NEXAQUANTA
Website & Customer Privacy Notice
V1 – Last updated 24 September 2026
UZAM Limited trading as NexaQuanta
This notice explains how NexaQuanta collects and uses personal information when you visit https://nexaquanta.ai/, contact us, request a demonstration or proposal, attend our business events, or interact with us as a customer, prospective customer or business contact. It also explains your choices, your privacy rights and how to contact us.
Personal information means information that identifies you or can reasonably be linked to you. This notice provides information; visiting our website does not amount to consent to every use described here. We ask separately for consent where it is required.
1. Who we are and how to contact us
UZAM Limited, trading as NexaQuanta (we, us or our), is the controller for the personal information we use for our own website and business relationship purposes. A controller decides why and how personal information issused.
Registered office: 60 Tottenham Court Road, Suite 1198a, Fitzrovia, London, United Kingdom, W1T 2EW.
Data Protection Officer: Muhammad Jarrar Azim Khan.
Privacy enquiries, rights requests and complaints: [email protected]
2. Customer data and other privacy notices
This notice covers customer contact and account administration information where we decide how it is used. It does not cover personal information that a customer provides for us to process solely on that customer’s instructions, for example information in its systems or datasets used in an AI or technology project. In that situation, we normally act as a processor and the customer acts as controller.
Our processing of that customer-controlled information is governed by the applicable customer agreement, Statement of Work and Data Processing Agreement. The customer’s privacy notice explains its purposes and lawful bases. This notice does not authorise additional uses, model training or processing locations outside those arrangements.
If your request concerns information controlled by a customer, please contact that customer. If you contact us, we will direct the request to the appropriate customer and assist as required. Employee, recruitment and office-visitor processing is outside this notice and requires separate privacy information.
3. Information we collect and where it comes from
The information we collect depends on your interaction with us. It can include:
- Identity and business contact details, such as your name, employer, role, business email address, telephone number and business address, provided by you, your organisation or an authorised business contact.
- Enquiry and relationship information, such as messages, demo requests, meeting notes, proposals, contracts, billing contacts and transaction records, provided during our dealings with you or your organisation.
- Account and support information, where accounts are available, such as user identifiers, authentication records, permissions, support tickets and correspondence, supplied by you or generated through use of the service.
- Website and device information, such as IP address, browser and device type, approximate location derived from an IP address, visit times, pages viewed and security logs, collected through our website and its technical services.
- Marketing and event information, such as subscriptions, interests you tell us about, attendance, preferences, cookie choices and opt-out records. If we use engagement tracking, it is described in our cookie information and subject to the choices explained below.
- Information from professional networks, public business sources or referral partners, where relevant and lawfully obtained. We explain the source and intended use when we first contact you, or otherwise within the period required by law.
Please do not send passwords, confidential client datasets, health information, criminal-offence information or other sensitive material through a general enquiry form. If we need sensitive information for a specific service, we will explain the purpose, applicable legal conditions and secure collection method separately.
4. Why we use your information
For processing subject to UK or EU data protection law, we use the following lawful bases. Where we rely on legitimate interests, we assess whether the processing is necessary and whether your rights and interests outweigh the interests described below.
| Purpose and relevant information | Lawful basis and interest |
|---|---|
| Respond to enquiries, arrange demonstrations and prepare proposals using contact details and correspondence. | Legitimate interests in responding to business enquiries. Contract or steps you request before a contract only where you personally are the contracting party. |
| Manage customer relationships, accounts, support and billing using business contact, account and transaction information. | Legitimate interests in delivering services to business customers and managing those relationships. Contract where necessary for a contract directly with you. |
| Operate, secure and troubleshoot the website and services using technical, account and security information. | Legitimate interests in maintaining availability, preventing misuse and protecting information. Legal obligation where a specific security duty applies. |
| Send marketing and event communications using contact details, interests and preferences. | Consent where required for the channel and recipient. Otherwise, legitimate interests in promoting relevant business services, subject to your right to object and electronic-marketing rules. |
| Measure website usage and advertising performance using cookies and interaction data. | Consent for optional tracking where required. Any permitted exemption and associated basis will be identified in our Cookie Notice; we do not treat all analytics as exempt. |
| Meet legal duties and handle privacy requests using relevant identity, transaction and correspondence records. | Legal obligation where applicable, including relevant data protection, tax and accounting duties. |
| Resolve disputes, investigate misconduct and protect legal rights using relevant communications and records. | Legitimate interests in investigating issues and establishing, exercising or defending legal claims; legal obligation where a disclosure is required. |
| Assess or complete a business sale, restructuring or investment using necessary business relationship records. | Legitimate interests in evaluating and completing the transaction, with confidentiality and limits on access. |
We identify required information at collection. If you do not provide information needed to answer your enquiry, verify an account or perform a contract, we may be unable to complete that request. Optional marketing information is not a condition of receiving our core services.
