PRIVACY NOTICE

How this website handles your information.

This notice explains what information the Nexaaris Labs website processes, why, which providers are involved and how long it is kept.

Who we are

Nexaaris Labs Ltd ("we"), a private limited company registered in England and Wales with company number 16746745 and registered office at 2 Shepton Road, Broughton, Milton Keynes, Buckinghamshire, MK10 7AH, United Kingdom, is the controller for personal information processed through this website. Contact us about privacy at contact@nexaarislabs.com.

Browsing the website

The website is a static application hosted on Microsoft Azure Static Web Apps. As with any website, the hosting platform processes technical data such as IP address, browser user-agent and requested URL to deliver pages and protect the service. We do not use advertising cookies, analytics cookies or third-party tracking scripts, and we do not build visitor profiles.

When you use the contact form

When you submit the form, your name, email address, optional organisation and message are sent over HTTPS to our contact service, an Azure Functions application hosted in the UK South region.

The service validates the request and sends your enquiry by email to contact@nexaarislabs.com using Azure Communication Services Email (data location: United Kingdom). Your email address is set as the reply-to address so we can respond.
The enquiry is then held in our Microsoft 365 mailbox and handled as business correspondence. It is not written to a website database or to application logs.
We use the information only to respond to your enquiry and any follow-up conversation you choose to have with us.

Spam and abuse protection

To protect the form from automated abuse we use Cloudflare Turnstile and rate limits.

Cloudflare Turnstile runs a challenge in your browser and processes browser and device signals to distinguish people from bots. Cloudflare acts as an independent provider; see Cloudflare's privacy policy for details. The Turnstile widget loads only on the contact page.
Our contact service stores a salted, one-way hash of your network address with a counter, to limit how many messages can be sent per hour. These records do not contain the address itself or any form content and are automatically deleted within about 48 hours.

Legal basis

We process contact enquiries on the basis of our legitimate interests in responding to people who contact us and in protecting our services from abuse, and, where relevant, to take steps at your request before entering into a contract.

Retention

Enquiries that do not lead to further business are deleted from our mailbox when they are no longer needed, and in any case within 24 months. Correspondence relating to an engagement is retained in line with our contractual and legal obligations. Rate-limit records are deleted within about 48 hours.

Processors and international transfers

Our providers are Microsoft (Azure hosting, Azure Communication Services and Microsoft 365) and Cloudflare (Turnstile). Static website content is distributed through Microsoft's global network, and the Static Web Apps resource is managed from Microsoft's West Europe region. Where a provider processes data outside the UK, it does so under its published data-protection terms and appropriate transfer safeguards.

Your rights

Under UK data-protection law you may have the right to access, correct or delete your personal information, to object to or restrict its processing, and to data portability. To make a request, email contact@nexaarislabs.com. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Changes to this notice

We will update this notice if the way the website processes information changes. Last updated: November 2026.

Contact: contact@nexaarislabs.com