/ PRIVACY
Privacy
This page provides the production structure for Nexora's privacy notice without pretending unknown business or legal details have already been reviewed.
Draft structure — final business/legal review required. Unknown company, retention, contractual, jurisdictional and processor details are deliberately not invented here.
Who is responsible for the data
The final privacy notice must identify Nexora's reviewed legal/business identity and privacy contact details. Those details are not confirmed in the current build and are intentionally left out rather than guessed.
Data the site can receive
The current site can receive information submitted through Contact, Start a Project and newsletter forms, plus limited source/referrer and UTM fields attached to those submissions.
Booking details are handled by the configured booking provider. Nexora's booking-event tracking stores lifecycle events rather than attendee form contents.
Purpose and legal basis
The final notice must state the actual purposes and applicable legal bases for processing contact requests, project enquiries, newsletter consent, booking activity and any optional analytics. These legal determinations require final review before launch.
Providers and processors
The website is structured to support Supabase/Postgres for lead storage, Resend for email/newsletter functions, Cal.com for booking and Sanity for content when configured. The final notice must list only providers that are actually enabled in production and reflect their reviewed processing roles.
Retention and deletion
No final retention schedule is invented in this draft. Production retention periods, deletion routines and backup handling must be defined and reviewed before this text becomes a final policy.
Privacy requests
The final notice should explain the applicable privacy rights and provide a verified contact route for requests. The exact wording, identity-verification process and response procedure remain launch-review items.
Cookies and optional measurement
Necessary storage supports core behavior and remembers the site's privacy choice. Optional analytics and marketing categories remain disabled until the visitor consents. See Cookie Settings for the live controls.