Privacy Policy
Last updated: 23 May 2026 | Tomasz Waloch trading as NEXDOC | Nottingham, UK
This Privacy Policy explains how NEXDOC collects, uses, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
NEXDOC is operated by Tomasz Waloch, trading as NEXDOC, based in Nottingham, United Kingdom. We are registered with the Information Commissioner's Office (ICO).
Contact: help@nexdoc.co.uk | nexdoc.co.uk
2. What Data We Collect
When you use our website or contact us, we may collect:
- Name and email address (via contact form)
- Phone number (optional, if provided)
- Message content submitted through our contact form
- Basic technical data (browser type, approximate location) via standard server logs
When providing the NEXDOC service to brokers, we process end-customer documents on behalf of the broker (Data Controller). See our Data Processing Agreement for full details.
3. How We Use Your Data
- To respond to your enquiries and arrange demonstrations
- To provide and improve the NEXDOC service
- To comply with legal obligations
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Data Architecture — Zero Retention
End-customer documents processed by NEXDOC are transmitted directly from the broker's Gmail to their Google Drive. No document is permanently stored on NEXDOC servers. Temporary data in server memory is deleted within 15 minutes of processing.
5. Sub-Processors
We use the following sub-processors to deliver our service:
- Anthropic Inc. (Claude AI) — document classification. No training on client data per Anthropic API Terms. Servers: USA (SCCs applied).
- Google LLC — Gmail, Drive, Sheets (client's own ecosystem). Servers: EU (Belgium).
- Hetzner Online GmbH — server infrastructure. Servers: Germany (EEA).
- Telegram FZ-LLC — operational notifications only (no PII). Optional.
6. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request erasure of your data
- Object to processing
- Data portability
- Lodge a complaint with the ICO at ico.org.uk
To exercise any right, contact: help@nexdoc.co.uk
7. Data Retention
Contact form data is retained for up to 24 months or until you request deletion. Upon termination of service, all configuration data is deleted within 14 days.
8. Cookies
This website uses only a single functional cookie to remember your language preference (PL/EN). No tracking or advertising cookies are used.
9. Changes to This Policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our service constitutes acceptance of the updated policy.
10. Contact
For any privacy-related questions: help@nexdoc.co.uk
📱 WhatsApp: +44 7383 571285 (message preferred, reply within 1–2h Mon–Fri)
Tomasz Waloch trading as NEXDOC, Nottingham, United Kingdom