Privacy Policy

At Business To Nexus ("B2Ne", "we", "us", or "our"), we take your privacy seriously. This policy explains — in plain language — what information we collect, why we collect it, how we use it, and the rights you have over your data. It applies to everyone who visits our website or interacts with us, and it is written to comply with the EU General Data Protection Regulation (GDPR).

1. Information We Collect

Information you give us directly

When you fill out a form, book a call, or email us, you may share:

• Your name
• Your email address
• Your company name
• Your phone number
• Your job title
• Any message or details you choose to include

Information we collect automatically

When you browse our website, we may automatically collect:

• Basic usage data (pages visited, time on page, referring site)
• Approximate location derived from your IP address
• Device and browser information
• Cookie data (see Section 4)

Information we never collect

We do not collect payment card details, government IDs, or sensitive personal data (such as health, religion, or political views) through this website.

2. How We Use Your Information

We only use your data for clear, specific purposes:

• To respond to your inquiries — when you contact us or request a call.
• To deliver our consulting services — including communications, scheduling, and follow-ups.
• To improve our website — by understanding which content is useful to visitors.
• To measure and show relevant ads — if you accept all cookies, we use advertising cookies to measure how our ads perform and to show our ads to people who have visited our website.
• To meet legal and accounting obligations — such as tax and record-keeping requirements.

We do not sell your data, and we do not share it with data brokers. Ever. Advertising cookies are used only if you accept them.

3. How We Share Your Information

We only share your data in three situations:

• With trusted service providers (sub-processors) who help us run our business. Each provider is bound by a Data Processing Agreement (DPA), can only use your data on our documented instructions, and is not allowed to sell or repurpose it. The current sub-processors we rely on are:
  • Lovable — website hosting and platform infrastructure. Privacy policy
  • Google Analytics 4 (Google Ireland Ltd.) — anonymised website analytics. Privacy policy
  • Calendly — scheduling and booking discovery calls (synced with our Google Calendar for availability). Terms
  • Google (Google Ireland Ltd.) — Google Calendar sync used to manage booking availability. Privacy policy
  • EngageBay — CRM, email delivery, newsletter subscriptions, and visitor tracking. Privacy policy
  • LinkedIn (LinkedIn Ireland Unlimited Company) — advertising measurement and audiences through the LinkedIn Insight Tag, loaded only after you accept all cookies. Privacy policy
• When required by law — for example a valid request from a regulator, court, or tax authority.
• In the event of a business transfer — such as a merger or acquisition, in which case we will notify you in advance.

4. Cookies & Tracking

We use a small number of cookies, grouped into three categories:

• Essential cookies — needed for the website to function correctly.
• Analytics cookies — help us understand how visitors use the site, so we can improve it.
• Advertising cookies — help us measure our ads and show them to people who have visited our website.

Cookies

On your first visit, a banner asks whether you accept all cookies or keep essential only. Nothing non-essential loads until you accept.

• Google Analytics — visit statistics, loaded only after you accept.
• EngageBay — forms and visitor tracking, loaded only after you accept.
• LinkedIn Insight Tag — ad measurement and audiences, loaded only after you accept.

You can change your choice at any time via Cookie settings in the footer. Choosing Accept all turns on analytics and advertising cookies together. Choosing Analytics only turns on analytics but keeps advertising off. Choosing Essential only keeps both off.

5. Data Retention

We only keep your data for as long as we need it:

• Inquiry data — kept for up to 2 years after our last contact, then deleted.
• Active client records — kept for the duration of our engagement plus any period required by law (e.g. accounting records).
• Website analytics — retained in anonymized or aggregated form.

You can ask us to delete your data sooner at any time (see Section 6).

6. Your Rights Under GDPR

You have full control over your personal data. You can:

• Access — ask for a copy of the data we hold about you.
• Correct — ask us to fix anything that is wrong or out of date.
• Delete — ask us to erase your data (unless we are legally required to keep it).
• Move — receive your data in a portable, machine-readable format.
• Restrict — ask us to limit how we use your data.
• Object — tell us to stop processing your data, especially for marketing.
• Withdraw consent — at any time, where our use is based on consent.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority if you are unhappy with how we handle your data.

7. Legal Basis for Processing

Under GDPR, we rely on one of the following legal grounds whenever we process your data:

• Legitimate interest — running our business and keeping existing contacts informed.
• Consent — for analytics cookies, advertising cookies and marketing emails (you can withdraw at any time).
• Contractual necessity — delivering the services you or your company have engaged us for.
• Legal obligation — complying with tax, accounting, and regulatory requirements.

8. Security

We protect your data with appropriate technical and organisational measures, including HTTPS encryption, access controls, and vetted service providers. No system is 100% secure, but in the unlikely event of a data breach that affects you, we will notify you and the relevant authorities within 72 hours, as GDPR requires.

9. International Data Transfers

Your data is primarily stored within the European Economic Area (EEA). Where a service provider processes data outside the EEA, we rely on the European Commission's Standard Contractual Clauses (SCCs) or an equivalent safeguard to make sure your data stays protected to GDPR standards.

10. Children's Privacy

Our website and services are aimed at business professionals. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy & Contact

We review this policy regularly and will post any updates on this page with a new "Last updated" date. If changes are significant, we will notify you by email or a banner on the site.

If you have any questions, want to exercise your rights, or just want to understand how we handle your data, please get in touch: