Privacy policy
What we collect on this website, and why.
This policy covers nxtvis.com: the pages you read, the forms you send and the assistant you ask. How we handle client data inside an engagement is set by the NDA and data processing agreement we sign with you, and is described on our Security & Compliance page. Last updated October 2026.
Who we are
NXTVIS ("we", "us") runs this website and decides how the personal data collected through it is used, which makes us the controller of that data.
NXTVIS, House 82/5B, Bank Colony, Savar, Dhaka, Bangladesh. Email: info@nxtvis.com. Phone: +880 1320 792489.
Questions about this policy or your data go to info@nxtvis.com with "Privacy" in the subject line. A named person answers.
What we collect
When you send the audit or contact form: your name, email address, and whatever else you choose to fill in (phone, company, role, website, sector, company size, the systems you use, the problem you describe, your timeline). We also record the page you sent it from, the page you first landed on, the website that referred you, any campaign codes in the link you followed (utm_source, utm_medium, utm_campaign, utm_content, utm_term), your IP address and your browser's user agent.
When you use the "Ask me" assistant: the question you type and the page you are on are sent to generate the answer. We do not store the conversation in our database.
When you accept cookies: Google Analytics, the LinkedIn Insight Tag and the Meta Pixel record pages viewed, how you arrived, approximate location from your IP address, device and browser type, and whether you sent the form. LinkedIn and Meta can link that activity to your account on their platforms, under their own policies.
We do not collect payment details, government ID numbers or special-category data through this website. Please do not put them in the form.
Why we use it, and on what legal basis
To answer your enquiry and arrange the call or audit you asked for. The basis is taking steps at your request before a possible contract, and our legitimate interest in responding to business enquiries.
To know which pages, posts and campaigns bring enquiries, so we spend our marketing budget where it works. The campaign codes, referrer and landing page saved with a form are used on our legitimate interest; the analytics and advertising cookies are used only with your consent.
To show our posts to people who visited the site (retargeting on LinkedIn and Meta). Only with your consent.
To keep the site secure and stop spam. The IP address and user agent on a form are used on our legitimate interest in preventing abuse.
We do not sell your personal data, and we do not use it to make automated decisions about you.
International transfers
NXTVIS is based in Bangladesh, and our providers process data in the United States, the EU and other countries. Bangladesh and the United States do not have an EU adequacy decision for all transfers.
Where the GDPR or UK GDPR applies, transfers rely on the providers' Standard Contractual Clauses (or the UK Addendum) or the EU-US Data Privacy Framework where the provider is certified. You can ask us for a copy of the relevant safeguards.
How long we keep it
Form submissions: for as long as we are in contact about a possible engagement, and deleted or anonymised 24 months after our last contact unless you become a client, in which case the contract sets the period.
IP address and user agent on a form: 12 months.
Analytics data: Google Analytics is set to its 14-month retention; LinkedIn and Meta keep data under their own policies.
Alert emails and chat messages to our team are deleted on the same schedule as the submission they relate to.
Your rights
You can ask us to show you the data we hold about you, correct it, delete it, restrict or object to how we use it, or give it to you in a portable format. You can withdraw consent to cookies at any time without affecting what happened before.
These rights come from the GDPR and UK GDPR, and similar rights exist under Saudi Arabia's PDPL, the UAE PDPL, South Africa's POPIA, Nigeria's NDPA, Kenya's Data Protection Act and the California Consumer Privacy Act, among others. We honour the same requests wherever you are.
Email info@nxtvis.com with "Privacy" in the subject. We reply within one month. We may ask you to confirm the request comes from the email address we hold.
If you are unhappy with our answer, you can complain to your local data protection authority (for example your EU supervisory authority, the UK ICO, SDAIA in Saudi Arabia or the Information Regulator in South Africa).
Security
Data is encrypted in transit (TLS) and at rest in the database. Access to form submissions is limited to named staff with individual logins, and administrative actions are logged. No method of transmission over the internet is completely secure, but we notify affected people and regulators of a breach where the law requires.
Children and changes to this policy
This website is for businesses and is not directed at children under 16. We do not knowingly collect their data.
If we change this policy, we update this page and the date at the top. If the change is significant, for example a new purpose or a new kind of recipient, we will say so on the site before it takes effect.