Privacy Notice

What we collect

This site has no consumer accounts, no payments and no newsletter. There are exactly two places you can give us information, plus what your browser reports on the way past.

When you submit an enquiry.

The four enquiry desks — Commercial, Investor Relations, Press and Contact — record:

• What you type: your name, email address, organisation or publication where the desk asks for one, country, and your message.
• What your request carries: the IP address the submission came from and your browser's user-agent string, kept as a record of the submission and to detect abuse.

When you apply for a role.

A job application records your name, email address, phone number and any links you give us, together with the CV file you upload. The file is stored in a private bucket that is not publicly readable and is only retrievable by us.

What is collected automatically.

• Product analytics. Pages viewed, links clicked, session duration, approximate location derived from IP, and device and browser type. Analytics only run on the live nexara.industries site — previews and local development are excluded by hostname, so they never enter the data.
• Error reports. When something breaks, a diagnostic report including the page, the error and the browser is sent to our monitoring service.

Form inputs are masked in any session recording, so what you type into an enquiry or an application is never captured that way.

Why we use it

To answer you. An enquiry is read by a person and replied to. That is the whole reason the forms exist.

To run recruitment. To assess your application, contact you about it, and administer the process.

To keep the site working and honest. To understand which pages are read, to find and fix faults, and to detect and prevent abuse of the forms.

To meet legal obligations. To comply with the law, respond to lawful requests, and establish or defend legal claims.

Where a legal basis is required, we rely on our legitimate interests in operating and securing the site and in responding to people who contact us; on taking steps at your request before entering a contract; on your consent where we ask for it; and on our legal obligations.

We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use it for automated decision-making that produces legal effects.

Who processes it

We keep the vendor list short and name it, because a list you cannot see is not disclosure. Each of these processes data on our instructions, under contract.

• Vercel — hosting and content delivery for this site.
• Supabase — the database that stores enquiries and applications, and the private storage bucket that holds uploaded CVs.
• Resend — sends the internal notification email when a form is submitted.
• PostHog — product analytics.
• Sentry — error and performance monitoring.

Beyond those, we disclose personal information only to authorities or other parties where we believe in good faith that the law requires it or that it is necessary to protect our rights or someone's safety; and to a counterparty in a merger, acquisition, financing or sale of assets, as permitted by law.

Cookies

This site sets very few cookies, and none for advertising.

• Analytics cookies are set by PostHog on the live site to recognise a returning browser and stitch a session together.
• An administrator session cookie (nexara_admin) is set only after a member of our team signs in to the internal console. It is never set for a visitor.

You can block or delete cookies in your browser. Blocking analytics cookies does not affect anything you can do on this site. Because there is no agreed standard for honouring it, the site does not currently respond to browser Do Not Track signals.

Your rights

Depending on where you live, you can ask us to:

• give you a copy of the personal information we hold about you;
• correct it if it is wrong or incomplete;
• delete it;
• restrict or stop a particular use of it;
• give it to you, or to someone else, in a portable format; and
• withdraw a consent you previously gave, without affecting what we did before you withdrew it.

Make any of these requests through the Contact page. We may need to confirm who you are before we act. We will not charge you or treat you differently for asking. If you are in the EEA, the UK or Switzerland, you can also complain to your national data protection authority.

How long we keep it

Enquiries are kept while the conversation is live and for as long as we may need a record of it, then deleted.

Applications and CVs are kept for the role you applied to. We may keep them longer to consider you for future openings — tell us not to and we will delete them.

Analytics and error data are kept on our providers' standard retention schedules.

Where it goes

Our providers operate internationally, and your information is likely to be processed outside the country you are in, including in the United States. Where we transfer personal information across borders we rely on the safeguards required by applicable law, such as the European Commission's standard contractual clauses.

Security

Everything is served over TLS. The database has row-level security enabled with no public policies at all, so the public key can read nothing — every read and write goes through our own server-side code. Uploaded CVs sit in a private bucket and are served only through short-lived signed links to authenticated staff. Access to the internal console requires a signed session and is rate-limited.

No system is perfectly secure, and we do not claim otherwise. If you believe you have found a vulnerability, tell us through the Contact page before disclosing it publicly.

Children

This site is aimed at businesses, researchers, journalists, investors and job applicants. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, contact us and we will delete it.

Changes

We may update this notice. The current version is always the one on this page, with the date it took effect at the top. Where a change is significant we will do more than quietly repost it.

Contact

Questions about this notice, or a request about your information, go through the Contact page. We do not publish email addresses anywhere on this site — that is deliberate, and it applies to us as much as to you. Postal address: [to be confirmed].