Privacy Policy

1. Who We Are

Nexusyl Limited is the data controller responsible for your personal data.

• Company Name: Nexusyl Limited
• Registered in: England and Wales
• Registered Office: London, United Kingdom
• Email: support@nexusyl.com
• Phone / WhatsApp: +44 7892 821808
• Technology Partner: Juvenile Asia Limited (Company No. 16966853), providing data processing and software development services.

If you have any questions about this policy or how we handle your data, please contact us at support@nexusyl.com.

2. What Personal Data We Collect

We collect personal data in the following categories, depending on how you interact with us:

2.1 Data You Provide Directly

• Contact enquiries: full name, email address, phone number, and the content of your message when you submit our contact form.
• Education applications: academic history, course preferences, nationality, passport details, and visa status when you apply through Nexusyl Education.
• Recruitment registration: CV, employment history, skills profile, career ambitions, visa/work permit status, and salary expectations when you register as a candidate or employer.
• Property enquiries: name, contact details, current address, proof of income or study, passport and biometric residence permit details when you enquire about accommodation or tenancy referencing.
• Food Tech programme: name, contact details, business concept description, and relevant background information when you apply to the programme.

2.2 Data Collected Automatically

• IP address and approximate geographic location
• Browser type and version
• Pages visited and time spent on each page
• Referring URL and exit pages
• Device type (desktop, mobile, tablet)

This data is collected via server logs and, where applicable, cookies. See Section 8 (Cookies) for more detail.

3. How We Use Your Personal Data

We use your personal data for the following purposes, each supported by a lawful basis under UK GDPR:

3.1 To Provide Our Services

Lawful basis: Performance of a contract (Article 6(1)(b) UK GDPR)

• Processing university admission applications and managing correspondence with institutions on your behalf.
• Matching candidates to vacancies and managing recruitment processes for employers.
• Processing tenant referencing applications and managing letting agreements.
• Administering your enrolment in the Food Tech entrepreneurship programme.

3.2 To Respond to Enquiries

Lawful basis: Legitimate interests (Article 6(1)(f) UK GDPR)

• Responding to contact form submissions, emails, and phone enquiries.
• Following up on expressions of interest in any of our services.

3.3 Legal and Regulatory Compliance

Lawful basis: Legal obligation (Article 6(1)(c) UK GDPR)

• Conducting Right-to-Rent checks as required by the Immigration Act 2014.
• Anti-money laundering (AML) verification where applicable.
• Retaining records as required by UK tax and company law.

3.4 The Nexusyl Ecology — Data Integration

Lawful basis: Legitimate interests / Consent where required

Nexusyl operates a cross-pillar data architecture powered by Juvenile Asia Limited. Where you have engaged with one Nexusyl service, anonymised or pseudonymised profile data (e.g. skills profile, career intent, accommodation status) may be used within the Nexusyl ecosystem to route you to relevant connected services — for example, pre-building a recruitment candidate profile from your education enrolment data, or activating property referencing when you accept a job offer. We will always notify you when this occurs and you have the right to object.

4. Who We Share Your Data With

We do not sell your personal data. We may share it with:

• Juvenile Asia Limited — our technology and data processing partner, acting as a data processor under a formal Data Processing Agreement compliant with UK GDPR Article 28.
• UK Universities and Educational Institutions — as necessary to process your application on your behalf.
• Employers — anonymised or named CV and skills data shared only with your explicit consent during the recruitment process.
• Landlords and Property Management Partners — referencing data shared only as necessary to process your tenancy application.
• UK Visas and Immigration (UKVI) — where we are legally required to verify or report immigration status.
• Professional Advisers — solicitors, accountants, and insurers bound by legal professional privilege and confidentiality.
• HMRC and Regulatory Bodies — where required by law.

All third-party processors are subject to contractual obligations to process your data lawfully, securely, and only on our instructions.

5. International Data Transfers

Nexusyl primarily processes data within the United Kingdom and European Economic Area. Where data is processed or stored outside the UK — for example, by Juvenile Asia Limited's cloud infrastructure — we ensure adequate safeguards are in place, including:

• UK adequacy regulations (where applicable)
• International Data Transfer Agreements (IDTAs) approved by the Information Commissioner's Office
• Standard Contractual Clauses

6. How Long We Keep Your Data

• Contact form enquiries: 2 years from the date of last contact.
• Candidate CV and recruitment data: 2 years from the date of registration, or until you request deletion.
• Education application data: 5 years from the date of application (to support re-applications and visa audit trails).
• Tenancy referencing and property data: 6 years from the end of the tenancy agreement (in line with the Limitation Act 1980).
• Financial and invoicing records: 7 years (HMRC requirement).

After the applicable retention period, your data is securely and irreversibly deleted or anonymised.

7. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right of access: request a copy of the personal data we hold about you (Subject Access Request).
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): request deletion of your data where there is no compelling legal reason for us to retain it.
• Right to restrict processing: request that we limit how we use your data in certain circumstances.
• Right to data portability: receive your data in a structured, machine-readable format and transmit it to another controller.
• Right to object: object to processing based on legitimate interests, including profiling and cross-pillar data routing within the Nexusyl ecosystem.
• Rights related to automated decision-making: not be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects.

To exercise any of these rights, please contact us at support@nexusyl.com. We will respond within 30 days. Where requests are manifestly unfounded or excessive, we may charge a reasonable fee or refuse the request, providing written reasons.

7.1 Right to Complain

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

We would, however, welcome the opportunity to address your concerns directly before you contact the ICO.

8. Cookies

Our website uses cookies to improve your browsing experience. We use the following categories:

8.1 Strictly Necessary Cookies

These cookies are essential for the website to function and cannot be switched off. They include session management and security tokens. No consent is required for these cookies.

8.2 Analytics Cookies

We may use analytics tools (such as Google Analytics or equivalent privacy-respecting alternatives) to understand how visitors use our website. These are only set with your consent. Data collected is anonymised and aggregated.

8.3 Functional Cookies

These cookies enable enhanced functionality such as remembering form preferences. They are only set with your consent.

You can manage cookie preferences through your browser settings at any time. Disabling cookies may affect the functionality of certain website features. For more information, visit allaboutcookies.org.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• HTTPS encryption across all website pages
• Access controls and least-privilege principles for staff with access to personal data
• Regular security assessments of our technology infrastructure, conducted in partnership with Juvenile Asia Limited
• Staff training on data protection obligations

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify affected individuals without undue delay.

10. Children's Data

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from children under the age of 13. If we become aware that a child under 13 has provided us with personal data without verifiable parental consent, we will delete it promptly.

11. Links to Third-Party Websites

Our website may contain links to third-party websites (including university portals, employer websites, and external platforms). We are not responsible for the privacy practices or content of those sites. We recommend reviewing their privacy policies before providing any personal data.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. Your continued use of our website after any changes constitutes acceptance of the updated policy.

13. Contact Us