Privacy Policy

Nelo Solutions, headquartered in Geneva, Switzerland, acts as the data controller for personal data collected through this website. For any privacy request, contact privacy@nelosolution.com or hello@nelosolution.com.

• Contact data you provide via our forms: name, business email, phone number, company, role and any message content.
• Booking data for audit or consultation requests: preferred date, time slot, timezone and business context.
• Technical data automatically collected when you browse the website: IP address, browser type, device type, pages visited and referring URL.

• Respond to your inquiries and prepare commercial proposals — pre-contractual measures (GDPR Art. 6(1)(b)).
• Deliver services and manage the client relationship — contract performance.
• Improve the website and secure our infrastructure — legitimate interest.
• Send occasional insights if you subscribe to our newsletter — explicit consent, revocable at any time.

Contact and booking data are retained for up to 24 months after the last interaction. Client project data is kept for the duration of the engagement plus the legal retention period applicable in Switzerland (typically 10 years for commercial records).

We do not sell or rent personal data. We share strictly what is necessary with trusted processors bound by data processing agreements:

• Hosting and website infrastructure providers (EU / Switzerland data residency where possible).
• Communication tools (email delivery, calendar, WhatsApp for Business).
• Analytics tools configured with IP anonymization and no cross-site tracking.

Where personal data is transferred outside the EU or Switzerland, we rely on the European Commission Standard Contractual Clauses and additional safeguards where required.

Under the GDPR and the Swiss FADP, you have the right to access, rectify, delete or port your personal data, to restrict or object to processing, and to lodge a complaint with a supervisory authority. To exercise your rights, contact privacy@nelosolution.com. We respond within 30 days.

We use only essential cookies required to operate the website (language preference, security). No advertising cookies. If we ever introduce analytics cookies, we will request your consent through a compliant cookie banner.

We implement industry-standard technical and organizational measures: TLS encryption in transit, access control, principle of least privilege, encrypted backups and periodic security reviews.

We may update this policy to reflect changes in our practices or the law. The latest version is always available on this page.