Privacy Policy

Last updated: 19 October 2026

Who we are

The controller of the personal data described in this policy is Stella Novus Limited, trading as NEXUS AI Advisory ("we", "us" or "our"), a private company limited by shares registered in Ireland.

This policy explains what we do with personal data collected through this website, through our booking page and online calls, and when we contact businesses about our services. It replaces the earlier policy, which described a course platform, payments, accounts, and advertising tools this site does not use.

Data we handle for clients. When we carry out work for a client, we may handle data about that client's own customers or patients. In that work the client is the controller and we act on its instructions under a written agreement. The client's own privacy notice covers that data, not this one.

What this site is

This is a static information website hosted on Cloudflare Pages. It has no member accounts and no login. It does not take payments and it has no shopping cart. You can read the pages, send a message through one of the forms below, and book a free online walkthrough.

What the forms collect

We collect only what you type into a form, plus the technical check described under cookies. We do not ask for a date of birth, a username, a password, a payment card, or a billing address.

Contact form (/contact and /about): first name, last name, business email, company name, phone number, country, the service you are interested in, and a description of your enquiry. Country and the description are optional.

Register your interest (/executive-ai-education-apply): first name, last name, business email, phone number, job title, company name, company size, industry, LinkedIn profile URL, your organisation's biggest AI leadership challenge, what you hope to achieve, whether you have budget authority for AI investments, whether you are registering with colleagues and their names and titles if so, how you heard about the programme, any topics you want addressed, and a required confirmation that we may contact you about that registration. How you heard about the programme, topics, and colleagues' names are optional.

Executive Guide (/the-AI-executive-guide): first name, last name, business email, and industry.

Consultation (/free-consultation, and the same form on About): first name, last name, business email, phone number, job title, company name, your biggest AI challenge, and a required confirmation that we may contact you about that request.

Learn about the programme (on each blog post): first name and business email. Sending it takes you to the programme page. It does not by itself add you to an email list.

The register-your-interest form and the Executive Guide form also have an optional box, which is not ticked for you: "Send me occasional email updates from NEXUS AI Advisory (you can unsubscribe at any time)." Leave it unticked and we treat that as no.

Each form includes a hidden field used only to catch automated submissions. If that field is filled in, we discard the submission and do not email it.

Booking a free walkthrough

You can book a free 20-minute online walkthrough through our booking page. The booking form asks for your first name and surname, email address, phone number and business name. You can also add notes or special requests, and the email addresses of up to 10 colleagues you want to invite. Please only add colleagues who expect the invitation.

We use these details to arrange, confirm and hold the call, to send the invitation, reminders and any change or cancellation, and to follow up about the walkthrough.

The walkthrough takes place as an online video call. We do not record calls unless everyone on the call agrees at the start. Please do not share patient, client or other sensitive personal data during a walkthrough.

Business contacts we approach

We may contact businesses by email to introduce our services. For this we hold a minimum of business details: the name of the organisation, a business email address and phone number published by that organisation (for example on its own website), the name and role of a contact where the organisation publishes it, where we found the details, and a note of when we contacted you and what you replied. We do not buy contact lists.

We contact only business addresses, and only where the e-privacy rules of the country concerned allow it (in Ireland, S.I. 336/2011; in the United Kingdom, the Privacy and Electronic Communications Regulations).

Opting out. Every email we send includes a simple way to opt out. Reply "unsubscribe" or email outreach@nexusaiadvisory.com and we will stop. You can object to direct marketing at any time, free of charge. When you opt out we keep a short record (your email address, your organisation and the date) so that we do not contact you again.

Why we use it, and the lawful basis

We use the form details to respond to enquiries, to register interest in the Executive AI Leadership Mastery Program, and to send the Executive Guide to the email address you gave us. We use booking details to arrange and hold the walkthrough. We use business contact details to introduce our services and to follow up if you reply.

The lawful bases are:

Steps before a contract. A consultation request, a registration of interest or a walkthrough booking is a request to hear about working with us.

