# Nexora | Privacy Notice & Website Data Use

> Learn how Nexora handles project enquiries, security checks and optional website analytics, and how to contact us about your personal data.

Canonical page: https://www.nexoraesrd.com/privacy/
Language: English

YOUR INFORMATION

# Privacy

This notice explains how Nexora ESRD LLP uses information from this website, including project enquiries, security checks and optional visit measurement.

## Notice version and scope

Updated 31 October 2026. Notice version: 2026-10-31. This notice covers the Nexora website and enquiries sent to us. Client applications, school systems and other products we develop operate under their own notices and contractual arrangements; their users’ records are not collected by this website’s public enquiry form. India’s Digital Personal Data Protection Act, 2023 and Rules, 2025 have phased commencement. References to statutory rights below apply when the relevant provisions are in force and applicable.

## Information you choose to send

Name: to address you. Email address: to reply. Chosen service and project message: to assess and discuss your request. Company name: optional context about your organisation. Enquiry reference, submission time, language and consent record: to process the request and record your permission. We request only information relevant to your enquiry. Sending it does not subscribe you to marketing emails, and agreeing to an enquiry does not enable analytics.

## How enquiries are handled

Form information is sent to the website’s enquiry endpoint for validation and security checks. Accepted enquiries are passed to GoDaddy for email delivery to Nexora. We may keep the resulting correspondence in our email systems to manage the conversation and any work that follows. A submission acknowledgement means the request was accepted for processing; it does not establish a delivery or response time.

## Protection against automated or abusive requests

The form uses Cloudflare Turnstile to help distinguish legitimate interaction from automated abuse. Cloudflare may process browser, device and network signals for that check. Our service also validates submitted fields and limits repeated attempts. Upstash stores temporary attempt counters and keyed hashes derived from the submitted email address and enquiry reference, plus verification and receipt status. These records do not contain your name, email address, message text, IP address or security-check token. Attempt counters expire within 24 hours and enquiry receipt records within 48 hours. These measures reduce unwanted submissions but cannot identify every deceptive enquiry.

## Optional analytics

Where configured and allowed by your choice, Google Analytics 4 measures visits and selected interactions, such as service-page views, contact actions and successful form submissions. Analytics can process online identifiers and device or visit information. We do not send enquiry names, email addresses or message text as analytics event data. Reporting helps us understand website use; it does not by itself identify who a visitor is or whether an enquiry becomes a customer.

## Your analytics choice

Optional analytics is not loaded until you allow it through the website’s analytics controls. You can decline it and continue browsing or contacting us. The website stores your preference in your browser. Use Cookie settings to change your choice; withdrawing permission stops future optional analytics on this browser but does not automatically remove information already processed by the provider.

## Technical information and service providers

Hosting, email and security services may process technical information needed to deliver the website, handle enquiries and prevent abuse. Our configured providers include Microsoft Azure for hosting, GoDaddy for form email, Cloudflare for Turnstile, Upstash for rate limiting and Google for optional analytics. Providers may process information in locations outside your country under their own service arrangements and privacy terms.

## Keeping information

Enquiry correspondence and consent records are retained while needed to handle the request, any resulting work, relevant business records or applicable legal obligations. Temporary abuse-prevention records have the expiry periods described above. Browser analytics preferences expire after 180 days; provider-held analytics data follows the configured property settings. Withdrawal or an erasure request does not override a legal retention duty. Where data must be kept, we explain the reason and limit its use to that purpose. Deletion of an email or browser cookie is not a promise that every provider copy or backup is immediately erased.

## Access, correction, erasure and nomination

Email info@nexoraesrd.com to request a summary of your personal data and its processing, information about relevant sharing, correction or completion of inaccurate details, or erasure. Where the DPDP provisions apply, you may also nominate another individual to exercise your rights in the event of death or incapacity. Write from the email address used for your enquiry, describe the request and include the enquiry reference if available. We may ask for proportionate information to verify your identity or authority. Do not send an identity document unless we explain why it is necessary and provide an appropriate way to send it.

## Withdraw your permission

For an enquiry, email info@nexoraesrd.com with “Withdraw enquiry consent” and, if available, your enquiry reference. We will stop consent-based use for that purpose and arrange erasure unless continued retention or processing is required or otherwise authorised by law. Withdrawal does not invalidate earlier lawful processing and may mean we cannot continue the requested conversation. For analytics, use Cookie settings in the footer and choose Reject optional or save analytics switched off. This stops future optional measurement in this browser; contact us for a request concerning data already processed.

## Raise a privacy concern

Please first send your privacy grievance to info@nexoraesrd.com with enough detail for us to investigate. We aim to resolve it within 90 days of receipt, or within a shorter period where applicable law requires. We may contact you to clarify the request. If the issue remains unresolved after our grievance process, you may approach the Data Protection Board of India through its official complaint mechanism when the relevant provisions and mechanism apply. Other remedies available under applicable law are unaffected.

## Children’s information

This website’s enquiry service is intended for adults acting for a business or organisation. We do not knowingly seek personal data from children under 18. Please do not submit student records, RFID identifiers, attendance records or other children’s information here. If you believe a child’s data has been sent to us, contact info@nexoraesrd.com so we can review it and take appropriate action. Any client project involving children requires a separate lawful process; this form does not obtain verifiable parental consent.

## Changes to this notice

We may update this notice when the website’s functionality or data-handling arrangements change. The version published here describes the website’s current approach.

## Privacy contact and grievances

Nexora ESRD LLP is responsible for the personal data processed through this website. Pranav is our contact person for privacy questions, requests and grievances. Write to Pranav at info@nexoraesrd.com with the subject “Privacy request” or “Privacy grievance”.

[info@nexoraesrd.com](mailto:info@nexoraesrd.com)

[Back to contact](https://www.nexoraesrd.com/contact/)
