Privacy Policy

Last updated: September 21, 2026. This policy is designed to comply with the EU General Data Protection Regulation (GDPR) and applicable data protection laws.

1. Data We Collect

We collect the following personal data when you use our Service:

• Account data: name, email address, phone number, shipping address.
• Order data: order history, payment method (we do not store card numbers).
• Technical data: IP address, browser type, device information, cookies.

2. Legal Basis for Processing

We process your data on the following legal bases: (a) performance of a contract (fulfilling your orders), (b) your consent (marketing, cookies), and (c) our legitimate interests (fraud prevention, analytics).

3. How We Use Your Data

• To process and deliver your orders.
• To manage your account and provide customer support.
• To process payments through our payment partners (SSLCommerz, bKash, Nagad).
• To improve our Service and analyse usage.
• To send you updates and marketing (only with your consent).

4. Data Sharing

We do not sell your personal data. We share data only with trusted service providers who help us operate the Service (payment processors, shipping partners, hosting providers), under strict data-processing agreements.

5. Your Rights (GDPR)

You have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time.

To exercise any of these rights, contact us at support@nexus.com.

6. Data Retention

We retain your personal data only as long as necessary to provide the Service and comply with legal obligations (e.g., tax records).

7. Data Security

We use appropriate technical and organisational measures, including encryption, secure sessions and access controls, to protect your data.

8. International Transfers

Your data may be processed in countries outside your own. We ensure appropriate safeguards are in place for any international transfers.

9. Contact

For privacy enquiries, contact our Data Protection Officer at privacy@nexus.com.