Privacy Notice
How we handle your information.
Enquiries only
We collect the details you choose to send us through the enquiry forms. Nothing else.
Never sold
Your information is not sold, rented or shared with advertisers.
You control it
You can ask us to correct or delete it at any time.
Draft pending review
This notice is a prepared draft and is not legally final until approved.
Draft notice, pending founder and legal confirmation
This notice has been prepared to the structure required for a UK-focused privacy notice, but it is not yet legally final. The details listed below have not been confirmed and are marked accordingly. They must be completed and approved before this page is published as the operative notice.
Data controller
The full legal name of the company that operates this website, and whether it is registered in England and Wales.
Registered address
The registered office address of the data controller.
Contact and data protection contact
The email address enquiries should be sent to, and a contact point for data protection requests.
ICO registration
Whether the controller is registered with the Information Commissioner's Office, and its registration number.
Retention periods
How long enquiries are kept before deletion, and the retention period for any server or web-server logs.
Processors and hosting
The hosting provider, the transactional email provider and any other processor, with the categories of data each handles.
International transfers
Whether any processing happens outside the UK, and the safeguards relied on if it does.
Analytics and cookies
Whether any analytics, advertising or cookie-based tracking is used. If it is not, this section should say so explicitly.
Who operates this website
The data controller
Nodexa is a financial wellbeing technology business. The legal entity that operates this website and is responsible for the information submitted through it is [to be confirmed before publication], with a registered address at [to be confirmed] and an enquiry contact address at [to be confirmed].
Whether the controller is registered with the Information Commissioner’s Office, and its registration number, is [to be confirmed]. We will update this notice as soon as these details are settled.
Scope of this notice
This notice covers this website and the information submitted through its enquiry forms. It does not yet cover the Nodexa employee platform itself, which is still in development and will be covered by a separate notice before it launches.
We have kept this notice deliberately narrow. We would rather it describes accurately what we do now than anticipate what we might do later.
What we collect
Information you give us
- Your name.
- Your email address.
- Your company name, and your job title if you provide one.
- The approximate number of employees at your organisation.
- Any message you choose to write to us.
Please do not include sensitive personal information about other people in the message field, and do not send us financial account details, National Insurance numbers or similar. We do not need them to reply to you.
Information collected automatically
Like most websites, our hosting provider records standard technical request information such as your IP address, the page requested, the referring page and the time of the request, for the purpose of keeping the service secure and available.
Whether we use any analytics, advertising or cookie-based tracking is [to be confirmed]. If we do not, this notice will say so plainly. We do not use advertising trackers or sell behavioural data.
Why we process it
Lawful bases
We rely on the following UK GDPR lawful bases for information submitted through the enquiry forms:
- Consent
- For employer registrations, we rely on your consent, given by submitting the form and confirming the acknowledgement. You may withdraw consent at any time.
- Legitimate interests
- For general enquiries, we rely on our legitimate interests in responding to you, understanding interest in Nodexa and planning the product. We have considered your rights and concluded they do not override ours.
- Legal obligation
- Where we are required by law to keep certain records, for example records of business correspondence.
What we do with it
- Respond to your enquiry and arrange an introductory conversation.
- Keep a record of the conversations we have with you.
- Understand the kind of organisations interested in the platform.
- Plan and develop Nodexa, in aggregate.
- Meet any legal or regulatory obligation that applies to us.
We do not use information submitted through this website for marketing to third parties, and we do not build advertising profiles.
Who receives it
Enquiry information is received by the Nodexa team and delivered to a single, controlled inbox. It is not shared with advertisers, data brokers or social platforms, and it is not used to enrich any third-party database.
Our processors, being the hosting provider and the transactional email provider, are [to be confirmed]. Each acts on our instructions, under a written agreement, and no processor is permitted to use enquiry information for its own purposes. Where any processing takes place outside the UK, the safeguards relied on are [to be confirmed].
Retention and deletion
Enquiry information is kept for as long as it is useful to us and for as long as we are required to keep it. The specific retention periods are [to be confirmed], and will be stated here before this notice is published.
When we no longer need information, we delete or anonymise it. You can ask us to delete it sooner at any time, and we will do so unless we are legally required to keep it.
Your rights
What you can ask us to do
- Give you a copy of the information we hold about you.
- Correct anything inaccurate.
- Delete the information we hold, where we have no overriding reason to keep it.
- Restrict or object to how we use it.
- Withdraw consent, where we are relying on consent.
- Ask us to transfer it to another provider, where you have asked us to do so.
We do not charge for this, and we aim to respond within one month. You can also complain to the Information Commissioner’s Office if you are not satisfied with how we have handled your request.
How to make a request
Use the contact form on our contact page, or write to us at [contact address to be confirmed]. Please describe what you would like us to do and include enough detail for us to find the relevant record.
We are not required to provide a formal response to every question, and we will always explain our position clearly.
Contact
Questions about this notice, or about the information we hold, can be sent through the contact form. Our data protection contact point is [to be confirmed].