Privacy Policy

1. Who We Are

"Nyxora," "we," "us," or "our" refers to the trading name of Vanshraj-FZ LLC, a company registered in Ras Al Khaimah Economic Zone (RAKEZ), United Arab Emirates, under licence number 45002556, with its registered office at FDRK5993, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates.

Nyxora provides AI-powered business automation services (including but not limited to lead management, AI receptionist services, website chatbots, and custom workflow automation) to small and medium-sized businesses, including clients based in the United Kingdom.

Because we offer services to individuals and businesses in the United Kingdom, we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, in addition to applicable UAE data protection law, in respect of personal data connected to our UK activities.

Contact: asknyxora@gmail.com · Website: nyxora.co.uk

2. Scope of This Policy

This policy covers two distinct categories of data handling. Please read the section relevant to you.

Part A covers personal data we collect directly — from visitors to our website, prospective clients, and our own clients, in our capacity as a data controller.

Part B covers personal data we process on behalf of our clients when we build and operate automations for them (for example, an AI receptionist handling a client's customers). In that context, we act as a data processor, and processing is governed by the Data Processing Agreement (DPA) entered into with each client, not by this policy.

PART A — Data We Control

3. Data We Collect

• Contact and enquiry data: name, email, phone number, business name, and message content submitted via our website contact form, email, or WhatsApp.
• Client account data: billing details, service configuration details, login credentials to systems you grant us access to for delivery of services (e.g. Google Workspace, form platforms), and correspondence.
• Technical data: IP address, browser type, device information, and website usage data, collected via cookies and analytics tools (see Section 8).
• Payment data: processed by our third-party payment provider (e.g. Stripe). We do not store full card details ourselves.

4. Legal Basis for Processing

We process personal data under the following UK GDPR bases:

• Contract — to provide services you've engaged us for and manage the client relationship.
• Legitimate interests — to respond to enquiries, improve our services, and for direct marketing to businesses (where you can opt out at any time).
• Consent — for non-essential cookies and, where required, marketing communications to individuals.
• Legal obligation — for tax, accounting, and regulatory record-keeping.

5. How We Use Data

• To respond to enquiries and provide quotes
• To deliver, invoice, and support contracted services
• To maintain business records required by UK and UAE law
• To send service updates and, with consent, marketing communications
• To improve our website and service offering

6. Who We Share Data With

We share data with trusted sub-processors strictly as needed to deliver our services, including:

• Cloud hosting providers for our automation server infrastructure
• AI model providers for automation processing
• Google (Workspace, Forms, Drive, Docs) where used for service delivery
• Payment processors (e.g. Stripe)
• VoIP/messaging providers where relevant to a service

We do not sell personal data to third parties.

7. International Data Transfers

As a UAE-registered company serving UK-based clients, personal data may be transferred between the UK and the UAE, and to sub-processors located elsewhere (including the US, where our AI and hosting providers may process data). Where we transfer personal data outside the UK, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) / the UK International Data Transfer Addendum, or transfers to jurisdictions benefiting from UK adequacy regulations where applicable.

8. Cookies

Our website uses essential cookies (required for the site to function) and, where enabled, analytics cookies to understand site usage. You can control non-essential cookies via our cookie banner or your browser settings.

9. Data Retention

We retain personal data only as long as necessary for the purposes it was collected — typically for the duration of the client relationship plus 6 years to satisfy UK/UAE tax and accounting obligations, unless a longer period is required by law.

10. Your Rights

Under UK GDPR, you have the right to: access your data; request correction or erasure; restrict or object to processing; data portability; and to withdraw consent at any time where processing is based on consent. To exercise these rights, contact us at asknyxora@gmail.com.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.

11. Security

We apply reasonable technical and organisational measures — including encrypted hosting, access controls, and restricted credential handling — to protect personal data against unauthorised access, loss, or misuse.

12. Children's Data

Our services are intended for businesses, not individual consumers, and are not directed at children. We do not knowingly collect data from anyone under 18.

PART B — Data We Process on Behalf of Clients

When you engage Nyxora to build or operate an automation that processes your own customers' or contacts' personal data (for example, form responses, call transcripts, or chatbot conversations), Nyxora acts solely as your data processor. You remain the data controller, responsible for having a lawful basis for that processing and for your own privacy notices to your customers. Terms governing this processing are set out in our Data Processing Agreement, provided as part of client onboarding.

13. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated to active clients directly.

14. Contact Us

Vanshraj-FZ LLC, trading as Nyxora
FDRK5993, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates
Email: asknyxora@gmail.com