Legal

Privacy Policy

Nexodus is a small editorial site. We try to handle your data the way we’d want our own handled — minimally, transparently, and with clear opt-outs.

Plain-English summary

The short version: we don’t set advertising cookies, we don’t run third-party analytics, and we don’t collect personal data from you just for visiting the site. The one piece of tracking that does happen is set by Amazon — not by us — when you click an affiliate link on our pages and land on an Amazon storefront. That’s how Amazon credits us for any subsequent purchase. Detail follows.

Who runs this site

This site is operated by the owner of the nexodusbpo.com domain. Editorial enquiries and data-protection enquiries both go through the contact page or directly to hello@nexodusbpo.com.

What we collect — and what we don’t

We don’t run any client-side analytics on this site at the moment. That means no Google Analytics, no Plausible, no Meta pixel, no LinkedIn pixel, no third-party tag manager. Server-side, the web host we use keeps standard access logs (IP address, browser user-agent, requested URL, timestamp) for a short period purely for security and diagnostic purposes. These logs aren’t used to build a profile of any individual visitor and aren’t shared with any third party.

If we add analytics in the future, it will be a privacy-conscious tool that doesn’t use cookies or assign unique identifiers (Plausible Analytics is the candidate we’re considering). This policy will be updated before that change happens, and the cookie banner shown on first visit will reflect it.

Cookies

This site uses two pieces of browser storage, both first-party and both stored in localStorage rather than as traditional cookies:

nexodus.region — remembers which Amazon storefront you’ve selected via the region picker (UK / DE / NL / US). Set when you change the picker; cleared if you clear your browser storage.
nexodus.consent — remembers whether you’ve dismissed the consent banner so we don’t show it again on every visit. Stores either “accepted” or “rejected”.

Neither value identifies you personally. Both are stored in your own browser, not on our servers; we never see them.

The Amazon affiliate cookie

When you click an Amazon affiliate link on a Nexodus page and land on Amazon, Amazon sets its own affiliate-tracking cookie on its own domain (not on nexodusbpo.com). That cookie tells Amazon that the visit originated from us and persists for the standard Amazon Associates session window (currently 24 hours for most regions). If you complete a qualifying purchase within that window, Amazon credits us with a commission.

We never see the contents of that cookie, the items in your basket, your Amazon account details, or any other Amazon-side information about the visit. Amazon reports aggregate purchase data back to us (number of clicks, number of conversions, total commission) without any identifying information about individual purchasers.

Amazon’s own privacy policy governs that cookie and the data it processes; search for “Amazon Privacy Notice” on the storefront you used (amazon.co.uk, amazon.de, amazon.nl, or amazon.com) to read the full document.

Contact form

The contact form currently uses a mailto: link that opens your own email client to send the message to hello@nexodusbpo.com. That means your message reaches us through whatever email service you use; we don’t intercept or process it through any third-party form service. If we add a server-side form handler in the future (for browsers that can’t handle mailto:), this policy will be updated to describe what data is collected by the form and how long it’s retained.

Your rights under the GDPR

If you’re in the EU, the UK, or another GDPR-aligned jurisdiction, you have the following rights regarding any personal data we hold about you:

Right of access — you can ask us what personal data we hold about you. In most cases the honest answer is “none” because we don’t run identifying analytics, but if you’ve emailed us we hold the email correspondence.
Right to rectification — you can ask us to correct any inaccurate personal data we hold.
Right to erasure (right to be forgotten) — you can ask us to delete personal data we hold about you. We’ll honour these requests unless we have a legal reason to retain the data (e.g., an unresolved support enquiry).
Right to object — you can object to any processing of your personal data we’re doing under a “legitimate interests” basis.
Right to data portability — for any data we’ve collected from you, you can ask for it in a structured, machine-readable format.

To exercise any of these rights, write to hello@nexodusbpo.com with “Data request” in the subject line. We’ll respond within 30 days (usually much sooner). If you’re unhappy with our response, you have the right to lodge a complaint with your national data-protection authority (in the Netherlands, the Autoriteit Persoonsgegevens; in Germany, your state DPA; in the UK, the ICO).

Children

Nexodus isn’t directed at children under 16, and we don’t knowingly collect personal data from children. The products we feature span household and family categories, but the site itself is written for an adult audience.

Changes to this policy

If our data practices change, we’ll update this page and refresh the “last updated” date below. Material changes (e.g., adding analytics) will be flagged at the top of the page for a reasonable period after the change.

Last updated: 18 May 2026.