Legal
Privacy Policy
We ask for as little as possible, we use it only to do the thing you asked us to do, and we never sell it. This page explains exactly what that means in practice.
Last updated
The short version
- We don't sell your data. Not to advertisers, not to data brokers, not to anyone. There is no version of our business that involves this.
- We only collect what you send us.If you fill in a form, we receive what you typed. If you don't, we don't have your details.
- No advertising trackers. We don't run ad pixels, cross-site tracking, or behavioural profiling on this site.
- Analytics are optional. Anything beyond what's strictly needed to serve the site runs only if you agree to it.
- You can ask us to delete it. Email us and we'll remove your information. You don't need to give a reason.
Who we are
Nexifer Labs is a software technology and product company based in Bangladesh, working with clients globally. This policy covers this website and the enquiry forms on it.
Where we build and operate software on behalf of a client, that client decides what personal data their product collects, and their own privacy notice applies to it. This policy covers our own site only.
What we collect
There are three ways information reaches us, and that's the whole list.
Information you type into a form
Our contact and project enquiry forms ask for your name, email address, and a description of what you're looking for. Some fields also ask for a company name, phone number, budget range, or timeline. Everything on those forms is either something we need to reply usefully or something you can leave blank.
If you subscribe to updates, we store the email address you gave us and nothing else.
Information your browser sends automatically
Like every website, ours is served by infrastructure that keeps short-lived technical logs: IP address, browser type, the page requested, and the time. These exist so the site can be delivered, kept online, and protected from abuse. We don't use them to build a profile of you.
Analytics, if you allow it
If you accept analytics in the consent banner, we collect aggregate usage data: which pages get read, roughly where visitors come from, which devices they use. This tells us whether our writing is landing. It isn't tied to your name and we don't use it to target you. Decline, and it isn't collected at all.
What we never do
- We don't sell, rent, or trade personal information.
- We don't share your details with advertisers or data brokers.
- We don't run advertising pixels or cross-site tracking scripts.
- We don't buy contact lists or email people who never contacted us.
- We don't use your enquiry to train machine learning models.
- We don't make it harder to decline than to accept. Refusing optional cookies takes the same single click as accepting them.
Why we use it
- To reply to you. If you send an enquiry, we use your contact details to respond and to discuss the work.
- To deliver a project. Once we're working together, we use your details for contracts, scheduling, invoicing, and support.
- To send updates you asked for. Only if you subscribed, and every message has a one-click unsubscribe link.
- To keep the site working and secure. Technical logs help us diagnose faults and block abusive traffic.
- To improve what we publish. Aggregate analytics, if you consented to them.
Depending on where you live, the legal basis for this is your consent, the steps needed to enter into or perform a contract with you, or our legitimate interest in running a secure website and answering people who get in touch.
How long we keep it
- Enquiries that don't become projects: kept for up to 24 months, then deleted.
- Client records: kept for the duration of the engagement and afterwards for as long as tax, accounting, and contractual obligations require.
- Newsletter subscriptions: kept until you unsubscribe.
- Server logs: short-lived, and rotated out automatically.
You can shorten any of these by asking us to delete your information sooner.
How we protect it
Traffic to this site is encrypted in transit. Access to enquiry data is limited to the people at Nexifer Labs who need it to do their job. Credentials are stored in a secret manager rather than in code, and we review access when someone's role changes.
No system is perfectly secure, and we won't pretend otherwise. If a breach ever affects your personal information, we'll notify you and the relevant authority as required by law, and tell you what we know rather than waiting until we know everything.
Your rights
Wherever you are, you can ask us to do any of the following. We apply these to everyone, not only to people covered by a specific law.
- Access - get a copy of what we hold about you.
- Correction - fix anything inaccurate.
- Deletion - have your information removed.
- Portability - receive your data in a machine-readable format.
- Objection and restriction - tell us to stop or limit a particular use.
- Withdraw consent - at any time, without affecting anything done before you withdrew it.
Email privacy@nexiferlabs.com and we'll respond within 30 days. We won't charge you and we won't ask why. If you're in the UK, EU, or another region with a data protection authority, you also have the right to complain to them.
International transfers
We're based in Bangladesh and work with clients worldwide, so your information may be processed in a country other than your own - including by the hosting and email providers described above. Where we transfer personal data internationally, we use providers that offer appropriate contractual safeguards.
Children's privacy
This site is aimed at businesses and isn't directed at children. We don't knowingly collect information from anyone under 16. If you believe a child has sent us personal information, contact us and we'll delete it.
Changes to this policy
If we change how we handle personal information, we'll update this page and change the date at the top. For anything that materially affects your rights, we'll say so clearly rather than quietly editing the text - and if you're subscribed, we'll email you.
Contact us
Questions about this policy, or a request about your data, go to the same place:
A real person reads this address. You can also reach us through ourcontact page.