Nexa.

Privacy Policy

We respect your privacy. This policy explains, in plain language, what information we collect, why we collect it and how we keep it safe.

Last updated: 31 October 2026

  1. 01Who we are

    Nexa Web Development ("Nexa", "we", "us") is a web development studio based in Sydney, Australia. We handle personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles.

  2. 02What we collect

    We only collect information you choose to give us, plus basic technical data needed to run the site:

    • Contact and audit forms: your name, email, phone, business name, website and message.
    • Client onboarding: business details, branding preferences, service information and files you upload, such as logos and photos of your work.
    • Technical data: IP address, browser type and pages visited, used for security, spam prevention and anonymous analytics.
  3. 03How we use it

    • To reply to your enquiry and deliver the services you request.
    • To plan, design and build your website.
    • To send you project updates and occasional relevant emails, which you can opt out of at any time.
    • To keep our website secure and block spam or abuse.
    • To understand how our website is used so we can improve it.
  4. 04Where it is stored

    We use trusted providers to run our business. Your information may be stored or processed by:

    • Vercel (website hosting) and Neon (secure database).
    • Google Drive: files you upload during onboarding are saved to Nexa's private Google Drive.
    • Resend (email delivery), Cloudflare Turnstile (spam protection) and Google Analytics (website statistics).

    Some of these providers may store data outside Australia. We only use providers with strong security and privacy standards.

  5. 05Google user data

    Our website connects to Google Drive only to store files that clients upload to us. We do not access, read or use any other files in anyone's Google account. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

  6. 06Sharing your information

    We do not sell, rent or trade your personal information. We only share it with the providers listed above to run our services, or when required by law.

  7. 07Security and retention

    We protect your information with encrypted connections, access controls and private, single-use onboarding links. We keep your information only as long as needed to provide our services or meet legal obligations, then delete it.

  8. 08Your rights

    You can ask to access, correct or delete your personal information at any time. Email contact@nexawebdev.comand we'll respond within 30 days. If you are unhappy with our response, you can contact the Office of the Australian Information Commissioner (OAIC).

  9. 09Changes and contact

    We may update this policy from time to time. The latest version will always be on this page. Questions? Email contact@nexawebdev.com.