Privacy
What this site collects, and what it does not.
Short, because there is not much to say. The public pages carry no analytics, no tracking and no cookies, and the only personal data we receive is what you choose to type into the contact form.
Last updated 25 August 2026. This notice covers the website. Data handling inside the platform is governed by the customer agreement.
What this covers
This notice covers this website only. If you are a customer, the handling of data inside the Threat Nexaris platform is governed by your customer agreement and its data processing terms, which are separate documents.
We are Threat Nexaris. For anything in this notice, write to privacy@threatnexaris.com.
What we collect
If you submit the contact form, we receive the name, work email, organisation, request type and message you type into it. Nothing else is taken from the form.
We also record which page you submitted from, the referring site if your browser sent one, and any campaign parameters in the address. This tells us which pages produce enquiries. Your IP address is stored only as a one-way hash, which lets us spot one source flooding the form but cannot be turned back into an address.
Our hosting provider records standard server request logs, which include IP address, timestamp and the page requested. These are generated by the infrastructure, not by us, and we do not build profiles from them.
What we do not do
There is no analytics on this site. No advertising or behavioural tracking. No third-party scripts of any kind: the pages load from this domain only, including the fonts, which is verifiable from the content security policy the site serves.
No cookies are set on the public pages. Nothing is stored in your browser to identify you across visits. The internal console used by our own staff sets a session cookie, which is not served to visitors.
We do not sell, rent or share what you submit, and we do not add you to a mailing list you did not ask to join.
What we do with it
Contact form submissions become a tracked request in an internal queue, so that somebody is accountable for replying to you. That is the entire purpose.
The lawful basis is our legitimate interest in responding to an enquiry you chose to send us, and taking steps at your request before entering a contract.
How long we keep it
Enquiries that do not lead anywhere are deleted within twelve months. Enquiries that become a commercial relationship are retained under the customer agreement instead.
Server logs are retained by the hosting provider under their own retention schedule.
Who else is involved
The site is served by a hosting provider, and enquiries are held in a database hosted by a managed database provider. Both act on our behalf as processors, not as recipients of data for their own purposes.
A current list of processors is available on request, and is provided as standard to customers as part of the agreement.
Your rights
You can ask us what we hold about you, ask for it to be corrected, ask for it to be deleted, or object to us holding it. Write to privacy@threatnexaris.com and we will act on it.
Depending on where you are, you may also have the right to complain to a data protection authority. We would rather you raised it with us first, but that is your choice and not a precondition.
Changes
If this notice changes materially, the date below changes with it. We do not quietly revise a privacy notice and leave the old date in place.
Questions about this notice go toprivacy@threatnexaris.com. Security issues go tosecurity@threatnexaris.com.