Legal
Privacy Policy
Last Updated: February 2025
1. Information We Collect
We collect information you provide directly to us, such as when you create an account, request a demo, subscribe to our newsletter, or contact us for support.
Personal Information includes your name, email address, company name, job title, phone number, and any other information you choose to provide.
Usage Data includes information about how you access and use our platform, such as your IP address, browser type, operating system, referring URLs, pages viewed, and the dates and times of your visits.
Device Information includes information about the device you use to access our services, including hardware model, operating system, unique device identifiers, and mobile network information.
2. How We Use Your Information
We use the information we collect to:
→ Provide, maintain, and improve our services
→ Process transactions and send related information
→ Send technical notices, updates, security alerts, and support messages
→ Respond to your comments, questions, and requests
→ Monitor and analyze trends, usage, and activities
→ Detect, investigate, and prevent fraudulent transactions and other illegal activities
→ Personalize and improve your experience
→ Comply with legal and regulatory requirements
We do not sell your personal information to third parties. We do not use your data to train AI models unless you explicitly opt in to such programs.
3. Information Sharing
We may share information about you as follows:
Service Providers: We share information with vendors, consultants, and other service providers who need access to such information to carry out work on our behalf, subject to contractual obligations of confidentiality.
Compliance and Safety: We may disclose information if we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request; protect the rights, property, or safety of Nimbous, our users, or the public; or detect, prevent, or address fraud, security, or technical issues.
Business Transfers: We may share or transfer information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
With Your Consent: We may share information with your consent or at your direction.
4. Data Security
We implement and maintain appropriate technical and organizational security measures designed to protect the security, confidentiality, and integrity of your personal information.
These measures include:
→ Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
→ Access Controls: Role-based access controls with multi-factor authentication
→ Monitoring: 24/7 security monitoring and anomaly detection
→ Compliance: Built on SOC 2 Type II and ISO 27001 certified infrastructure. GDPR compliant. ICO registered in the UK
→ Audits: Regular third-party security audits and penetration testing
Despite our best efforts, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your information.
5. Data Retention
We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.
When we no longer need to process your personal information, we will either delete or anonymize it, or if this is not possible (for example, because your personal information has been stored in backup archives), we will securely store your personal information and isolate it from further processing until deletion is possible.
6. Your Rights
Depending on your location and applicable law, you may have the following rights regarding your personal information:
→ Access: Request access to the personal information we hold about you
→ Correction: Request correction of inaccurate or incomplete personal information
→ Deletion: Request deletion of your personal information
→ Portability: Request a copy of your personal information in a structured, machine-readable format
→ Objection: Object to processing of your personal information
→ Restriction: Request restriction of processing of your personal information
To exercise any of these rights, please contact us at contact@nimbous.co.
8. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date.
You are advised to review this privacy policy periodically for any changes. Changes to this privacy policy are effective when they are posted on this page.
9. Contact Us
If you have any questions about this privacy policy or our data practices, please contact us:
Email: contact@nimbous.co
Address: NIMBOUS LTD, 66 Paul Street, London EC2A 4NA