Privacy notice.

Last updated 11 November 2026

1Who we are.

1.1 Nexodyne Limited, a company registered in England and Wales (company number 16539459), whose registered office is at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom (“Nexodyne”, “we”, “us”), runs this site, findmyproduct.nexodyne.org, for its AI Sync service. We are the controller of your personal data: we decide how and why it is used, and we are responsible for it under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, for people in the European Union, the EU GDPR.

1.2 For anything about your data, email info@nexodyne.org.

1.3 This notice covers this site only. Our house site, nexodyne.org, has its own privacy notice.

2What we collect, why, and our lawful basis.

What	The data	Why we use it	Lawful basis
Contact form	Your name, your firm, your email address, your phone number if you give it, and what you tell us about what you sell and in which city. With them we keep the time, the page you wrote from and its language.	Only to answer you and to arrange the meeting.	Steps you ask us to take before a contract; our legitimate interest in answering enquiries.
Emails to us	What you send to info@nexodyne.org, and your contact details.	To reply and help you.	Our legitimate interests.
Visit counts (section 7)	The page’s address (never anything after a question mark), the site that linked to us and the campaign tag in the link if there is one; each click or tap: the part of the page, the control’s own label (up to 60 characters, never anything you type or pick in a checkbox or choice button) and the address a link leads to (without its query or “#” part); while you are on the page: how far down you got, how many seconds it was active, whether you use a phone, a tablet or a computer, your screen size (small, medium or large) and the page’s language; errors in our scripts. A random visit number, made up by your browser and stored nowhere, tells the pages of one visit apart. Stored without your IP address or browser details.	To find and fix problems on the site and to see which pages and buttons work. Never for advertising or to build a profile of you.	Our legitimate interests (7.7); your consent where the law asks us to ask first.
Technical data	Your browser type and the time of each request; short-lived counters that stop abuse (rate limits). Our web server’s access log keeps your IP address and browser for 14 days; from it we also count, each day, how many pages were seen and by how many visitors, keeping only the numbers. Our own visit counts (section 7) are not written to it.	To keep the site secure and working, to stop spam and attacks, and to count visits.	Our legitimate interests.

2.1 We only collect what we need. Every form field we store is listed above. A hidden field in the form, which people never see, catches spam robots; if it is filled, we store nothing.

2.2 Please do not put sensitive information in the message: for example, about your health, beliefs, politics or private life. If you do, we keep it only as part of that record and delete it on the same schedule.

2.3 People read every message and make every decision about it. Software, including the AI tools in clause 3.4, may help us sort and draft, but we make no decisions about you with legal or similarly significant effects by automated means. Rate limits and the spam field are anti-abuse measures, not decisions about you.

2.4 We send no marketing emails. The only emails you get from us are answers to what you wrote.

2.5 The test on the home page works in your browser: the product and the city you type there are not sent to us. The links to ChatGPT, Gemini and Claude are plain links. This site passes nothing to them, and what you ask there is between you and that service.

2.6 This site loads no scripts, fonts or pictures from other firms.

3Who handles your data.

3.1 We use a small number of service providers. All but the providers of AI models (clause 3.4) act only on our instructions and must keep your data secure.

Provider	What it does for us	Where
Contabo	The server that runs the site and stores our database	Germany (European Union)
Cloudflare	Delivers our pages and protects the site from attacks. It sees your IP address while the page is delivered.	Worldwide, including the United States
Purelymail	Our email provider: brings the form’s messages to our inbox, and receives your emails	The United States
GitHub (Microsoft)	Stores encrypted copies of our database backups; only we hold the key	The United States
Providers of AI models (such as Anthropic)	Help us draft, build, test and organize our work, so they may process what you send us (clause 3.4)	Several countries, including the United States

3.2 We may also share data if the law requires it, to protect people’s rights or safety or our own, with our professional advisers, or with a buyer if our business is sold, who must then protect it as this notice says.

3.3 We never sell your personal data. We share nothing with advertisers, and we run no advertising scripts and no third-party analytics. Our own visit counts (section 7) go only to our server.

3.4 We work with advanced artificial intelligence: leading AI models, set up with our own instructions and tools for our tasks. We use them throughout our work, for example to draft, build, test and organize. So information you send us (such as your messages and the details of your firm and goods) may be processed by AI models from more than one provider, such as Anthropic. We share only what a task needs. The providers handle it under their own terms and privacy policies, and some of them process data in the United States (clause 4.3). Please do not send us sensitive information we have not asked for (clause 2.2). No AI system makes decisions about you with legal or similarly significant effects (clause 2.3).

4International transfers.

4.1 Our server is in the European Union and our company is in the United Kingdom. Data moves between the two under the UK’s adequacy regulations for the European Economic Area, and under the European Commission’s adequacy decision for the United Kingdom.

4.2 Cloudflare, Purelymail (our email provider) and GitHub (our encrypted backups) may access data from the United States or other countries. For those transfers we rely on the UK–US data bridge or the EU–US Data Privacy Framework where the provider is certified, and otherwise on the UK’s International Data Transfer Agreement or Addendum, or the EU standard contractual clauses. Email us for details.

4.3 Providers of AI models may process what we share with them in the United States or other countries, under their own terms and privacy policies (clause 3.4). Email us to ask which providers we use.

5How long we keep data.

