Legal
Privacy notice
This notice explains what personal data Nexus Digital collects through this website and our services, why we use it, who we share it with and the rights you have under the EU General Data Protection Regulation (GDPR).
Effective 23 September 2026
Who we are
Nexus Digital Ireland (“Nexus Digital”, “we”, “us”) is the controller of the personal data described in this notice. Our registered office, and our postal address for written correspondence, is 26 Kirwan Court, Kirwans Lane, Galway City, H91 W7Y8 (not open to visitors). You can contact us about privacy by calling 089 263 5532, emailing privacy.nd@nexusdigital.ie or through our contact page.
What we collect
- Enquiries and requests: your name, email address, phone number, company name, the service you are interested in and the message you send us.
- Customer accounts: the details needed to create and secure your portal account, such as your name, business email address, role and sign-in and security records.
- Service records: support tickets, onboarding tasks, quotes, orders, invoices, supplier and procurement records, and any documents you upload to the portal.
- Payments: payment status and references. Card details are entered directly with our payment provider, Stripe, and are never stored by us.
- Technical data: security and error logs. To protect our forms from abuse we keep only a one-way keyed hash of your network address, not the address itself.
Please do not send passwords, access credentials or payment-card details in an enquiry or support request.
Why we use it and our legal basis
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry and preparing a quote | Steps taken at your request before entering a contract |
| Delivering services, support, onboarding and the customer portal | Performance of our contract with you or your organisation |
| Invoicing, payments and keeping accounting records | Contract and our legal obligations under Irish tax law |
| Securing our website and services and preventing abuse | Our legitimate interest in keeping our systems and customers safe |
| Optional analytics and marketing cookies | Your consent, which you can withdraw at any time |
Who we share it with
We do not sell personal data. We share it only with service providers who process it on our behalf under written contracts, including:
- Supabase (database, authentication and file storage)
- Vercel (website hosting)
- Google (optional public website analytics through Google Analytics 4 and Tag Manager, after analytics consent)
- Stripe (payment processing)
- Amazon Web Services (reading invoice documents that customers upload for supplier and spend management)
If you choose to contact us on WhatsApp, your messages are also handled under WhatsApp’s own terms and privacy policy. We may also disclose data where the law requires it.
International transfers
We design customer solutions for primary data hosting in the European Union. Where a provider processes data outside the European Economic Area, we rely on an adequacy decision or the European Commission’s Standard Contractual Clauses to protect it.
How long we keep it
We keep enquiries for as long as needed to respond and follow up, and delete them when they no longer serve that purpose. We keep customer and service records for the life of the customer relationship and for as long afterwards as needed to resolve queries or claims. We keep accounting and tax records for six years, as Irish tax law requires.
Your rights
You have the right to access your personal data, and to ask us to correct it, delete it, restrict or object to its use, or give it to you in a portable format. Where we rely on consent, you can withdraw it at any time. To exercise a right, email privacy.nd@nexusdigital.ie or contact us using the details above; we will respond within one month.
You also have the right to complain to the Data Protection Commission at dataprotection.ie.
Cookies
Our cookie policy explains the cookies and similar technologies we use and how to change your choices.
Changes to this notice
We will update this notice when our processing changes. The effective date at the top shows when it was last revised.