Skip to content
Home
Legal · updated June 2026

Privacy Policy

How Nexleaf Group handles personal data on this website, in line with the EU General Data Protection Regulation (GDPR).

Controller

Nexleaf Group Ltd, Limassol, Cyprus (HE 485078 · Cyprus Companies Registry), is the controller for personal data processed via this website. Contact: info@nextleaf-group.com.

Data room access requests

When you request data room access, we process the email address you submit in order to verify eligibility and send you a secure, single-use sign-in link.

Legal basis: steps taken at your request prior to entering into an agreement, and our legitimate interest in managing access to confidential materials (Art. 6(1)(b) and (f) GDPR). We retain request data only as long as needed for the fundraising and relationship process, then delete it.

Authentication cookie

If you sign in, we set a single functional cookie (nl_session) that keeps you authenticated. It is httpOnly, strictly necessary for the sign-in to work, and expires after about seven days. It is not used for tracking or advertising, so no consent banner is required for it.

Server logs

Our hosting provider processes standard technical data (such as IP address, browser type, and timestamps) to operate and secure the service. Legal basis: our legitimate interest in security and reliability (Art. 6(1)(f) GDPR). These logs are kept for a short period and then rotated.

Analytics

Where enabled, we use privacy-friendly, cookieless web analytics that produce only aggregate statistics and do not build individual profiles or track you across sites. We do not use advertising or cross-site tracking technologies.

Hosting and processors

The website and its email delivery are operated by infrastructure and email providers acting as our processors under appropriate agreements. Data is hosted within the European Union. We do not sell personal data.

Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and to data portability. You may also lodge a complaint with a supervisory authority.

To exercise any of these rights, contact info@nextleaf-group.com.