Privacy Policy

Draft: this policy is a working draft pending legal review. Bring it under counsel review before launching the site publicly.

1. Who we are

Nextekk, LLC ("Nextekk", "we", "us", "our") is a technology consulting firm founded in 2010 and headquartered in Addison, TX, USA. This Privacy Policy covers the website at nextekk.com.

For privacy questions or requests, contact us at info@nextekk.com or +1 855.755.NEXT.

2. Information we collect

Contact-form submissions

When you submit our contact form, we collect: your name, email address, company (optional), phone number (optional), the inquiry type you select, and the message you write. We also automatically record the IP address and browser user-agent string of the request, and the date and time of submission.

We collect this information so we can respond to your inquiry, route it to the right person on our team, and keep a record of the conversation.

Server logs

Like nearly every website, our hosting provider records standard web-server access logs (IP address, request URL, user agent, response status, timestamp). These logs are used for security monitoring and operational troubleshooting.

Cookies and similar technologies

We use a small number of strictly necessary cookies:

• A session cookie used by our administrators to stay signed in to the site's admin area. This cookie is not set on public pages.
• A cross-site request forgery (CSRF) token tied to your browser session when you submit a form. This is a security control.

We do not use third-party advertising cookies. We do not currently use analytics cookies; if that changes we will update this policy and add a consent control before any tracking begins.

3. How we use your information

• To reply to your inquiry and provide the information or services you have asked us about.
• To keep an internal record of conversations so we have context when we speak with you again.
• To investigate suspected abuse, fraud, or attacks against the site.
• To comply with legal obligations.

4. Service providers we share data with

We use a small number of third-party service providers to operate the site. They process information only on our instructions and are contractually required to keep it confidential.

• Microsoft Azure: hosts the website and stores the contact-form database. The site runs in the United States.
• Postmark (Wildbit, LLC): delivers transactional email from our contact form to the inboxes of our team. Postmark temporarily stores message metadata (sender, recipient, subject, status) to provide deliverability monitoring.

We do not sell, rent, or trade personal information to anyone.

5. Data retention

We retain contact-form submissions for as long as the conversation is active and for a reasonable period afterward (typically up to 24 months) so we can recall context if you contact us again. You can request deletion at any time (see Section 7).

Server logs are retained for a short rolling window for security and troubleshooting purposes (typically 30-90 days, depending on the log type).

6. Security

The site is served over HTTPS. Administrator passwords are stored as bcrypt hashes; we never have access to the plain-text password. Our admin pages are access-controlled and not publicly indexable. We apply standard hardening (CSRF protection, input validation, parameterized database queries, allowlist HTML sanitization for stored rich content). No system is perfectly secure, but we take reasonable steps to protect your information.

7. Your rights

Depending on where you live, you may have rights regarding your personal information, including the rights to:

• Access the information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information.
• Object to certain uses of your information.
• Receive a copy of your information in a portable format.
• Withdraw any consent you previously gave.

To exercise any of these rights, email info@nextekk.com. We will respond within a reasonable timeframe (typically 30 days). We may need to verify your identity before acting on the request.

8. Children's privacy

The site is not directed to children under 13, and we do not knowingly collect information from children. If you believe a child has submitted information through our site, please contact us and we will delete it.

9. International transfers

We are based in the United States and our hosting infrastructure is located in the United States. If you visit the site from outside the U.S., your information will be transferred to and processed in the U.S.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page shows when it was most recently revised. If the changes are material, we will take reasonable steps to notify the people who have actively contacted us through the site.

11. Contact

Privacy questions, requests, or concerns:

• Email: info@nextekk.com
• Phone: +1 855.755.NEXT
• Mail: Nextekk, LLC, Addison, TX, USA