DOC · NEX/PRIV · REV MAYO 2026

Privacy Policy

Nexarino respects the privacy of the adults who read this site. This policy explains what personal data we collect, why we collect it, how long we keep it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data controller

The data controller for personal data processed through nexarino.com is the Nexarino editorial desk, based in Liverpool, United Kingdom. You can contact us at [email protected] for any privacy-related matter, including requests to exercise the rights set out below.

2. What personal data we process

• Technical data — IP address (truncated), browser type, operating system, referring URL, pages requested and timestamps. Collected automatically through standard server logs.
• Cookie data — essential cookies that make the site work plus, if you consent, optional analytics cookies. See the cookie policy for the full list.
• Correspondence data — the contents of any email you send to [email protected] and the address you sent it from.

We do not process special-category personal data. We do not knowingly process the data of anyone under 18, the site is age-gated for exactly this reason.

3. Lawful basis for processing

• Legitimate interests (UK GDPR Article 6(1)(f)) — for essential site operation, security, fraud prevention and aggregated readership statistics, where these do not override your interests and rights.
• Consent (UK GDPR Article 6(1)(a)) — for optional analytics cookies and any other non-essential processing. You may withdraw consent at any time through the cookie banner or by clearing site data.
• Legitimate interests — for responding to correspondence you initiate with the desk.

4. Retention

• Server logs are kept for up to 90 days, then deleted or anonymised.
• Optional analytics data is retained for up to 14 months in line with industry guidance.
• Email correspondence is kept for as long as is necessary to handle the matter, and no longer than 24 months after the last contact unless we have a legal reason to keep it.

5. Sharing and international transfers

We do not sell personal data. We use a small number of carefully selected processors, for example, our hosting provider and, where you consent, an analytics provider. These processors are bound by written contracts under UK GDPR Article 28. Where data is transferred outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement.

Outbound links to operator sites are not data transfers by Nexarino, when you follow such a link you leave this site and the operator's own privacy notice applies.

6. Your rights under UK GDPR

• Right of access (Article 15) — request a copy of the data we hold about you.
• Right to rectification (Article 16) — ask us to correct inaccurate data.
• Right to erasure (Article 17) — ask us to delete data where the lawful basis no longer applies.
• Right to restriction (Article 18).
• Right to data portability (Article 20).
• Right to object (Article 21) to processing based on legitimate interests.
• Right to withdraw consent at any time where consent is the basis.
• Right to lodge a complaint with the Information Commissioner's Office (ICO) — ico.org.uk.

To exercise any of these rights write to [email protected]. We respond within one month.

7. Security

We use TLS encryption for all traffic to and from the site, restrict access to server logs to the editorial desk, and follow standard practice for patching and configuration management. No system is perfect, if you believe data has been mishandled, please tell us.

8. Changes to this notice

If we make material changes we update the revision date at the top of this page and, where appropriate, prompt you on next visit. This notice was last revised in mayo 2026.