Privacy Policy

Last Updated: December 31, 2025

NextInvest (“NextInvest,” “we,” “our,” “us”) is committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and the Belgian Privacy Act. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

  1. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to you (“Personal Data”).

  • A. Information You Provide: Name, email address, phone number, company information, account credentials, and billing details.
  • B. Automatically Collected Information: IP address, browser type, device identifiers, and usage patterns collected via cookies.
  • C. Platform & Operational Data: For clients using our specialized tools, we may process radiographic images, scan data, and workflow logs. This data is processed primarily as a Data Processor on behalf of our clients.
  1. Legal Basis for Processing

Under the GDPR, we process your data based on the following legal grounds:

  • Contractual Necessity: To provide the services you have requested.
  • Legal Obligation: To comply with Belgian or EU tax, accounting, or regulatory laws.
  • Legitimate Interests: For fraud prevention, network security, and improving our services.
  • Consent: Where you have explicitly opted-in (e.g., for marketing communications).
  1. How We Use Information

We use your data to:

  • Provide and maintain services.
  • Improve model performance and product functionality.
  • Process transactions and prevent unauthorized access.
  • Communicate updates and respond to support requests.
  1. Data Sharing and Transfers

We do not sell personal information. We may share data with:

  • Service Providers: Third-party vendors (e.g., cloud hosting) bound by strict Data Processing Agreements (DPAs).
  • Legal Authorities: When required by Belgian or EU law.
  • International Transfers: If data is transferred outside the European Economic Area (EEA), we ensure adequate protection through Standard Contractual Clauses (SCCs) or adequacy decisions.
  1. Data Security

We implement high-level technical and organizational measures, including AES-256 encryption, multi-factor authentication, and regular security audits to protect your data against unauthorized access or loss.

  1. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with statutory retention periods under Belgian law (typically 7–10 years for financial records).

  1. Your Rights (GDPR)

As a resident of the EU/Belgium, you have the following rights:

  • Access & Rectification: Request a copy of your data or correct inaccuracies.
  • Erasure (“Right to be Forgotten”): Request deletion of your data under certain conditions.
  • Restriction & Objection: Object to processing based on legitimate interests or direct marketing.
  • Data Portability: Request a transfer of your data to another controller in a structured format.
  • Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise these rights, please contact us at the email address below. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit).

  1. Children’s Privacy

Our services are not intended for individuals under the age of 16.

  1. Contact Us

For any questions regarding this policy or your data, please contact:

NextInvest Email: info@nextinvest.com Location: Belgium