Last updated: 9 August 2026
This policy explains how Nexus Network Limited (company number 16377446), trading as Nexus Growth Academy ("Nexus", "we", "us"), collects and uses personal data, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018). We are registered with the Information Commissioner's Office (ICO), registration reference ZB975060.
Data controller: Nexus Network Limited (company number 16377446), trading as Nexus Growth Academy, of 2 Loughborough Road, Mountsorrel, Loughborough LE12 7AT.
Contact for privacy matters: david.brooks@nexusgrowth.net.
This policy covers personal data we control: visitors to our website, and our prospective and actual business customers and their contacts. Where a business customer uses our Academy and AI agent for their own staff, that customer is the data controller for their staff's information and we act as their data processor under our separate customer agreement; this policy does not replace the privacy notice those staff should receive from their own employer.
| Data | Why | Lawful basis |
|---|---|---|
| Enquiry / demo request details (name, company, email, industry, message) | To respond to you and discuss the service | Legitimate interests; steps to enter a contract |
| Customer & billing details (business contact, account, invoicing) | To provide and administer the service | Contract; legitimate interests |
| Call recordings & summaries (of sales / customer-success calls, where agreed) | To keep an accurate record of what was discussed and follow up | Consent; legitimate interests (see section 5) |
| Learner account & usage data (login, progress, and the content of interactions with the AI agent) | To deliver the training and the AI agent | Contract; and, for customers' staff, on the customer's instruction as processor |
| Technical data (IP, device/browser, essential cookies) | To run the website securely | Legitimate interests |
To respond to enquiries, provide and improve the Academy and AI agent, administer accounts and billing, keep the service secure, and meet legal obligations. We do not sell your personal data, and we do not use it for advertising.
Where you or your staff create tools using Build Studio, and any reference data you add to them, these form part of the content you put into the service. Where they contain personal data, the business customer is the controller and we act as processor under our Data Processing Agreement (see section 2).
Build Studio tools are sealed by default — they run in an isolated environment and cannot reach the internet or send data anywhere. Where a customer chooses to enable optional connectivity (connecting a tool to approved live-data sources, or an "open" mode that lets a tool send or receive data over the internet), any resulting transfer of data happens at the customer's instruction and on their responsibility and should not be used for personal, confidential or regulated data. We provide the framework and safeguards but are not the source of record for, and do not verify, the reference data or content a customer adds.
We record some telephone calls with prospective and existing customers — typically sales and customer-success calls — to keep an accurate record of what was discussed and to help us follow up properly.
We only record a call after telling you it is being recorded and confirming you are happy to proceed. If you would prefer not to be recorded, just say so and we will not record. Where we record, our lawful basis is your consent (given at the start of the call) together with our legitimate interests in keeping accurate records.
Recordings are transcribed and an AI tool produces a short written summary, which we save as a note on the relevant account. Calls are made and recorded through our telephone system (Yeastar); transcription and summarisation use our AI provider. Recordings and summaries are stored securely, kept for no longer than necessary (typically up to 12 months) and then deleted. You can ask us for a copy of, or the deletion of, a recording relating to you at any time using the contact details above.
We use trusted service providers ("processors") who act only on our instructions and under appropriate data-transfer safeguards. For our website and general business we use:
For the Academy platform and the Hermes AI agent — including AI processing by Anthropic (Claude) — the full, current list of sub-processors, with each provider's purpose, location and safeguard, is set out in Annex 3 of our Data Processing Agreement. We give clients 30 days' notice of any change.
We may also disclose data where required by law. We do not sell or rent personal data to third parties.
Some providers are based outside the UK (including the USA). Where personal data is transferred internationally, we rely on appropriate safeguards recognised under UK law (such as UK adequacy regulations or the International Data Transfer Agreement / addendum to the EU Standard Contractual Clauses).
We keep enquiry data for up to 24 months after last contact, and customer and account data for the duration of the relationship plus any period required for legal, tax or accounting purposes (typically up to 6 years). Call recordings and their summaries are kept for up to 12 months. Learner data processed on behalf of a customer is retained per that customer's instructions and then deleted or returned.
We use technical and organisational measures appropriate to the risk, including access controls, encryption in transit, per-customer separation, and a "human always signs off" discipline for AI-assisted work involving sensitive information.
Under UK GDPR you have the right to access, correct, delete or restrict your personal data, to object to certain processing, to data portability, and to withdraw consent where processing is based on consent. To exercise any of these, email david.brooks@nexusgrowth.net. If your data is processed by us on behalf of your employer, please contact your employer, and we will assist them.
You also have the right to complain to the ICO: ico.org.uk/make-a-complaint, or 0303 123 1113. We'd appreciate the chance to resolve any concern first.
Our website uses only essential cookies needed for it to function. We do not use analytics, advertising or tracking cookies. You can control cookies through your browser settings.
Our service is provided to businesses and their staff and is not directed at children. We do not knowingly collect personal data from children through our website.
We may update this policy from time to time. The "last updated" date above shows when it last changed; material changes will be highlighted on this page.