Before using your information for a new purpose, we assess whether that use is lawful and compatible with the original purpose. We provide further information and seek new consent where required.
5. Cookies and marketing choices
Cookies and similar technologies can store or read information on your device. Some are necessary to provide or secure a service you request. Others support preferences, analytics, advertising or social media features. Our Cookie Notice at identifies the technologies actually used, their providers, purposes and durations.
We obtain consent before using technologies that require it. You can accept, reject or withdraw optional cookie choices through Cookie Preferences. Refusing optional tracking does not prevent access to the core website. Where a lawful exemption applies, we explain it and provide any required opt-out.
You can stop direct marketing at any time by using the unsubscribe option in a message or contacting us. This also applies to profiling associated with direct marketing. We may retain a limited suppression record to ensure your choice is respected. Essential service, security and contractual communications may continue.
For electronic marketing, we obtain consent where required, or rely on a permitted exception only when all its conditions are met. Our use of business contact details does not remove your right to object.
6. AI and automated processing
AI features and uses covered by this notice: we do not currently use AI features that process your personal information, and we do not collect personal information for any such use.
Model training and evaluation: neither we nor our providers use personal information for training, fine-tuning or model evaluation.
Profiling and significant automated decisions: we do not carry out profiling or significant automated decision-making using your personal information.
Any applicable rights to an explanation, human intervention, to make representations or to contest a significant automated decision can be exercised through our privacy contact. Client-controlled AI processing remains subject to the customer arrangements explained in section 2. This notice is not permission to train models on customer information
7. Who receives your information
We share information only where necessary for the purposes described in this notice and subject to appropriate safeguards. Depending on the service or interaction, recipients include:
- Service providers supporting website hosting, cloud systems, security, communications, customer relationship management, support, billing and consent management.
- Analytics, advertising, event or AI providers, where used, as identified in the relevant Cookie Notice or feature-specific information and subject to applicable choices.
- Personnel and entities supporting NexaQuanta’s operations, with access limited to their duties and any applicable customer restrictions.
- Professional advisers, auditors, insurers and payment providers where needed for our business administration or legal rights.
- Authorities, regulators, courts or law enforcement where disclosure is legally required or otherwise lawful, necessary and proportionate.
- A prospective buyer, investor or successor, and their advisers, where necessary for a transaction and subject to confidentiality and appropriate restrictions.
Providers acting as processors are required to handle information on our instructions under appropriate contracts. Some recipients, such as professional advisers or advertising platforms, may act as independent or joint controllers for specified activities. We identify those roles and provide further privacy information where required.
8. International access and transfers
Our hosting, support and other providers may operate outside the United Kingdom.
Where a transfer is restricted by UK data protection law, we use a permitted mechanism: an applicable adequacy regulation, or appropriate safeguards such as the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses. We complete the required transfer assessment and apply additional protections where necessary. EU-restricted transfers use an applicable EU mechanism, including adequacy decisions or EU Standard Contractual Clauses.
The mechanisms used for our actual transfers are [identify the mechanisms for the relevant countries or recipients]. You may contact us for information or a copy of relevant safeguards, with confidential or unrelated information redacted where appropriate.
