Nexafab privacy policy

1. Data controller

Northblind S.L., provider of Nexafab, controls personal data processed through the corporate website, demo requests, workshop contracts and platform account administration.

2. Data we process

• Contact and company details submitted in enquiries, demo requests or account applications.
• Account, authentication, support and security activity data.
• Contract, billing and payment information; full card data is handled by the payment provider.
• Technical files and order data uploaded to use contracted functions.
• Technical navigation, security and cookie preference data.

3. Purposes and legal bases

• Answering enquiries and preparing demos or proposals: pre-contractual steps and consent.
• Providing, maintaining and supporting the service: performance of a contract.
• Billing and legal, tax and accounting compliance: legal obligation.
• Preventing fraud and protecting the platform: legitimate interest and applicable legal obligations.
• Optional analytics or marketing communications: consent where required.

4. Workshops and their customers

When a final customer uses a workshop portal, the workshop is normally the seller and data controller. Northblind S.L. acts as technology provider and processor under the workshop's documented instructions. Nexafab does not manufacture or sell the quoted parts.

5. Providers and international transfers

We may use hosting, storage, communications, support, analytics and payment providers under appropriate agreements and safeguards. If data is processed outside the European Economic Area, an adequacy decision, standard contractual clauses or another lawful safeguard is used as applicable.

6. Retention and rights

Data is retained for as long as needed for its purpose and for applicable legal or liability periods. You may request access, correction, erasure, restriction, objection or portability and withdraw consent by writing to our contact email. You may also complain to the Spanish Data Protection Agency or your competent supervisory authority.

7. Security, cookies and contact

We use technical and organisational safeguards against unauthorised access, alteration or loss. Corporate analytics are loaded only after consent and do not receive names, contact details, form contents, files, quotes or order data. Contact us for any privacy question or to exercise your rights.