Privacy Policy

Controller and contact

Nexa Electronics SRL is the controller for the data described in this policy unless a service expressly identifies another controller. Address: Rue Théodore Verhaegen 43, 1060 Saint-Gilles, Belgium. Enterprise number: 1038.188.723. Telephone and WhatsApp: +32492688871. Support: support@nexaelectronics.eu.

For privacy questions and rights requests, write to privacy@nexaelectronics.eu. Nexa has not designated a data protection officer; this address is the privacy contact point.

Data we process

Browsing and security: technical connection and browser data, IP address where needed for security logs, incident records and consent choices. In this phase we use only necessary basket and consent cookies, without trackers, analytics or advertising pixels.

Contact and purchases: name, email, telephone, language, billing and delivery addresses, communication preferences, basket items and quantities, order, invoice, delivery and refund. We receive Stripe transaction references, payment status and limited method information where provided to administer the purchase.

Delivery quotations: basket reference, requested destination, contact details, method, cost, estimated timing, validity and proposal acceptance status. A quotation request is a step before a possible purchase.

Support, returns and legal guarantee: messages, serial or IMEI identifiers, fault details, necessary evidence, return tracking and resolution history. Security and legal duties may involve risk signals, disputes, complaint records and correspondence with authorities.

Where marketing is chosen, we process channel permission and opt-in or opt-out evidence. Starting a WhatsApp conversation does not authorise advertising. Public purchase and quotation forms do not request identity documents, income or data for a credit assessment.

Purposes and lawful bases

Contract and steps requested before a possible contract: responding to contacts, preparing and sending delivery quotations, processing orders and payments, delivering, refunding and providing requested support.

Legal obligation: retaining invoice, accounting, tax, guarantee and product-safety records; responding to privacy rights and legally enforceable authority requests.

Legitimate interests, balanced against individual rights: support, service improvement, network security, fraud prevention and defence of claims. Where applicable, these activities also follow a legal obligation.

Consent where required: promotional communications and any future optional cookies or personalised advertising. None of these tracking technologies is active in this phase. You may withdraw consent without affecting earlier lawful processing.

Recalls and urgent safety communications follow legal obligations and, where applicable, public or legitimate interests. Necessary order, safety and legal messages are not optional marketing.

Stripe payments

Stripe processes payment and transaction data for payments, authentication, fraud prevention, refunds and disputes. Depending on the activity, it acts as Nexa’s processor or as an independent controller. See its policy at https://stripe.com/privacy.

If Stripe presents a method supplied by another payment partner, that partner may also process data under the terms and privacy information shown in the flow.

Full card numbers and security codes are collected through the Stripe interface and do not pass through or remain stored on Nexa servers. Nexa receives transaction references, payment status and limited information needed to administer the order.

Recipients

We share only what is necessary with Stripe and relevant payment networks or partners; hosting, security, support, CRM, email and technology providers under appropriate contracts; and carriers or fulfilment providers.

When you choose to communicate through WhatsApp, WhatsApp/Meta processes communication data under its own terms. Manufacturers and providers handling the legal guarantee may receive the information needed to resolve a defect or safety incident.

Accountants, lawyers, insurers, auditors and authorities may receive data where legally justified. A genuine corporate transaction may involve a buyer or adviser subject to confidentiality and law. Nexa does not sell personal data.

International transfers

Some providers may process data outside the European Economic Area. Where this happens, we use an adequacy decision, valid standard contractual clauses or another applicable lawful safeguard, assessing supplementary measures where required.

You may request a copy or description of the relevant safeguard at privacy@nexaelectronics.eu, subject to lawful redactions.

How long we keep data

We keep data only as long as needed for its purpose, guarantee and limitation periods, product-safety duties and applicable tax and accounting law. Orders, invoices and accounting records follow the corresponding statutory period.

Requested quotations and contacts follow applicable pre-contract and legal-record retention periods. Support, returns and guarantee records are kept for operational needs and the period needed to establish, exercise or defend claims.

Marketing data is kept until consent is withdrawn or inactivity under the retention schedule, preserving the minimum record necessary to respect an opt-out. Consent evidence is kept long enough to demonstrate the choice and policy version; the nexa_consent cookie lasts 6 months.

Security and fraud logs have risk-proportionate retention. Product-safety complaint data is kept no longer than necessary or beyond any applicable GPSR maximum. We delete or irreversibly anonymise data when no longer needed, unless preservation is legally justified.

Your rights

You may request access and a copy, correction, deletion where applicable, restriction and portability of eligible data, object to legitimate interests and direct marketing, or withdraw consent. Where the GDPR provides this right, you may contest a significant solely automated decision and request human review.

Send requests to privacy@nexaelectronics.eu. We may request proportionate identity information and normally respond within one month, with lawful extensions where applicable. Your data-protection rights explains the procedure, limits and deadlines.

Fraud and complaints

Nexa and Stripe may use automated risk signals to detect fraud. Higher-risk transactions may remain pending, be declined or be referred for review. Where legally required, you may contest a significant decision and request human review.

You may contact Nexa and also complain to the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, through dataprotectionauthority.be, or another competent supervisory authority.

Security and updates

The shop is not directed at children who cannot lawfully enter the transaction. We use risk-proportionate technical and organisational measures to protect data and handle incidents.

Material changes to this policy are dated and communicated where required. The version linked to an order or consent record is archived. Text adapted on 5 September 2026.