered Address: [Insert Address, e.g., 71-75 Shelton Street, London, WC2H 9JQ]
  • Company Number: [Insert Company Number]
  • Email: [Insert Email, e.g., privacy@nuxa.finance]