9. How long we keep information
We retain information only for as long as needed for the relevant purpose. We consider the duration of our relationship, the sensitivity of the information, legal record-keeping requirements and the time needed to resolve a specific dispute or security incident. Our usual periods are:
| Record category | Retention period or criterion |
|---|---|
| Enquiries and unsuccessful proposals | Six years after the enquiry closes or the last meaningful contact, unless a business relationship begins. |
| Customer account, contract and billing records | During the relationship and for contract specified period afterwards, as necessary for contractual, tax, accounting and legal-claims requirements. |
| Marketing records | Until you withdraw consent or object, or as otherwise required under UK and EU GDPR. A minimal suppression record is kept as needed to prevent further marketing. |
| Website, account and security logs | The period necessary for security and operational purposes, in accordance with UK and EU GDPR requirements, from creation. Relevant extracts may be kept longer for a documented incident or legal hold. |
| Cookies and analytics identifiers | For the durations stated in the Cookie Notice or consent settings, subject to any earlier deletion or withdrawal requirements. |
| Rights requests and complaints | 30 days after closure, as needed to demonstrate our response and address related legal obligations or claims. |
Where we need to preserve information for a legal obligation, claim or investigation, we limit retention to the relevant information and purpose. When retention ends, we delete or securely anonymise the information. Residual backup copies are protected and removed through the backup retention cycle.
10. How we protect information
We use technical and organisational safeguards appropriate to the information and risks, including restrictions on access, confidentiality obligations and procedures for handling security incidents. The controls applicable to a particular customer service are set out in the relevant contractual security arrangements. No system is completely secure. Where a personal data breach occurs, we assess it and notify the relevant authorities and affected people when required by law.
11. Your privacy rights
Subject to the applicable law and its conditions, you may ask us to:
- Confirm whether we hold your personal information and provide access to it and information about its use.
- Correct inaccurate information or complete information that is incomplete.
- Delete your information where the conditions for erasure are met.
- Restrict how we use your information in specified circumstances.
- Provide information you supplied in a portable format, or transfer it where technically feasible, when automated processing is based on consent or a contract with you.
- Stop processing based on legitimate interests because of your particular situation. We will stop unless we demonstrate a legally permitted overriding reason or need it for legal claims.
- Stop direct marketing, including associated profiling. This objection is not subject to an overriding business-interest test.
- Give effect to applicable safeguards for significant automated decisions, as described in section 6.
You can withdraw consent at any time where it is our lawful basis. Withdrawal does not affect processing that was lawful before you withdrew it.
To exercise a right, contact us using section 1. You do not need to use legal terminology or a prescribed form. We may request proportionate information to verify your identity or a representative’s authority, or clarify what you need.
We respond without undue delay and normally within one month. Where the law permits an extension, pause or different starting point, we explain the reason and relevant timing. For complex or multiple requests, the permitted extension can be up to two further months. Requests are normally free; we charge a reasonable fee or refuse only where the law permits, and explain our decision and your complaint rights.
12. Questions and complaints
You have the right to complain to us about our use of your personal information. Contact our Data Protection Officer using the email or postal address in section 1 and describe your concern. We acknowledge data protection complaints within 30 days of receipt, investigate without undue delay, keep you informed and explain the outcome and any action taken.
You may also complain to the Information Commissioner’s Office, the UK data protection regulator, through the ICO complaints service. The ICO generally expects you to give the organisation an opportunity to resolve the matter first. This does not remove your legal right to complain to the regulator or seek a judicial remedy.
Where EU GDPR applies, you may complain to the relevant supervisory authority, including in the EEA country where you live or work or where the alleged infringement occurred.
EU representative: [email protected]
Data Protection Officer: [email protected]
13. Children
Our website and business services are intended for a professional audience, not directed at children. If you believe a child has provided personal information through these channels, please contact us so we can assess the situation and take appropriate action.
14. Other websites and services
Our website may link to third-party websites or services. Their use of information is governed by their own privacy information. Please review it before providing information to them.
15. Changes to this notice
We update this notice when our practices or relevant requirements change. We publish the revised date and provide additional notice of material changes where appropriate or legally required. Where a change requires fresh consent, we ask for it separately.