Privacy policy
1. Who this is about
This policy covers the website at nexatech.dev and its mirror at nexatech.software. The data controller is NexaTech Consulting (PTY) LTD, registration number 20231968737, of 17 Dock Road, Watershed, Cape Town, Western Cape, South Africa, 8002.
It does not cover the software we build for clients, nor the EasyAccess products, which have their own site and their own policy at easyaccess.one. Work delivered under a client engagement is governed by the agreement for that engagement, not by this page.
2. Analytics
This site uses Google Analytics 4, measurement ID G-YWL8X84C9C, to count visits and see which sections are read. Nothing is stored on your device until you allow it.
Analytics storage is denied by default. On your first visit a banner asks whether you
accept it. Until you choose Accept, no analytics cookie is written and
no identifier for you is created. If you accept, Google Analytics sets its
_ga cookies and sends your IP address, the page requested, the referring
page and your browser's user-agent string to Google. The lawful basis for that is your
consent, Article 6(1)(a) GDPR.
If you decline, the Google tag still reports the page view, but without a cookie and
without any identifier, so it cannot be joined to your other visits or to you. Either
answer is remembered in your browser's local storage under the key
nt-analytics-consent. That entry records only your choice, stays on your
device and is never transmitted. Clearing this site's data in your browser withdraws
consent and brings the banner back.
Whichever you choose, this site carries no advertising, remarketing or profiling tag. Google's advertising signals are denied permanently, not merely until you decide. The site embeds no social media widgets, videos or chat tools, and loads its fonts, stylesheets and images from this domain only.
You can verify all of this. The analytics script is served unminified at /analytics.js, so you can read exactly what it does, and your browser's network inspector will show you every request a page makes and every cookie it sets.
3. The contact form
The contact form on the home page asks for your name and email address, and optionally your company and which service you are interested in, along with your message. We use those details to answer you.
The form is not processed on our own server. It is submitted to Web3Forms, a form-relay service, which receives what you typed and forwards it to our mailbox. That service therefore handles your submission on our behalf before it reaches us. Using the form is entirely optional, and the rest of the site works without it.
The lawful basis is the performance of pre-contractual steps taken at your request (Article 6(1)(b) GDPR), or our legitimate interest in responding to enquiries (Article 6(1)(f) GDPR). We do not add you to a marketing list because you used the form, and we do not use what you send for anything other than replying and, if it leads to one, carrying out the engagement.
If you would rather not use a third-party relay, email us directly at the address in section 8 instead.
4. Server logs
Like any web server, the infrastructure serving this site records technical request data, which typically includes the requesting IP address, the time of the request, the page requested and the browser's user-agent string. These logs exist to keep the service available and to identify abuse.
The lawful basis is our legitimate interest in operating and securing the site (Article 6(1)(f) GDPR). Logs are not used to build profiles, are not combined with any other data, are not sold or shared for marketing, and are retained only as long as needed for security and operational purposes.
5. When you email us
The addresses on this site are ordinary mailboxes. If you write to us, we process the content of your message and your contact details in order to respond, which is either the performance of pre-contractual steps at your request (Article 6(1)(b) GDPR) or our legitimate interest in responding to enquiries (Article 6(1)(f) GDPR).
Correspondence is retained for as long as the business relationship or enquiry requires, and for any period we are obliged to keep records.
6. Your rights
We are established in South Africa, so the Protection of Personal Information Act (POPIA) applies to our processing. Under it you have rights of access and correction, and you may complain to the Information Regulator of South Africa. Where the GDPR or the UK GDPR applies as well, you have rights of access, rectification, erasure, restriction, portability and objection in respect of your personal data, and the right to lodge a complaint with a supervisory authority.
Where we rely on your consent, as we do for analytics, you can withdraw it at any time, and doing so does not affect the lawfulness of what was processed beforehand.
To exercise any of these, write to us at the address below. We will respond within the period the applicable law requires.
7. International transfers
We are established in South Africa, so correspondence sent to us is processed there. The site is hosted on infrastructure operated by Amazon Web Services and delivered from its global edge network, and the services named above, Google Analytics and Web3Forms, operate internationally. Where personal data is processed in another jurisdiction, we rely on appropriate safeguards for those transfers.
8. Changes and contact
If this policy changes, the revised version is published here with a new date at the top of the page. We do not notify visitors individually, as we hold no visitor contact details for that purpose.
Privacy enquiries and security reports:
Postal: NexaTech Consulting (PTY) LTD, 17 Dock Road, Watershed, Cape Town, Western Cape, South Africa, 8002.