Legal
Privacy Policy
This policy explains what personal data MH NEXA collects, why we collect it, and the rights you have over it.
Last updated: September 2026 · Version 1.0
1. Who we are
MH NEXA is a UK-based AI automation business operated by Max Henderson as a sole trader.
For the purposes of applicable data protection law, the data controller for personal data collected through this website is Max Henderson, trading as MH NEXA.
Contact: automation@mhnexa.co.uk · 07365 266554
2. Personal data we collect
- Information you submit through our contact and automation audit forms: name, business name, email address, phone number, website, business type, employee numbers and the descriptions you provide about your business and processes.
- Marketing preferences, where you choose to opt in.
- Website usage data such as pages visited and general technical information, only where you have consented to optional cookies.
- Any information you include in emails or phone calls with us.
3. Why we process your data
- To respond to your enquiry and prepare an automation audit.
- To provide, support and improve automation services you request.
- To send marketing information where you have opted in.
- To operate, secure and improve this website.
- To comply with our legal obligations.
4. Lawful bases
- Legitimate interests — responding to business enquiries and running our business securely.
- Contract — taking steps at your request before entering into a contract, and delivering services.
- Consent — optional cookies and marketing communications. You may withdraw consent at any time.
- Legal obligation — accounting, tax and compliance requirements.
5. Cookies
We use strictly necessary cookies to operate the website. Optional analytics and marketing technologies are only used where you have given consent, which you can change at any time using the Cookie Settings link in the footer. See our Cookie Policy for details.
6. Data retention
We keep enquiry data for as long as needed to respond and, where a business relationship begins, for the duration of that relationship plus any period required for legal, accounting or dispute purposes. Data no longer required is deleted or anonymised.
7. Sharing your data
We share personal data only where necessary, with categories of provider including:
- Hosting and database providers
- Email delivery providers
- SMS and communication providers, where used in a service
- AI providers, where AI processing forms part of a service
- Payment providers, where a purchase is made
- Professional advisers and authorities where legally required
We do not sell personal data.
8. International transfers
Some providers may process data outside the UK. Where that happens we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / Addendum.
9. Security
We use appropriate technical and organisational measures, including access controls, encryption in transit, restricted administrative access and secure credential storage. Enquiry data is stored in a database that is not publicly accessible and is only available to authorised MH NEXA administrators.
10. Your rights
- Access to your personal data
- Rectification of inaccurate data
- Erasure in certain circumstances
- Restriction of processing
- Objection to processing based on legitimate interests or direct marketing
- Data portability where applicable
- Withdrawal of consent at any time
To exercise a right, email automation@mhnexa.co.uk.
11. Complaints
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
12. Updates
We may update this policy from time to time. The version and date at the top of this page show when it was last changed.