Privacy Policy

NexGrate Ltd ("NexGrate", "we", "us") is the controller of the personal data processed through this website, nexgrate.com, and any related subdomains. If you have any questions about this policy or how we handle your data, contact us at support@nexgrate.com or via Telegram @NexGrateCS.

Contact form data: when you submit the "Request a Demo" form or contact us, we collect your name, email address, company name, role, project details, and the WhatsApp or Telegram handle you choose to provide.

Technical data: like most websites, we collect basic technical information through our hosting and analytics tools — IP address, browser type, device type, pages visited, and referring URL.

Communication data: if you contact us by email or Telegram, we keep a record of that correspondence.

• Responding to demo requests and sales enquiries — legal basis: taking steps prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest (Art. 6(1)(f)) in answering potential customers.
• Providing, securing and improving this website — legal basis: legitimate interest (Art. 6(1)(f)).
• Analytics (optional, consent-based): with your consent we use Google Analytics to understand how visitors use the site — legal basis: consent (Art. 6(1)(a)). You may withdraw this consent at any time.
• Compliance with legal obligations — legal basis: legal obligation (Art. 6(1)(c)).

Essential cookies: strictly necessary for the website to function (e.g. security and session handling). These cannot be switched off.

Analytics cookies (optional): set only if you accept via our cookie banner. We use Google Analytics, which sets cookies such as _ga and _ga_* to measure site usage. Data may be transferred outside the EU/EEA; where it is, we rely on the European Commission’s Standard Contractual Clauses.

You can change or withdraw your cookie choice at any time: clear this site’s cookies in your browser settings and our banner will appear again on your next visit.

• Service providers (processors) that help us run the website and communications, including our hosting platform, email delivery provider, and Google (Analytics). They process data only on our instructions.
• Where data is transferred outside the EU/EEA, we use appropriate safeguards such as EU Standard Contractual Clauses.
• We do not sell your personal data, and we do not use it for automated decision-making or profiling.

Demo requests and enquiries: kept for up to 24 months after our last contact, unless a business relationship follows.

Analytics data: kept per Google Analytics defaults (up to 26 months).

We may retain data longer where required by law or to establish or defend legal claims.

• Access — obtain confirmation that we process your data and a copy of it.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data ("right to be forgotten").
• Restriction — ask us to pause processing in certain circumstances.
• Data portability — receive your data in a structured, commonly used format.
• Objection — object to processing based on legitimate interests, including analytics.
• Withdraw consent — withdraw consent for analytics at any time, without affecting prior lawful processing.
• You also have the right to lodge a complaint with your local data protection authority. In Bulgaria this is the Commission for Personal Data Protection (KZLD, cpdp.bg); for a full list of EU authorities see edpb.europa.eu.

We apply appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS), access controls, and data minimization. No method of transmission over the internet is 100% secure, but we work continuously to safeguard your information.

We may update this Privacy Policy from time to time. The date of the latest revision is shown below. Material changes will be highlighted on this page.