Privacy policy

What we collect

Apart from the technical data described below, this site collects personal data in one place only: the contact form. When you complete it we receive:

• Name
• Work email
• Phone, if you provide it (optional field)
• Company
• Service of interest and, if you provide it, the budget range
• The message you write
• Confirmation that you ticked the consent box, with the date and time you sent the form

Name, email, company, service and message are needed to answer you. Without them we cannot reply. Phone and budget are optional.

We run no advertising on this site, we do not profile visitors, and we neither sell nor share data with third parties for commercial purposes.

Technical data

When you visit the site, our hosting provider processes your IP address and basic request data, such as browser type, the page requested and the time, to deliver the page and protect the site against abuse. Your approximate country, derived from your IP address, is used only to choose a default language and phone dialling code, and is not stored. When you send the form, your IP address is used for a few minutes to limit repeated submissions. Hosting logs are kept by our provider for a short period and then deleted.

What we use it for

Only to answer your enquiry and, if a conversation follows, to assess and prepare a possible engagement. Nothing else. You are not added to a newsletter or a marketing list.

On what legal basis

We process the details you send because you asked us to review your enquiry and, if it goes further, to prepare a proposal. Under the Law of Georgia on Personal Data Protection this rests on Article 5(1)(j), reviewing an application you made, and Article 5(1)(b), steps taken at your request before a contract. Technical and security data rest on our legitimate interest in keeping the site available and free of abuse, under Article 5(1)(i). Where the GDPR applies to you, the corresponding bases are Article 6(1)(b) and Article 6(1)(f).

We ask for your consent only for the transfer described under Who has access. You can withdraw it at any time by writing to us, without affecting processing already carried out.

Who has access

Only the Nexovia Systems team. These providers process data on our behalf under written data processing agreements:

• Vercel Inc., United States (vercel.com): hosting and delivery of this site. The form is handled by servers in the European Union.
• Plus Five Five, Inc., trading as Resend, United States, with data processed in Ireland (resend.com): delivery of the email the form generates. It keeps a copy for up to 30 days.
• Proton AG, Switzerland (proton.me): the encrypted mailbox where your message is received and answered.

Switzerland and the member states of the European Union are on the list of countries with adequate data protection approved by the Personal Data Protection Service of Georgia. The United States is not on that list. Vercel and Resend are US companies, and some of your data may be stored in or accessed from the United States, where personal data may be less protected than in Georgia and public authorities may be able to access it.

By ticking the box on the form you give your written consent to this transfer, under Article 37(2)(d) of the Law of Georgia on Personal Data Protection. If you prefer that your data does not leave Georgia, the European Union and Switzerland, write to us by email instead of using the form.

For visitors covered by the GDPR, these providers are certified under the EU-U.S. Data Privacy Framework.

How long we keep it

We keep enquiry messages for 12 months after our last exchange with you and then delete them. If the enquiry leads to a contract, the messages become part of the client file and are kept for as long as Georgian accounting and tax law requires.

Cookies

This site uses no advertising or analytics cookies, which is why there is no consent banner. It sets one strictly necessary cookie, and only if you use the language switch:

• NEXT_LOCALE: set only when you click the EN/KA switch. It remembers the language you chose while you browse. It holds only the language code, is sent only to this site and is deleted when you close your browser.

Your rights

You can ask us, free of charge:

• whether we process data about you, for information about it and for a copy
• to correct, update or complete it
• to stop processing it, or to erase or destroy it
• to block it while a question about it is resolved
• to receive the data you gave us in a machine readable format
• to withdraw your consent at any time, in the same way you gave it

We answer within 10 working days, and within 3 working days for a request to block data. In special cases we may extend the 10 days by up to 10 more working days and will tell you why.

If you believe your rights have been breached, you can complain to the Personal Data Protection Service of Georgia (pdps.ge) or go to court. If you are in the European Economic Area, you can also complain to the supervisory authority where you live.

Security

The site is served only over encrypted connections (HTTPS) with a restrictive content security policy. Form messages travel encrypted through our hosting and email delivery providers to our mailbox. Access is limited to the people who need it to answer you.

Changes to this policy

If we change how we handle personal data, we update this page and the last-updated date at the top.