1. Introduction

Nexus Performance is committed to protecting the privacy and personal data of all users, clients, and visitors to our website. This Privacy Policy outlines how we collect, use, store, and protect your data in accordance with the General Data Protection Regulation (GDPR).

2. What Data We Collect

We may collect the following personal data:

• Name, email address, phone number, and job title
• Health-related data (e.g., biomarker results, sleep and nutrition profiles) – with explicit consent
• Payment and billing information
• IP address, browser type, and usage data via cookies

3. Legal Basis for Processing

We process your data based on the following lawful grounds:

• Your consent (for health data, marketing, cookies)
• Performance of a contract (e.g., program enrollment)
• Compliance with legal obligations
• Our legitimate interest (e.g., improving services, analytics)

4. How We Use Your Data

Your personal data may be used to:

• Deliver and personalize our coaching and diagnostic services
• Communicate with you regarding your program or inquiries
• Process payments and manage subscriptions
• Monitor website usage and improve our digital services
• Comply with legal requirements

5. Cookie Policy

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device. We use essential cookies for website functionality and analytical cookies (e.g., Google Analytics) to understand user behavior. You can manage or disable cookies via your browser settings. Continued use of our website implies consent to our cookie policy.

6. Sharing Your Data

We may share your data with trusted third parties, including:

• Medical laboratories and diagnostics partners
• Payment processors
• IT and cloud storage providers

All third parties are bound by strict confidentiality and GDPR-compliant agreements.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting obligations. Health-related data is retained for a maximum of 2 years unless otherwise agreed or legally required.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. This includes encrypted storage, secure data transfer protocols, and access control policies.

9. Your GDPR Rights

Under GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your data (‘right to be forgotten’)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, please contact us at info@nexusconsult.net

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, contact us at:

Email: info@nexusconsult.net

Mailing Address: [Insert Physical Address]