Privacy Policy

We collect information you provide directly to us and information collected automatically when you use our website.

• Information you provide:
• Contact details (name, email address, phone number) when you submit an inquiry or contact form
• Business information you share when discussing a potential engagement
• Communications you send us via email or our website

• Information collected automatically:
• Log data (IP address, browser type, pages visited, time spent, referring URLs)
• Device information (hardware model, operating system, browser version)
• Cookies and similar tracking technologies (see Section 6 for details)
• Aggregate analytics data about how visitors interact with our site

We use the information we collect for the following purposes:

• Service delivery: To respond to inquiries, provide consulting services, and manage client engagements
• Communications: To send project updates, invoices, and relevant business correspondence
• Marketing: To send newsletters or service announcements (only with your consent; you may opt out at any time)
• Site improvement: To understand how visitors use our website and improve its content and functionality
• Legal compliance: To comply with applicable laws, regulations, and legal processes
• Security: To detect, investigate, and prevent fraudulent or unauthorized activity

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil a contract with you or take pre-contractual steps at your request
• Legitimate interests: Processing necessary for our legitimate business interests (e.g., improving our services, fraud prevention), provided those interests are not overridden by your rights
• Consent: Where you have given explicit consent (e.g., subscribing to marketing communications)
• Legal obligation: Processing required to comply with applicable law

You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

We may share your information in the following limited circumstances:

• Service providers: Trusted third-party vendors who assist us in operating our website and delivering services (e.g., cloud hosting, email delivery, analytics). These parties are contractually bound to protect your data and may only use it to perform services on our behalf.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• Legal requirements: When required by law, court order, or governmental authority, or to protect the rights, property, or safety of Nextsmart Services, our clients, or others.
• With your consent: In any other circumstance where you have given explicit consent.

We do not share personal data with third parties for independent marketing or advertising purposes.

We retain personal information for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law.

• Inquiry and contact data: Retained for up to 3 years from last contact, or longer if an active client relationship exists
• Client engagement records: Retained for 7 years following the end of an engagement to comply with financial and legal obligations
• Analytics data: Retained in aggregated, anonymised form indefinitely; identifiable log data is retained for up to 12 months
• Marketing preferences: Retained until you opt out or request deletion

When data is no longer needed, we securely delete or anonymise it.

Our website uses cookies and similar technologies to enhance your experience and gather analytics.

• Types of cookies we use:
• Strictly necessary cookies: Required for the website to function (e.g., session management). These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our site (e.g., Google Analytics). These are only set with your consent.
• Preference cookies: Remember your settings and choices to personalise your experience.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website. Where required by law, we obtain your consent before placing non-essential cookies.

Depending on your location, you may have the following rights regarding your personal data:

• For EEA / UK residents (GDPR / UK GDPR):
• Right of access — obtain a copy of your personal data
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — request deletion of your data
• Right to restriction — limit how we process your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or for direct marketing
• Right to lodge a complaint with a supervisory authority

• For California residents (CCPA / CPRA):
• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt out of the sale or sharing of personal information
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days (or sooner where required by law).

We implement industry-standard technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit (TLS/HTTPS) and at rest where appropriate
• Access controls limiting data access to authorised personnel on a need-to-know basis
• Regular security assessments and vulnerability management
• Incident response procedures for detecting and responding to data breaches

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

Nextsmart Services is based in the United States. If you are located outside the US, your information may be transferred to and processed in the United States or other countries where our service providers operate.

Where we transfer personal data from the EEA, UK, or Switzerland to countries not deemed to provide an adequate level of data protection, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms.

By using our website or engaging our services, you acknowledge that your information may be transferred internationally as described in this policy.

Our website may contain links to third-party websites, tools, or services. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices or content of external websites.

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at [email protected] and we will take steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or a prominent notice on our website.

We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Nextsmart Services 123 Clarendon Pl, Hackensack, NJ 07601 Email: [email protected] Phone: +1 626 621 7381

For EEA/UK residents, if you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.