Throughout this policy, "NVNexus", "we", "us" and "our" refer to the operator of nvnexus.com (the "Site"), and "you" means you as a user of the Site and our services, whether you are a customer, a website visitor or another individual whose information we have collected (collectively, the "Services"). For the purpose of applicable data protection law, including the EU General Data Protection Regulation (GDPR), NVNexus is the data controller of your personal information unless explicitly stated otherwise.
Changes to this Privacy Policy
We may update this policy from time to time to reflect changes to our practices or for operational, legal or regulatory reasons. We will post the revised policy on the Site, update the "Last updated" date and take any other steps required by applicable law.
What personal information we collect
The personal information we obtain depends on how you interact with the Site and the Services. "Personal information" means information that identifies, relates to, describes or can be associated with you.
Information you give us directly
- Contact and company details submitted through our quote, expert and contact forms: name, work email, company, website, phone number, country and delivery address.
- Enquiry content: the product you are interested in, your workload description, message text and the page you sent the form from.
- Order information when you buy from us: billing and delivery address, VAT or company registration number, purchase order references and payment confirmation. We do not take card payments on the Site; payment details are exchanged with our finance team or a payment provider directly.
- Correspondence: anything you include in emails, calls or messages to us.
Some features require this information; you may choose not to provide it, but we will then be unable to quote or respond.
Information collected automatically
When you use the Site we, and the service providers that run it, may automatically collect usage data such as your IP address, browser and device information, the pages you visit, referring URLs and interaction timing. Our hosting provider (Cloudflare) processes this data to deliver the Site securely and to block abusive traffic, and our forms use Cloudflare Turnstile to distinguish people from bots; Turnstile evaluates browser signals and may set a cookie for that purpose.
Information from third parties
We may receive information about you from service providers that support our business, for example email delivery and CRM providers, logistics partners who confirm deliveries, credit and compliance screening providers, and public sources such as company registers. Any information obtained from third parties is treated in accordance with this policy.
How we use your personal information
- Quotes, orders and delivery. To answer your enquiry, prepare quotations, process and ship orders, handle returns and warranty claims and send transactional notifications. Legal basis: performance of a contract or steps taken at your request before entering into one (GDPR Art. 6(1)(b)).
- Compliance. To perform export control, sanctions and know-your-customer checks that we are legally required to carry out before supplying controlled technology, and to keep records required by tax and customs law. Legal basis: legal obligation (Art. 6(1)(c)) and our legitimate interest in lawful trade (Art. 6(1)(f)).
- Communication and service improvement. To provide support, follow up on enquiries, and understand how the Site is used so that we can improve it. Legal basis: legitimate interest (Art. 6(1)(f)).
- Marketing. To send you product news, availability updates or offers by email where you have asked for them or where we may lawfully do so for existing business contacts. You can opt out at any time using the unsubscribe link or by emailing us. Legal basis: consent (Art. 6(1)(a)) or legitimate interest (Art. 6(1)(f)) as applicable.
- Security and fraud prevention. To detect, investigate and prevent fraudulent, abusive or illegal activity and to protect the Site. Legal basis: legitimate interest (Art. 6(1)(f)).
Cookies
The Site is a static website and does not set marketing or advertising cookies. Cookies and similar technologies that may be set are limited to those required to operate the Site and its forms, including Cloudflare's security cookies and the Cloudflare Turnstile anti-bot check. If we introduce analytics or other optional technologies we will update this section and, where required, ask for your consent. Most browsers let you remove or block cookies through their settings; blocking essential cookies may prevent the forms from working. We honour the Global Privacy Control signal where applicable law gives it effect.
How we disclose personal information
We share personal information only where necessary for the purposes above, with:
- Service providers acting on our behalf: website hosting and security (Cloudflare, including a database in which form submissions are stored), transactional email delivery (Brevo), email and document tools, accounting, logistics and freight partners, and compliance screening services.
- Manufacturers and distributors when required to register a product, activate a licence, process a warranty claim or arrange direct shipment; for example NVIDIA or its authorised distributors may receive end-user details for licence entitlement or export documentation.
- Authorities where required by law, including customs, tax and export control authorities, or to respond to lawful requests, enforce our terms and protect our rights or the rights of others.
- A successor in connection with a merger, acquisition, financing or sale of all or part of our business, subject to this policy.
We do not sell personal information, and we do not share it with third parties for their own advertising.
International transfers
We operate from the European Union and the United States, and our service providers may process data in other countries. Where personal information originating in the EEA, the UK or Switzerland is transferred to a country without an adequacy decision, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, together with appropriate safeguards.
Security and retention
We use appropriate technical and organisational measures, including encrypted transport (HTTPS), access controls and reputable hosting providers, to protect personal information. No method of transmission or storage is completely secure, and we recommend not sending confidential technical or commercial information through unencrypted channels; we are happy to work under NDA.
We retain personal information for as long as needed for the purposes described above. Enquiries that do not lead to an order are kept for up to 24 months; order, invoice and export compliance records are kept for the periods required by tax, customs and export law (typically 7 to 10 years); marketing preferences are kept until you opt out.
Your rights
Depending on where you live, you may have the following rights in relation to your personal information, subject to the conditions and exceptions in applicable law:
- Access to the personal information we hold about you and details of how we use and share it.
- Correction of inaccurate or incomplete information.
- Deletion of your personal information, where we are not required to keep it.
- Portability: a copy of the information you provided in a structured, machine-readable format.
- Restriction or objection to processing based on our legitimate interests, including direct marketing, which you may object to at any time.
- Withdrawal of consent where processing is based on consent, without affecting processing carried out before withdrawal.
- Complaint to a supervisory authority. In the EEA you may contact the data protection authority in your country; for our European establishment this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).
To exercise these rights, contact us using the details below. We may need to verify your identity before responding, and we will reply within the time required by applicable law. We will not discriminate against you for exercising your rights.
Children
The Services are intended for businesses and professionals and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.
Third-party websites
The Site links to third-party websites, including manufacturer documentation and social media platforms. We are not responsible for the privacy practices of those sites, and their inclusion does not imply endorsement. Review their policies before providing information to them.
Contact
Questions, requests or complaints regarding this policy can be sent to info@nvnexus.com or to either of our offices:
- NVNexus, United States: 34 N Franklin Ave Ste 687 #5207, Pinedale, WY 82941
- NVNexus, Europe: Tornimäe tn 5, Kesklinna linnaosa, 10145 Tallinn, Estonia