Privacy Policy
Public website and authorized business portal privacy notice
This notice describes the personal information practices of Nexus CMC Advisors (“Nexus,” “we,” “us,” or “our”) in connection with nexuscmcadvisors.com, our inquiry and intake forms, and authorized Nexus business portal accounts. Privacy inquiries may be sent to questions@nexus-cmc-advisors.odoo.com.
1. Scope and relationship to client agreements
This notice addresses personal information about website visitors, business contacts, prospective clients, authorized client and consultant users, and individuals who communicate with Nexus. Client-owned scientific, manufacturing, regulatory, and other proprietary project materials are also governed by applicable consulting agreements, confidentiality obligations, and any agreed data-protection terms. Those agreements control the parties’ contractual rights and obligations concerning project work where applicable. This notice does not imply that Nexus routinely collects patient information or clinical trial records.
2. Information we collect
Information supplied by you may include your name, business email, organization, professional role, telephone number if requested, inquiry details, requested consulting services, appointment information, correspondence, and information entered into authorized portal profiles. During a client engagement, the portal may record project assignments, messages, document titles and references, access permissions, task responses, and activity or approval history. We may collect technical information needed to operate and secure the services, such as device and browser information, IP address, access timestamps, session identifiers, and security logs. If optional analytics are enabled in the future, we may also collect information about page views and website usage, subject to applicable notice and consent requirements.
3. How we use information
We use information to respond to inquiries; evaluate requested services; schedule consultations; establish and administer client relationships; operate, authenticate, and secure portal accounts; administer user permissions; support project communication; transmit transactional messages; maintain audit and troubleshooting records; improve the website; detect misuse; and comply with applicable legal obligations. We will not treat an inquiry as permission to send unrelated promotional messages where separate permission is required.
4. Confidential technical information
Initial public inquiries should contain only a general description of your needs. Please do not submit confidential, proprietary, patient-identifiable, or sensitive technical data through public contact forms. Once an engagement is established, authorized project material should be exchanged only through the document and communication channels designated for that engagement. Availability of an upload or messaging feature is not authorization to disclose material you do not have the right to share.
5. Service providers and disclosures
To operate Nexus systems, information may be processed by service providers. We currently use:
- Cloudflare — website hosting and infrastructure, spam protection for our inquiry forms, and storage of inquiry and intake submissions.
- Resend — delivery of transactional emails, such as inquiry confirmations. Resend retains copies of sent emails for 30 days.
- Odoo — receives inquiry and intake notifications by email.
- Microsoft 365 — business email, including owner notifications.
- Calendly — scheduling, if you choose to book a call through our scheduling link.
The authorized business portal is not yet in operation. When it launches, portal accounts and project information will be handled through Nexus systems hosted by Cloudflare, and project documents will remain in the document platforms designated for each engagement, such as Microsoft SharePoint. We will update this notice before the portal is made available. Google Analytics is not currently installed on this website.
We share only information reasonably needed for these functions, subject to applicable agreements and law. We may disclose information when legally required, to address security incidents, or in connection with a lawful business transition. We do not sell personal information.
6. Cookies and analytics
Essential cookies and similar technologies may support sign-in, security, session continuity, and site operation. This website does not currently use analytics or advertising cookies. Our form spam protection, provided by Cloudflare, processes technical information about your browser and connection to distinguish people from automated traffic. If we introduce analytics in the future, we will update this notice and request consent where required before it is enabled.
7. Security and account access
Nexus uses access controls and other organizational and technical safeguards appropriate to the services. Users should maintain the confidentiality of their credentials, enable applicable multifactor authentication, and promptly report suspected unauthorized access. No internet service can promise absolute security; access to a Nexus account does not automatically grant access to any Microsoft SharePoint file or other document system, or to any unrelated client project.
8. Retention
We retain personal information for the time reasonably needed to respond to inquiries, administer an engagement or account, protect security, satisfy contractual and legal obligations, and resolve disputes.
9. Privacy requests and choices
Depending on where you reside and which privacy laws apply, you may have rights to request access, correction, deletion, or information about processing, subject to verification and lawful exceptions. Direct requests to questions@nexus-cmc-advisors.odoo.com. We may request reasonable information to verify the requester’s identity and authority. If you receive optional marketing communications from Nexus, you may opt out through the method provided in the message or by contacting us.
10. External links and international access
Links to third-party websites or services are governed by those providers’ privacy notices. If Nexus permits users outside the United States, information may be processed in the United States or other service-provider locations.
11. Children and policy updates
Nexus services are intended for business professionals, not children. We do not knowingly solicit personal information from children through the website. We may revise this notice as our systems and practices evolve and will post an updated effective date; material changes will be communicated when required.
