Bioethics & Safety Protocol
Complete regulatory compliance documentation for BuildNexoras laboratory operations, data stewardship, and commercial engagement terms.
Last Revised: September 2026
Regulatory Compliance
ISO 27001 & GDPR
Data Security
IEC 27001 Certified
Privacy Framework
GDPR Compliant
Data Processing
Article 6(1)(b) lawful basis
Corporate Registry Identification
Entity Name: BuildNexoras
Registered Activity: Web Development, Backend Systems Engineering, Custom API Design, Scalable Full-Stack Platform Architecture
Registered Address: 268 75 Gluggstorpsvägen 56 Tågarp, Sweden
Correspondence: [email protected]
Telephone: +46 76 825 41 03
Jurisdiction: Kingdom of Sweden / European Union
Privacy Policy & Data Protection
BuildNexoras, registered at 268 75 Gluggstorpsvägen 56 Tågarp, Sweden, is committed to protecting the privacy and personal data of all visitors, clients, and partners in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation) and the California Consumer Privacy Act (CCPA).
2.1 Data Controller
The Data Controller is BuildNexoras, reachable at [email protected]. For all data subject requests, including access, rectification, erasure, and portability, contact our Data Protection Officer at the same address.
2.2 Categories of Personal Data
We collect the following categories of personal data:
- Identity data: full name, professional title, organization
- Contact data: email address, telephone number, postal address
- Technical data: IP address, browser type, operating system, device identifiers
- Usage data: page interactions, session duration, referral sources
- Project data: technical specifications, business requirements, deliverable preferences
2.3 Legal Basis for Processing
Personal data is processed under Article 6(1)(b) GDPR (performance of a contract) for project delivery, and Article 6(1)(f) (legitimate interest) for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
2.4 Data Retention
Personal data is retained for the duration necessary to fulfill the purposes for which it was collected, or as required by applicable law. Project-related data is retained for 5 years following project completion for audit and warranty purposes. Marketing consent records are retained for the duration of the consent period plus 12 months.
2.5 Data Sharing & International Transfers
BuildNexoras does not sell, rent, or trade personal data to third parties. Data may be shared with trusted sub-processors (cloud hosting providers, payment processors) solely for project delivery. All data transfers outside the EU/EEA are protected by Standard Contractual Clauses (SCCs) or equivalent safeguards.
2.6 Your Rights
You have the right to:
- Access your personal data (Article 15 GDPR)
- Rectify inaccurate data (Article 16 GDPR)
- Erase your data ("right to be forgotten") (Article 17 GDPR)
- Restrict processing (Article 18 GDPR)
- Data portability (Article 20 GDPR)
- Object to processing (Article 21 GDPR)
- Withdraw consent at any time (Article 7(3) GDPR)
To exercise any of these rights, contact [email protected]. We will respond within 30 days of receipt.
2.7 CCPA Rights (California Residents)
If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete personal information, the right to opt-out of the sale of personal information, and the right to non-discrimination for exercising your CCPA rights.
Terms of Service
These Terms of Service govern all commercial engagements between BuildNexoras (registered at 268 75 Gluggstorpsvägen 56 Tågarp, Sweden) and its clients. By engaging our services, you agree to the following terms.
3.1 Scope of Services
BuildNexoras provides web development services including but not limited to: custom API architecture, full-stack web platform development, cloud infrastructure setup, database engineering, security auditing, performance monitoring, and ongoing maintenance retainers. All services are delivered according to the specifications outlined in the executed Statement of Work (SOW).
3.2 Intellectual Property
Upon complete payment of all agreed invoices, BuildNexoras assigns all worldwide intellectual property rights in the client-specific software deliverables, design assets, and documentation to the Client. Pre-existing frameworks, libraries, and general-purpose tools used in development remain the property of BuildNexoras.
3.3 Payment Terms
Invoices are payable within 14 days of issuance unless otherwise specified in the SOW. Late payments accrue interest at the rate of 1.5% per month. BuildNexoras reserves the right to suspend work on outstanding invoices exceeding 30 days.
3.4 Project Timelines
Estimated delivery timelines are provided in good faith based on project scope. Timelines may be adjusted due to scope changes, delayed client feedback, or third-party dependencies. BuildNexoras will communicate any timeline adjustments promptly.
3.5 Limitation of Liability
BuildNexoras's total liability for any claim arising from or related to the services shall not exceed the total fees paid by the Client for the specific project giving rise to the claim. BuildNexoras shall not be liable for indirect, incidental, consequential, or punitive damages.
3.6 Confidentiality
Both parties agree to maintain the confidentiality of proprietary information disclosed during the engagement. This obligation survives termination of the agreement for a period of 3 years.
3.7 Termination
Either party may terminate the agreement with 14 days written notice. In the event of termination, the Client shall pay for all work completed up to the date of termination. Completed deliverables and associated IP rights transfer to the Client upon payment.
Refund & Reimbursement Policy
BuildNexoras is committed to delivering services that meet the specifications outlined in the executed Statement of Work. The following refund terms apply to all engagements.
5.1 Pre-Development Deposits
Deposits paid to initiate project work are non-refundable once development has commenced. If a project is cancelled before development begins, a full refund of the deposit will be issued within 14 business days.
5.2 Milestone-Based Payments
For milestone-based projects, payments for completed milestones are non-refundable. If a milestone deliverable fails to meet the agreed specifications after two rounds of revision, the Client may request a pro-rata refund for that milestone.
5.3 Maintenance Retainers
Monthly maintenance retainer fees may be cancelled with 30 days written notice. No refund is provided for the current billing period. Annual retainer prepayments may be refunded on a pro-rata basis for unused months, minus a 10% administrative fee.
5.4 Refund Process
Refund requests must be submitted in writing to [email protected] within 30 days of the invoice date. Approved refunds are processed within 14 business days via the original payment method.
5.5 Dispute Resolution
Any disputes arising from refund requests shall be resolved through good-faith negotiation. If unresolved, disputes shall be submitted to the competent courts of Sweden under Swedish law.
ISO Compliance Signatures
Information Security Management
Compliant with ISO/IEC 27001:2022
EU General Data Protection
Compliant with Regulation (EU) 2016/679
California Consumer Privacy
Compliant with Cal. Civ. Code § 1798.100
Payment Card Industry
Level 1 Service Provider Compliant