We are committed to protecting your privacy and ensuring the security of your data.
1. GDPR Consent and Lawful Bases
Consent to Collect and Process Data
By creating an account or otherwise using Nexco.ai, you expressly consent to the collection, use, and processing of your personal data as outlined in this Privacy Policy. We rely on this consent as one of the lawful bases for processing your personal data under the UK General Data Protection Regulation (UK GDPR) and/or the EU General Data Protection Regulation (EU GDPR), as applicable.
Withdrawal of Consent
You have the right to withdraw your consent at any time. If you withdraw your consent, we will cease processing your personal data for the purposes you originally agreed to, unless we have another lawful basis to continue such processing. You can withdraw consent by:
- Adjusting your privacy or data-sharing preferences in the platform settings; or
- Contacting us at contact@nexco.ai
Other Lawful Bases
While consent is a key basis for many of our data processing activities, we may also rely on other lawful grounds, such as:
- Performance of a Contract: For example, to provide the services you have requested, or to fulfil our obligations under any user agreement.
- Legal Obligation: Where we are required to comply with a legal or regulatory obligation.
- Legitimate Interests: Where necessary for our legitimate business interests (such as improving the user experience or enhancing platform security), provided those interests are not overridden by your fundamental rights and freedoms.
2. What Information Do We Collect?
- Personal Information: Name, email, phone number, and demographic data.
- Professional Information:
- Current and past role details (e.g., title, responsibilities, salary, scope, achievements)
- Career aspirations and satisfaction
- Uploaded documents (e.g., contracts, CVs, references)
- AI Interaction Data: Logs and interactions with the AI assistant
- Contextual Information:
- Data-sharing preferences
- Recommendations for others to join the platform
3. How Do We Use Your Information?
We use your data to:
- Build and maintain your professional profile
- Match you with relevant opportunities via approved headhunters
- Enable secure storage and controlled sharing of career documents
- Provide AI-powered career support and personalised recommendations
- Provide data analytics to support trend analysis relevant to your career
- Improve our product and service offering to you
- Aggregate and provide anonymised industry insights
4. Who Do We Share Your Information With?
- Approved Headhunters: Profiles and selected documents are shared only with approved headhunters. Approved headhunters are those who have signed Nexco.ai's Data Access Terms and passed our internal verification process.
- Third-Party Providers: We use trusted analytics and hosting providers with whom we have data processing arrangements in place.
- Anonymised Data: Your data may be anonymised and aggregated for research or business insights and other purposes.
- Legal or Regulatory Requirements: Nexco.ai does not sell or share personal data with third parties except as outlined in this policy. However, we may disclose personal data if required to comply with applicable laws, legal obligations, regulatory requests, or law enforcement inquiries, or to prevent fraud, security threats, or harm to users or the platform. Where permitted, we will take reasonable steps to notify affected users before such disclosures occur.
5. Your Rights
You have the right to:
- Access, correct, or delete your data
- Withdraw consent for data sharing at any time
- Revoke access to documents or profiles shared with third parties
To exercise these rights, use the functionality available in the platform or, where this does not support your need, contact us at contact@nexco.ai.
6. Data Retention
We retain your documents and personal data as long as your account remains active. You may request to delete your account at any time by contacting us at contact@nexco.ai. Upon request, we will delete your account. Some data may be retained for up to six months for legal or compliance purposes, after which it will be permanently deleted. Anonymised data may be retained beyond this period.
7. Data Security
- All data is encrypted during storage and transfer
- Data is stored on secure servers in the UK or EU, compliant with ISO 27001 standards
- Access to data is restricted to authorised personnel only
- Data Breach Notification: In the event of a data breach that compromises your personal data, we will notify affected users and any applicable regulatory authorities as required by law
8. Changes to This Policy
We will notify you of material changes to this Privacy Policy via email. Minor changes will be updated directly on this page.
9. Cookies and Technical Data
We may use cookies, device identifiers, and other tracking technologies to:
- Maintain session security and keep you logged into the platform
- Analyse user interactions and improve our services
- Provide a more personalised user experience
You may control cookies via your browser settings, although disabling certain cookies may affect your experience on Nexco.ai.
10. International Data Transfers
While we primarily store and process data in the UK or EU, we may engage service providers or affiliates located outside these regions. Where we transfer your data internationally, we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your information in accordance with applicable data protection laws.
11. Contact Us
For questions or concerns about this Privacy Policy, please contact us at: contact@nexco.ai