Legitimate interests. Answering an enquiry, arranging and holding a walkthrough you booked, sending the guide you asked for, introducing our services to businesses and following up on replies, keeping a record of opt-outs, keeping the site available, and blocking automated abuse. We keep the data to a minimum and you can opt out at any time. You can object to processing that relies on legitimate interests.

Consent. The required contact confirmation on the consultation and register-your-interest forms, the optional email-updates box, and agreement to any recording of a call. The updates box is consent for occasional email. It is separate from the enquiry itself. You can withdraw that consent at any time.

Who else processes it

We use these processors:

Cloudflare hosts the site on Cloudflare Pages and provides Turnstile, the check that a form was sent by a person rather than a bot. Cloudflare processes the connection data needed to deliver the pages and the Turnstile check.

SMTP2GO delivers the form submission by email.

Microsoft 365 holds the mailbox that receives those emails and our business email. It also provides our booking page and online video calls, and holds booking details and the calendar entries for walkthroughs.

ActiveCampaign is for occasional email updates only, and only if you tick the optional box. That connection is not switched on. Until it is, ticking the box records your request in the enquiry email only. We do not send your details to ActiveCampaign unless you have opted in and that connection is later turned on.

We may also share personal data with professional advisers, such as lawyers and accountants, under a duty of confidentiality, and with authorities where the law requires it.

We do not sell personal data.

What we do not do

We do not take payments on this site. We do not create accounts or logins. The pages do not load Google Analytics, Matomo, a Facebook Pixel, or any other analytics or advertising script. We do not make decisions about you based only on automated processing that have legal or similarly significant effects.

Cookies

This site does not set analytics or marketing cookies. Cloudflare and Turnstile may set cookies that are strictly necessary to deliver the pages and to check that a form submission is from a person rather than a bot. If you block those cookies, a form may not submit. The booking page may use cookies that are strictly necessary for it to work.

How long we keep it

We keep an enquiry or a walkthrough booking for 24 months after the last message about it, then delete it, unless the law requires us to keep it longer. We keep business contact details from outreach for up to 24 months after our last contact, or until you opt out, whichever comes first; after an opt-out we keep only the short record described above, for as long as we carry out outreach. If you opt in to email updates, we keep that preference until you withdraw it, or for 24 months after the last update, whichever comes first. Server logs kept by the host follow the host's own short log cycle.

International transfers

Cloudflare, SMTP2GO, and Microsoft 365 may process personal data outside the European Economic Area, including in the United States. Where the law requires a transfer tool, the transfer uses an adequacy decision or the standard contractual clauses the processor makes available (with the UK addendum where UK data is involved). If ActiveCampaign is later used for people who opted in, the same applies to that processor. You can ask us for more information about these safeguards.

Your rights

Under the GDPR, and the UK GDPR if you are in the United Kingdom, you can ask us for:

  • access to the personal data we hold about you
  • rectification of inaccurate data
  • erasure
  • restriction of processing
  • objection to processing based on legitimate interests (your objection to direct marketing is absolute)
  • portability of data you provided, where processing is by automated means and is based on consent or on steps before a contract
  • withdrawal of consent, where processing is based on consent, without affecting processing that took place before you withdrew it

To use any of these rights, email info@nexusaiadvisory.com. We will reply within one month. We can extend that by up to two more months for complex requests, and we will tell you if we do. We may ask you to confirm your identity. There is normally no charge.

Complaints

We would appreciate the chance to deal with any concern first: please email info@nexusaiadvisory.com.

You also have the right to complain to a supervisory authority. As an Irish company, our lead supervisory authority is the Data Protection Commission (Ireland): https://www.dataprotection.ie/. If you are in the United Kingdom, you may also complain to the Information Commission (still known as the ICO): https://ico.org.uk/. Elsewhere in the EU, you may also complain to the authority in the country where you live or work.

Children

Our services are for businesses. We do not knowingly collect personal data from children.

Contact

To ask about this policy, or to use any of the rights above, use the contact form, email info@nexusaiadvisory.com, or write to Stella Novus Limited, 1 Riverwood, Timolin, Co. Kildare R14 CK30, Ireland.

Changes

If we change this policy, we will post the new text on this page and change the last updated date. Last updated: 19 October 2026.