Privacy Policy

The controller responsible for the processing of your personal data under the EU General Data Protection Regulation (GDPR) is: Nepexa Business ID (Y-tunnus): 3202731-2 Helsinki, Finland Email: hello@nepexa.fi

We collect information in the following ways: • Information you provide directly: When you fill out our contact form, start a project inquiry, or email us, we may collect your name, email address, company name, phone number, and project details. • Technical & Usage Data: When you browse our site, we may automatically collect standard technical information such as your IP address, browser type, operating system, and pages visited to ensure site stability, performance, and security.

We process your personal information for the following legitimate purposes: • To respond to your project inquiries and provide design and development services. • To maintain, improve, and secure our website performance. • To fulfill our contractual, legal, and accounting obligations under Finnish law. Legal bases under GDPR include consent (Article 6(1)(a)), contract performance (Article 6(1)(b)), and our legitimate interest in operating our studio (Article 6(1)(f)).

Cookies are small text files stored on your device when you visit our website. • Essential Cookies: Necessary for the technical operation, language preferences, and security of our website. • Analytics Cookies: Used to understand how visitors interact with our website so we can continuously refine user experience. You can accept or decline non-essential cookies via our Cookie Consent banner at any time.

We do not sell, rent, or trade your personal data. We only share necessary data with trusted service providers (e.g., cloud hosting, email service providers, CMS infrastructure) strictly for studio operations and under confidentiality agreements in compliance with GDPR.

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws (e.g., Finnish accounting standards). We implement rigorous industry-standard technical and organizational security measures to protect your data against unauthorized access, loss, or alteration.

Under the GDPR, you have the right to: • Access the personal data we hold about you. • Request rectification of inaccurate or incomplete data. • Request deletion ('right to be forgotten') of your data where applicable. • Restrict or object to the processing of your data. • Request data portability. • Withdraw consent at any time without affecting prior lawful processing. To exercise any of these rights, contact us at hello@nepexa.fi.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us at hello@nepexa.fi.