Your privacy, handled with care.

Last updated: 25 October 2026

Who is responsible

Nexus AI Data Labs Limited is the controller of personal information collected through this website and related enquiry correspondence. We are registered in England and Wales, company number 16617548. Our registered office is Flat 18 Farrell House, 10 Ronald Street, London, England, E1 0DU.

For privacy questions or requests, email nexusaidatalabs@gmail.com or write to our registered office, marked “Privacy”. This notice covers this website and enquiries, rather than the separate processing involved in a client project or the Timeless product.

What we collect

You provide your name, business email, company, chosen service and business challenge through the contact form. Website and budget are optional. We also receive information you choose to share in later emails. Required fields help us understand and respond to your enquiry; without them, the form cannot be submitted. You can email us instead. Please avoid passwords, financial account details and sensitive personal information.

We store an enquiry reference, submission time, email delivery status, provider message identifier and delivery update time. Cloudflare processes connection information, including IP addresses, to deliver and protect the website. Our rate limiter uses a hashed IP identifier and a temporary attempt counter. A hash is not the same as anonymous data. Form contents are not intentionally written to application logs.

Why we use it

We use enquiry information to understand your request, reply, arrange discussions and manage potential client relationships. Our lawful basis is legitimate interests: responding to people who contact us and running our business. We also rely on legitimate interests to prevent spam and keep the website secure. Where processing is necessary to take steps at your request towards a contract with you personally, our basis is those steps before entering a contract. We use legal obligation where a specific law requires us to keep or disclose information.

Submitting an enquiry does not subscribe you to marketing. We do not sell enquiry information or use it to make decisions with legal or similarly significant effects solely by automated processing. The website does not use Google Analytics until you accept analytics cookies. Hosting security features may process technical information separately.

Optional website analytics

With your consent, we use Google Analytics 4 to understand how people use our website and which pages are useful. Google receives technical and usage information, including page views, cookie identifiers, browser and device information, and connection information needed to receive requests. This is separate from the information you submit in an enquiry.

Analytics is off until you choose “Accept analytics”. Rejecting it does not affect access to the website or contact form. We do not intentionally send names, email addresses, enquiry text, URL query strings or URL fragments to Analytics. Google Signals and advertising personalisation are disabled in our tag configuration. The setup is for page views; analytics data is not the same as a verified count of people.

Your analytics choice is stored in your browser for up to 180 days. If you accept, Google Analytics cookies are also configured to expire after up to 180 days. You can change your choice through “Cookie settings” in the footer. Withdrawing consent stops future analytics collection from this site and attempts to remove its accessible Analytics cookies; it does not automatically erase data Google already received. Contact us about requests concerning that data. Google’s processing and retention are also governed by the settings of our Analytics property and its published terms. See how Google uses information from partner sites.

Who receives your information

People authorised by Nexus to handle enquiries can access the details they need. Cloudflare hosts the website and stores submissions in D1. Resend delivers enquiry emails to our company mailbox, which is hosted by Google Gmail. Google also provides optional Analytics when you consent. A submission can remain saved in D1 even if the email fails. Email copies, replies and any attachments are separate from the database record. We may also share information with professional advisers or authorities when necessary for legal obligations or claims.

Processing outside the UK

Our providers operate internationally, so your information may be processed outside the UK, including in the United States. Resend states that it stores customer data in the United States. Cloudflare and Resend publish data processing terms incorporating Standard Contractual Clauses and the UK Addendum for relevant transfers. Google describes its transfer arrangements, including adequacy frameworks and contractual safeguards, in its privacy information. These arrangements do not mean that your information stays in the UK.

You can read the Cloudflare data processing terms, Resend privacy safeguards and Google transfer information. Contact us for information about safeguards relevant to your enquiry, including how to obtain a copy where applicable.

How long we keep enquiries

Our retention policy is six months after the last meaningful interaction about an enquiry. This includes a substantive reply, meeting or agreed next step, rather than an automatic acknowledgement or delivery update. We review inactive enquiries monthly and remove expired records and related mailbox copies during that review. Deletion is manual, so it may take until the next monthly review after the six month period. The website does not automatically track later email conversations or delete old enquiries, and Gmail does not automatically apply this policy.

If an enquiry becomes a client engagement, necessary records are handled under the retention arrangements explained for that engagement. We may keep limited records longer where necessary to meet a specific legal obligation or establish, exercise or defend a legal claim. We review those exceptions and remove the information when it is no longer needed.

Provider logs and backups have separate lifecycles. Resend currently states that email and log data is kept for 30 days on its Free, Pro and Scale plans, with backups lasting seven days. Earlier removal can require a request to Resend. Cloudflare D1 recovery history can retain deleted records for seven days on the Free plan. Deleting an active record does not immediately erase every backup. When restoring our records, expired information must be reviewed and removed again.

Rate limit counters expire after 15 minutes, with stored counter data cleared by a scheduled alarm. Cloudflare may retain its own security information under its service policies.

Your choices and rights

Depending on the circumstances, you can ask to access or correct your personal information, request deletion or restriction, object to processing based on legitimate interests, or request portability where that right applies. These rights have exceptions. If we ever rely on consent, you can withdraw it without affecting earlier lawful use.

Contact our privacy email to make a request. We may need proportionate information to verify your identity. Requests are normally free and we normally respond within one month; we will explain any permitted extension or refusal. Please contact us if you are unhappy with how we handle your information. You can also complain to the UK Information Commissioner’s Office through its data protection complaints service.

Changes to this notice

We will update this page when our handling of enquiry information changes. The date above identifies the latest version.