Privacy Policy – NEXA Design
Last updated: 10 May 2026
1. About Us
This Privacy Policy applies to all personal data collected and processed by:
NEXA Design
Legal Entity: Nadezda Balujeva – Entrepreneur Individuel
SIREN: 999 961 071
SIRET: 99996107100019
Registered Office:
25 RUE Gustave Eiffel
34070 Montpellier
France
Website: https://nexadesign.online
Email: info@nexadesign.online
Phone: +44 7367 075074
NEXA Design (“we”, “us”, “our”) respects your privacy and processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.
2. What Personal Data We Collect
2.1 Data You Provide to Us
We may collect the following information when you place an order or contact us:
Full name
Billing and shipping address
Email address
Phone number
Order details (products, amounts, transaction dates)
Return information
Customer service communications
2.2 Automatically Collected Data
When you visit our website, we may automatically collect:
IP address
Browser type and device information
Pages visited and website activity
Cookie data (see Section 9)
2.3 Payment Information
Payments are processed via secure, PCI-DSS compliant European payment providers.
We do not receive or store full credit card or bank details.
We only receive limited payment status information necessary to process your order.
3. Legal Basis for Processing
We process personal data based on the following legal grounds:
Performance of a contract (processing orders, delivery, returns)
Legal obligations (tax and accounting requirements)
Legitimate interests (fraud prevention, website improvement)
Consent (marketing cookies, where applicable)
4. How We Use Your Data
Your data is used for:
Order processing and delivery;
Payment handling and fraud prevention;
Customer service and returns management;
Compliance with legal obligations;
Website optimization and security;
Responding to inquiries and support requests.
We do not sell your personal data to third parties.
5. Data Retention
We retain personal data only as long as necessary:
Order and invoice data: 7 years (legal obligation)
Customer service communications: up to 24 months
Account data (if applicable): until account deletion
Cookie data: see Section 9
6. Sharing of Data with Third Parties
We share personal data only when necessary with:
6.1 Shipping & Fulfilment Partners
Carriers and logistics providers for order delivery.
6.2 Payment Service Providers
Authorized EU-based payment processors (e.g., Visa, Mastercard, Bancontact and other supported methods).
6.3 IT & Hosting Providers
Website hosting, security monitoring, and analytics services.
6.4 Authorities
Where required by law or regulatory obligation.
All third parties are contractually bound to process data securely and in accordance with GDPR.
7. International Data Transfers
Personal data may be processed by service providers located outside the European Union where necessary for website operation, payment processing, customer support, or other legitimate business purposes.
Where personal data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as:
Standard Contractual Clauses (SCCs);
Processing agreements compliant with GDPR;
Secure hosting environments.
8. Data Security
We implement appropriate technical and organizational measures to protect personal data, including:
SSL-encrypted connections;
Secure payment environments;
Restricted internal access controls;
Regular security updates and monitoring.
9. Cookies
Our website uses cookies and similar technologies.
9.1 Essential Cookies
Necessary for core website functionality (shopping cart, security, checkout).
9.2 Analytical Cookies
Used to analyze website performance and improve user experience.
9.3 Marketing Cookies
Only placed with your explicit consent where applicable.
You may manage cookie preferences via your browser settings or cookie banner.
10. Your Rights Under GDPR
If you are located in the European Union, you have the right to:
Access your personal data;
Request correction of inaccurate data;
Request deletion (“right to be forgotten”);
Restrict processing;
Data portability;
Object to processing;
Withdraw consent at any time (where applicable).
Requests can be submitted to:
We respond within 30 days.
11. Children
Our website is not directed at individuals under the age of 16.
We do not knowingly collect personal data from minors.
12. Complaints
If you believe your data is not handled properly, please contact us first.
EU residents have the right to lodge a complaint with their local Data Protection Authority.
13. Changes to This Policy
We may update this Privacy Policy from time to time.
The most current version is always available on our website.