NFX Consulting Privacy Policy

Last updated: 26 January 2026

1. Who we are

NFX Consulting (“NFX Consulting”, “we”, “us”, or “our”) provides consulting and implementation services focused on solutions for clients in the energy and utilities sector.

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit our website at https://nfx.consulting or interact with us in the course of our business activities.

If you have any questions, you can contact us using the details in the “How to contact us” section below.

2. Scope and definitions

This Privacy Policy applies to:

Visitors to our website (including contact form users).
Prospective and current clients and their representatives.
Partners, suppliers, and other business contacts.

For the purposes of this Policy, “personal data” means any information relating to an identified or identifiable natural person, as defined under applicable data protection law (such as the EU/UK GDPR).

3. Personal data we collect

We may collect and process the following categories of personal data:

Contact details: name, business email address, phone number, company name, job title.
Business information: your role, the organisation you represent, project details you choose to share.
Website and device data: IP address, browser type and version, operating system, pages visited, time and date of visit, time spent on pages, referral URLs, and similar technical information collected via cookies or similar technologies.
Communication data: content of messages you send to us (for example, via contact forms, email, or phone), meeting notes, and related correspondence.
Marketing preferences: your choices about receiving marketing communications from us.

We typically collect personal data directly from you (for example when you fill in a form, contact us, or engage us for services) and automatically via our website (for example through cookies and analytics tools).

4. How we use personal data

We use personal data for the following purposes:

To provide and deliver our services: managing our relationship with you or your organisation, performing contracts, handling projects, and providing support.
To respond to enquiries: answering questions, providing information about our services, scheduling meetings, or sending proposals.
To operate and improve our website: monitoring performance, analysing usage, testing changes, and enhancing the user experience.
To send marketing communications: sharing relevant content, updates, and invitations where permitted by law and in line with your preferences.
To maintain security and prevent misuse: detecting and preventing fraud, abuse, or security incidents.
To comply with legal obligations: keeping appropriate records, responding to lawful requests, and complying with applicable laws and regulations.

We process personal data on the basis of one or more of the following legal grounds: performance of a contract, legitimate interests (for example running and improving our business, communicating with clients and prospects), compliance with legal obligations, and, where required, your consent.

5. Cookies and similar technologies

Our website may use cookies and similar technologies to:

Enable core site functionality.
Understand how visitors use our website (for example, pages visited and time spent).
Improve performance and usability over time.

Where required by law, we will obtain your consent before placing non-essential cookies on your device.

You can usually manage or disable cookies in your browser settings, but some features of the site may not function properly if you do so.

We do not sell your personal data.

We may share personal data with:

Service providers: third-party vendors who support our operations (for example, hosting, email, CRM, analytics, communication tools) and who process data on our behalf and under our instructions.
Professional advisers: such as lawyers, accountants, or auditors, where necessary for legitimate business purposes.
Business partners: where collaboration is needed to provide services you have requested, and only to the extent necessary.
Public authorities: where required by law, regulation, or legal process, or to protect our rights, property, or the safety of others.

If we are involved in a merger, acquisition, or similar corporate transaction, personal data may be transferred as part of that transaction, subject to appropriate safeguards and in accordance with applicable law.

When we use third-party processors, we require them to protect personal data and to process it only in accordance with our instructions and applicable law.

7. International transfers

NFX Consulting is based in the European Union, and we generally process personal data within the EU/EEA.

If we transfer personal data to countries outside the EU/EEA that do not provide an equivalent level of data protection, we will implement appropriate safeguards, such as standard contractual clauses approved by the European Commission or other lawful transfer mechanisms.

You can contact us for more information about the safeguards we use for international data transfers.

8. Data retention

We retain personal data only for as long as necessary for the purposes described in this Policy, including to comply with legal, accounting, or reporting requirements.

Retention periods depend on the nature of the data and the context in which it was collected, but generally we:

Keep business and contract-related records for the duration of the relationship and for a period thereafter as required by law (for example, tax and accounting rules).
Keep marketing-related data until you opt out or we determine it is no longer accurate or relevant.
Keep technical logs and analytics data for a limited period necessary for security and performance analysis.

When personal data is no longer needed, we will delete it or anonymise it in a secure manner.

9. Data security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

These measures may include access controls, encryption or pseudonymisation where appropriate, secure hosting environments, regular updates and monitoring of our systems, and limiting access to personal data to personnel and service providers who need it for legitimate business purposes.

However, no method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security.

10. Your rights

Depending on your location and subject to applicable law, you may have the following rights regarding your personal data:

Right of access: to obtain confirmation whether we process your personal data and to request a copy.
Right to rectification: to correct inaccurate or incomplete personal data.
Right to erasure: to request deletion of personal data in certain circumstances.
Right to restriction: to request restriction of processing in certain circumstances.
Right to data portability: to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
Right to object: to object to certain processing, including direct marketing.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

To exercise these rights, please contact us using the details in the “How to contact us” section below. We may need to verify your identity before responding to your request.

You also have the right to lodge a complaint with a competent data protection authority, in particular in the country where you live or work, or where you believe an infringement has occurred.

11. Marketing communications

If you are a client or contact of NFX Consulting, we may send you information about our services, events, or insights that we believe may be relevant to you, in accordance with applicable law.

You can opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us directly.

We may still send you non‑marketing communications related to our ongoing business relationship (for example, service or administrative messages).

12. Third‑party websites

Our website may contain links to third‑party websites or services that are not operated by NFX Consulting.

We are not responsible for the privacy practices or content of these third parties, and we encourage you to review their privacy policies before providing any personal data.

13. Children’s privacy

Our website and services are intended for business users and are not directed to children.

We do not knowingly collect personal data from children under the age required by applicable law; if we learn that we have done so, we will take appropriate steps to delete such data.

14. How to contact us

If you have any questions or requests regarding this Privacy Policy or our handling of personal data, you can contact us at:

NFX Consulting sp. z o.o.
Email: privacy@nfx.consulting
Website: https://nfx.consulting

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements.

When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, provide additional notice.

We encourage you to review this page periodically to stay informed about how we protect your privacy.

Accelerate Your Digital Transformation

20+

15+

100%