NEXFIN / PRIVACY POLICY
Privacy Policy
A clear explanation of how NEXFIN should describe personal information handling, account data, enquiries and privacy rights.
01 / REVIEWInformation that may be collected
Depending on which features are activated, the website may process contact details, account identifiers, profile information, support messages, service enquiries and files deliberately submitted by a user. Do not collect sensitive identity or financial documents until the operator has approved a lawful purpose and secure handling process.
02 / REVIEWHow information is used
Information should be used only for stated purposes such as responding to enquiries, maintaining accounts, providing requested services, protecting the platform and meeting applicable legal obligations. Do not sell personal information or use it for unrelated marketing without an appropriate lawful basis and required consent.
03 / REVIEWStorage, access and security
The portal is designed to use Supabase authentication, database access policies and private document storage. These technical controls must be configured and independently tested before real client data is uploaded. No website can promise absolute security.
04 / REVIEWRetention and user requests
The operating entity must define retention periods and a process for access, correction, deletion and other rights available under applicable law. Requests should be directed to the verified privacy contact published by the operator.
05 / REVIEWCookies and third parties
The website may load fonts, Supabase services and other third-party resources. The operator should inventory active cookies, analytics and processors, publish accurate disclosures and configure consent where legally required.
06 / REVIEWRecruitment and partnership applications
If you apply to work with NEXFIN or propose a business partnership, the application form may collect your name, contact details, location, education, experience, availability, portfolio links and an uploaded CV or company profile. This information is intended to be used to assess and respond to that application, shared only with authorised reviewers and retained only for a period defined by the operating entity and applicable law. Do not upload identity documents, bank details or unrelated sensitive information. The operator must confirm the lawful basis, retention period, applicant rights and recruitment contact before launch.
07 / REVIEWContact and effective date
Insert the verified legal entity name, privacy contact email, postal address, policy effective date and complaint/escalation route before publication. Do not publish placeholder contact details.
Owner review required: This page is a publishing draft, not legal advice or a final contractual policy. Confirm the operating legal entity, jurisdiction, contact details, retention periods, procedures and applicable laws with qualified counsel before publishing or collecting personal information.