Privacy Policy

Last updated 20 August 2026

This policy explains what personal data Nexum Forge Software Solutions collects through this website, why we collect it, how long we keep it and what rights you have. It covers this website only. Where we process personal data on behalf of a client as part of a delivery engagement, that processing is governed by the data processing agreement in the relevant contract.

Who we are

Nexum Forge Software Solutions is the controller for personal data collected through this website. You can reach us at officeSales@nexumforge.com or on +44 20 7946 0142. Written enquiries can be sent to either of our offices in London, United Kingdom or Belgrade, Serbia.

What we collect and why

Information you send us

When you complete the contact form we collect your first and last name, email address, phone number, company name, the service areas you select and the content of your message. We use this to answer your enquiry, to prepare a proposal if you ask for one, and to keep a record of our correspondence. The lawful basis is our legitimate interest in responding to business enquiries, and where a contract follows, the performance of that contract.

Information collected automatically

Our hosting provider records standard server logs including IP address, request time, requested URL, response status and user agent. These are used for security, abuse prevention and diagnosing faults. The lawful basis is our legitimate interest in operating a secure and reliable service.

Analytics and cookies

This site uses only the cookies required for it to function and for the contact form to protect itself from automated abuse. We do not use advertising cookies, we do not build advertising profiles, and we do not share visit data with advertising networks. If we introduce optional analytics in future, it will be behind a consent banner and off by default.

Who we share data with

We use a small number of processors to run this website and our business correspondence: a hosting provider, an email provider and a form and spam prevention service. Each is bound by a written processing agreement and processes data only on our instructions. We do not sell personal data and we do not share it with third parties for their own marketing.

Where a processor is located outside the United Kingdom or the European Economic Area, transfers are covered by an adequacy decision or by standard contractual clauses with supplementary measures where required.

How long we keep it

• Contact form submissions. Twenty four months from the last contact, then deleted.
• Correspondence that becomes a client relationship. For the duration of the contract and seven years afterwards, to meet accounting and legal obligations.
• Job applications. Twelve months from the decision, unless you ask us to keep them longer.
• Server logs. Ninety days.

Your rights

You have the right to ask for a copy of the personal data we hold about you, to have it corrected if it is wrong, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. Where processing is based on consent, you can withdraw that consent at any time.

To exercise any of these rights, email officeSales@nexumforge.com. We will respond within one month. If you are not satisfied with our response you have the right to complain to your national supervisory authority, which in the United Kingdom is the Information Commissioner’s Office and in Serbia is the Commissioner for Information of Public Importance and Personal Data Protection.

Security

This website is served over HTTPS only. Access to form submissions is limited to staff who need it, protected by multi factor authentication. We patch dependencies on a defined schedule and scan for known vulnerabilities on every deployment. We keep an incident response process and will notify affected people and the relevant authority where a breach meets the notification threshold.

Children

This is a business to business website and is not directed at children. We do not knowingly collect personal data from anyone under sixteen.

Changes to this policy

If we change this policy we will update the date at the top of this page. Material changes affecting how we use data you have already given us will be communicated directly where we hold contact details for you.