Privacy Policy

Information provided in enquiries

The website enquiry form securely saves your details in the app's private database before attempting a transactional email through Brevo to the founders' configured recipient (hello@nxs48.com by default). If email fails or a bounce is reported, the database copy remains available with delivery pending. The app allows at most three notification retries within 24 hours of submission, while it is running. It checks provider delivery events; acceptance by Brevo is not confirmation of recipient delivery. Failed or exhausted notifications remain available in the private register and are not deleted because email failed. Confirmation distinguishes a saved enquiry from an email accepted by the provider; neither promises inbox receipt or a response deadline. Enquiries are not used for marketing. WhatsApp remains the preferred enquiry channel; direct email is also available. Please do not send confidential documents through an initial enquiry.

Enquiry access within NXS48 is restricted to the founders. The password-protected private register allows the founders to view and export saved enquiries as CSV independently of email. Exported copies contain personal information and must be kept secure and handled under the same retention rules. Passwords and enquiry contents are not written to application logs. Messages sent through WhatsApp or email are also processed by those external providers under their own terms and privacy policies. Website hosting and communications providers may process operational data necessary to deliver their services.

Purpose and retention

Enquiry information is used to respond to your request, arrange appointments and scope a potential engagement.

• Unconverted website enquiries: 24 months from last contact, then deleted or anonymised, unless subject to a legal hold or a documented longer retention requirement.
• Client files: for the duration of the matter plus 8 years, or longer where professional or legal rules require.
• Google Analytics 4 data: 14 months.
• Server and security logs: 90 days.

Expired app-database records are deleted automatically when the application is running, including at startup. Active client matters and legal holds are excluded; closed client matters are retained for 8 years or a documented longer requirement. The founders maintain contact, conversion, matter-closure and hold information. This app cleanup does not delete separate mailbox, WhatsApp, client-file or infrastructure-backup copies; those remain subject to the founders' retention process.

Deletion or correction requests are handled within 30 days of a verified request. Contact the privacy officer regarding correction, access or deletion requests, subject to applicable legal obligations.

Optional analytics and consent

The embedded office map is provided by Google Maps. Loading or opening that functional map may involve Google's processing under its own policies, separately from optional Google Analytics.

Google Analytics is managed through Google Tag Manager and is enabled only after you accept optional analytics. Before acceptance, the website does not load the Tag Manager container or Google Analytics. Analytics measures page use and contact-link clicks; form messages and contact-field values are not sent as analytics events.

Your consent preference is stored locally in this browser. You may accept, decline or change it using “Cookie preferences” in the footer. Declining does not prevent you from using the site or contacting NXS48. Withdrawing consent stops future analytics collection by this website; it does not retroactively delete data already processed by the analytics provider.

Privacy and grievance contact

Shraddha Walunj
Grievance & Data Protection Officer
grievance@nxs48.com