Privacy Policy

---

Nexoraa is a UK-based consultancy specialising in HR projects, recruitment and placement, ERP implementation, business strategy, and healthcare staffing services. We provide business support to both local clients in Bedford, Milton Keynes, and surrounding areas, as well as global organizations.

We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

This Privacy Policy explains:

• What personal data we collect
   
• Why and how we collect it
   
• How we store and protect it
   
• Who we may share it with
   
• Your rights under GDPR
   

We may collect and process the following types of data:

• Full name, company name, email, phone number
   
• Job role, business address
   
• Project enquiries and service requests
   
• Invoicing and payment details
   

• Name, contact details, CV/resume
   
• Work history, qualifications, references
   
• Passport/ID and right-to-work documents
   
• Background checks and (if applicable) health-related information
   

• IP address, browser/device data
   
• Pages visited and interaction data
   
• Cookies and usage analytics
   

We use your personal data for the following purposes:

• Delivering our HR, recruitment, and consulting services
   
• Matching candidates to job vacancies
   
• Managing ongoing client relationships
   
• Compliance with legal and regulatory obligations
   
• Internal business reporting and improvements
   
• Responding to enquiries or feedback
   

We process personal data based on the following legal grounds:

• Contractual necessity: to deliver services as agreed
   
• Legal obligation: to comply with employment, tax, or business laws
   
• Legitimate interests: for recruitment, consulting, or system development
   
• Consent: for direct marketing, processing sensitive data, or optional services
   

You may withdraw your consent at any time by contacting info@nexoraa.com.

We may share your personal data with:

• Employers or clients (for job applications)
   
• HR software platforms or background check providers
   
• IT and ERP integration partners (e.g. for SAP, Sage)
   
• Legal or regulatory bodies (if required)
   
• Subcontractors working under confidentiality agreements
   

We do not sell your data to third parties.

Where personal data is transferred outside the UK/EEA, we ensure appropriate safeguards, such as:

• Standard Contractual Clauses (SCCs)
   
• UK adequacy decisions
   
• Secure, GDPR-compliant service providers (e.g. cloud storage)
   

8. Data Retention

We only keep your data for as long as necessary:

Data TypeRetention PeriodClient & project data6–7 years (for legal and accounting purposes)Candidate data2 years (unless requested to delete sooner)Marketing dataUntil unsubscribed or consent withdrawn  

Our website may use cookies and tracking tools (e.g. Google Analytics) to improve performance and user experience. You may accept or decline cookies through your browser settings.

You have the right to:

• Request access to your personal data
   
• Correct inaccurate or incomplete data
   
• Request erasure of your data (right to be forgotten)
   
• Restrict or object to processing
   
• Request data portability
   
• Withdraw consent at any time
   
• Lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk
   

To exercise any of these rights, contact:
📧 info@nexoraa.com
📞 +44 7916 337228

We take data protection seriously and use appropriate security controls including:

• Encrypted cloud storage
   
• Access control and user permissions
   
• Password-protected systems
   
• Regular internal audits and data reviews
   

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us:

Nexoraa Limited
📧 info@nexoraa.com
📞 +44 7916 337228