Data	How long
Messages from the contact form	12 months after you send it if no project follows; sooner if you ask. If a project follows, the message joins the project file under the project agreement.
Team mailbox copies of form messages	Deleted by hand on the same schedule as the record they belong to.
Emails to info@nexodyne.org	As long as needed to answer and to keep a record of what was agreed, then deleted or archived.
Rate-limit counters	In memory only; at most a day.
Server logs	14 days.
Visit counts	Single visits 60 days; daily totals 400 days. The simpler counts (clicks that did nothing, screen sizes, errors) are added up within about 15 minutes and deleted within 48 hours; their daily totals are kept for 90 days.
Backups	Our database backups are kept on our server for 14 days, on a company computer for 30 days, and in encrypted form with GitHub. A deleted record can stay in them until the backups themselves are deleted. We use them only to recover from a failure, never to bring deleted data back into use.

5.1 When we no longer need data, we delete it or make it anonymous.

6Your rights and how to use them.

6.1 You have the right to:

• ask for a copy of your data;
• ask us to correct data that is wrong;
• ask us to delete your data;
• ask us to limit how we use your data;
• object to our use of your data where we rely on legitimate interests;
• receive the data you gave us in a common format, or ask us to send it to someone else;
• withdraw consent at any time, where we rely on consent (the visit counts, where we asked you first: use “Visit counting” at the bottom of every page).

6.2 To use any of these rights, email info@nexodyne.org. We reply within one month. It is free. We may ask you to confirm your identity first, usually by writing from the email address we hold for you.

6.3 If you are unhappy with how we handle your data, please tell us first: we confirm we have your complaint within 30 days and look into it without delay. You can also complain to the Information Commissioner’s Office (ICO). If you live in the European Union, you can complain to your local data protection authority.

7Cookies and browser storage.

7.1 This site sets no cookies for visitors. There is no analytics cookie and no advertising cookie. Our own visit counts (7.3) set no cookie either; where the law requires it, a short strip at the top of the page asks you first.

7.2 Cloudflare, which sits in front of our site, sets no cookie on it today. If its security features ever need one (such as __cf_bm, which tells people from bots), it is strictly necessary, and we list it here.

7.3 Our own visit counts. We count how this site is used, only to find and fix problems and to see which pages and buttons work: buttons that do nothing, clicks repeated in frustration, pages people leave at once, and the path visitors take through the site. From each page your browser sends our server: the page’s address (never anything after a question mark), the site that linked to us and the campaign tag in the link if there is one; each click or tap, with the part of the page, the control’s own label (up to 60 characters, never anything you type or pick in a checkbox or choice button) and the address a link leads to (without its query or “#” part); while you are on the page, how far down you got, how many seconds the page was active, whether you use a phone, a tablet or a computer, your screen size (small, medium or large) and the page’s language; and errors in our scripts.

7.4 To tell the pages of one visit apart, your browser makes up a random visit number. It changes on every page and is stored nowhere, so your pages cannot be joined up. Your choice is kept in your browser as one small item, “nx_track”, not a cookie. Change it at any time with “Visit counting” at the bottom of every page.

7.5 When we start counting depends on where you are. We tell from your device’s time zone, which is read in your browser and never sent to us. Our server also reads the country that Cloudflare gives for your connection, only to apply the rule for France, Spain, Italy and the Netherlands, and never stores it. In the UK and most other countries we count from the first page; a short line at the top says so, with “Don’t count”. In France (with its overseas regions), Spain, Italy and the Netherlands we also count from the first page, because the rules there let a site measure its audience without asking if the counts stay anonymous. Unless you choose “Yes”, our server adds your visit only to the daily totals, keeps no lasting record of the visit itself and deletes what was sent within three days. Your browser also sends no reports of errors in our scripts until you choose “Yes”. In the rest of the European Union, Iceland, Liechtenstein, Norway, Serbia, Montenegro, North Macedonia, Albania, Bosnia and Herzegovina, Kosovo, Israel, the United Arab Emirates, Oman, Kuwait, Jordan, Egypt, China, Russia, Guernsey, Jersey and the Isle of Man, we count nothing until you choose “Yes”. We do the same when we can’t tell where you are. If you use a VPN or have changed your time zone, we may place you in the wrong region; you can always say no. If your browser sends Global Privacy Control, we take it as a no.

7.6 Our server stores the counts without your IP address or browser details. Single visits are kept for 60 days and daily totals for 400 days. The simpler counts (clicks that did nothing, screen sizes, errors) go to a separate log, are added up into daily totals within about 15 minutes and deleted within 48 hours; those totals are kept for 90 days. They pass through Cloudflare, which delivers our pages (section 3), and are stored on our server at Contabo (section 3); nobody else receives them.

7.7 Where we count from the first page, we rely on the statistics exception in the UK’s Privacy and Electronic Communications Regulations, as amended by the Data (Use and Access) Act 2025, and in France, Spain, Italy and the Netherlands on those countries’ exemptions for anonymous audience measurement; in both cases also on our legitimate interests. Where the law where you are asks us to ask first, we count only with your consent, which you can withdraw at any time with “Visit counting”.

8Security.

8.1 We protect your data with encrypted connections (HTTPS), security headers and limited access.

8.2 No system is perfectly secure. If a breach puts your data at risk, we will tell you and, where the law requires it, the ICO.

9Changes to this notice.

9.1 We may update this notice. The date at the top shows when it last changed.

10Contact.

Nexodyne Limited
71–75 Shelton Street
Covent Garden
London WC2H 9JQ
United Kingdom
info@nexodyne.org