Privacy Policy

Effective Date: 20-06-2025
Scope: This policy applies exclusively to general browsing and interaction with the Nuevexa website and its associated subdomains, excluding any form-based submissions.

1. Purpose
This Privacy Policy outlines Nuevexa’s data handling practices as they relate to non-submitted, passive browsing of our website. It reflects our commitment to data protection in alignment with international privacy frameworks including, but not limited to, the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), DIFC Data Protection Law, and other relevant statutes.

2. Categories of Data Collected
When accessing our website, the following categories of data may be collected automatically:

• Technical Data: Browser type, operating system, device identifiers, screen resolution, language preferences.

• Usage Data: Session durations, click-paths, traffic sources, interactions with on-site elements.

• Network Data: IP address, geolocation, referring URLs, access timestamps.

All data collected is anonymized and aggregated where possible, and does not by itself identify any individual.

3. Legal Basis for Processing
Data is processed under the lawful bases of:

• Legitimate interest (e.g., to monitor and improve site performance, ensure platform integrity)

• Compliance with legal obligations (e.g., to detect and prevent fraud or abuse)

• Consent (where required, such as for non-essential cookies)

4. Use of Cookies and Analytical Technologies
We utilize cookies and equivalent tracking technologies for:

• Session management

• Web performance diagnostics

• Aggregated analytics (e.g., Google Analytics)

Visitors are notified of cookie usage via a consent mechanism upon entry and may manage preferences at any time.

5. Third-Party Services
Nuevexa engages reputable and compliant infrastructure providers solely for the purpose of hosting and securing this site. These entities operate under data processing agreements and are contractually restricted from repurposing data.

6. Data Transfers and Security
Data may be stored or processed in jurisdictions outside the user’s country of origin. All transfers are governed by:

• Standard Contractual Clauses

• Adequacy Decisions, or

• Equivalent binding legal instruments

Security controls include TLS encryption, intrusion detection systems, and zero-trust access enforcement.

7. Retention
Anonymous session and usage data is retained for no longer than necessary to fulfil the purposes stated, or as required for regulatory compliance and auditing.

8. Data Subject Rights
Depending on applicable law, you may have rights to:

• Access or receive a copy of your data

• Request correction or erasure

• Object to processing or request restriction

• Lodge a complaint with a supervisory authority

9. Contact
All data subject rights requests or privacy inquiries must be directed to:

Data Protection Office
📧 [email protected]
🌐 https://www.nuevexa.com