Privacy Policy

Nexus Peak Digital, operated by Barry Eugene Neal, 1839 South Alston Ave, Durham, NC 27707, United States, is the controller of personal data collected through this website and our client engagements. You can reach our privacy contact at contact@nexuspeakdigital.online.

• Information you give us: name, business email, phone number, company name, service of interest, and the content of your message or project brief.
• Transaction data: package purchased, amount in USD, order reference, and billing details. Card numbers are collected and stored by our PCI-DSS compliant payment processor, never by us.
• Project materials: assets and account access you share so we can perform the work.
• Technical data: IP address, browser type, device type, referring page, and pages viewed, collected through server logs and analytics.

We use personal data to respond to inquiries, prepare quotes, deliver purchased services, process payments, provide support, send transactional notices about your project, keep accounting and tax records, prevent fraud, and improve our website. Our legal bases under the GDPR are contract performance (delivering services you ordered), legitimate interests (site security, service improvement, replying to business inquiries), consent (marketing email and non-essential cookies), and legal obligation (tax and accounting records).

We use strictly necessary cookies to operate the site and remember your preferences, and analytics cookies to understand aggregate traffic patterns. Non-essential cookies are only set with your consent, and you may withdraw consent at any time by clearing cookies in your browser or emailing us. Most browsers also let you block cookies entirely; strictly necessary cookies are required for core site functions. We honor Global Privacy Control (GPC) signals where supported.

Nexus Peak Digital does not sell or share personal information for cross-context behavioral advertising as those terms are defined by the CCPA/CPRA. We have not sold personal information in the preceding twelve months.

We share data only with vetted processors who need it to run our business: payment processing, email and communications, cloud file storage and client-portal delivery, analytics, and accounting. Each provider is bound by contract to use data only on our instructions. We may also disclose data where required by law, court order, or to protect our legal rights. We never sell your data to advertisers or data brokers.

All traffic to this website is encrypted in transit using TLS/SSL (HTTPS). Client deliverables are shared through authenticated cloud storage and expiring download links. Internal access follows the principle of least privilege, accounts require strong authentication with multi-factor authentication where available, and stored files are encrypted at rest by our cloud providers. No method of transmission is perfectly secure, but we review our safeguards regularly and will notify affected users and regulators of a qualifying breach without undue delay.

Inquiry data is retained for up to 24 months from last contact. Client project files and contracts are retained for the duration of the engagement plus 3 years. Financial records are retained for 7 years to satisfy US tax requirements. After those periods data is deleted or irreversibly anonymized.

California (CCPA/CPRA): you have the right to know what personal information we collect, to request access to or a copy of it, to request deletion, to request correction, to opt out of sale or sharing (we do neither), and not to be discriminated against for exercising these rights.

EU/UK (GDPR): you have the right of access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of consent at any time. You may also lodge a complaint with your local supervisory authority.

Send requests to contact@nexuspeakdigital.online with the subject line "Privacy Request", or write to Nexus Peak Digital, 1839 South Alston Ave, Durham, NC 27707, United States. We verify requests by confirming control of the email address on file and respond within 45 days (CCPA) or 30 days (GDPR). Authorized agents may submit requests with written proof of authorization. To unsubscribe from marketing email, use the unsubscribe link in any message or email us directly.

We operate from the United States, so data you provide is processed in the US. Where we receive personal data from the EU, UK, or Switzerland, transfers rely on Standard Contractual Clauses or another lawful transfer mechanism with our processors.

Our services are business-to-business and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy as our services or legal obligations change. Updates are posted on this page with a revised "Last updated" date, and material changes are communicated by email to active clients.