Home / Bioethics & Safety Protocol
Safety Protocol Documentation

Bioethics & Safety Protocol

Complete regulatory compliance documentation for BuildNexoras laboratory operations, data stewardship, and commercial engagement terms.

Last Revised: September 2026

GHS

Regulatory Compliance

ISO 27001 & GDPR

ISO

Data Security

IEC 27001 Certified

EU

Privacy Framework

GDPR Compliant

DPA

Data Processing

Article 6(1)(b) lawful basis

01

Corporate Registry Identification

Entity Name: BuildNexoras

Registered Activity: Web Development, Backend Systems Engineering, Custom API Design, Scalable Full-Stack Platform Architecture

Registered Address: 268 75 Gluggstorpsvägen 56 Tågarp, Sweden

Correspondence: [email protected]

Telephone: +46 76 825 41 03

Jurisdiction: Kingdom of Sweden / European Union

Registered Laboratory
02

Privacy Policy & Data Protection

BuildNexoras, registered at 268 75 Gluggstorpsvägen 56 Tågarp, Sweden, is committed to protecting the privacy and personal data of all visitors, clients, and partners in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation) and the California Consumer Privacy Act (CCPA).

2.1 Data Controller

The Data Controller is BuildNexoras, reachable at [email protected]. For all data subject requests, including access, rectification, erasure, and portability, contact our Data Protection Officer at the same address.

2.2 Categories of Personal Data

We collect the following categories of personal data:

  • Identity data: full name, professional title, organization
  • Contact data: email address, telephone number, postal address
  • Technical data: IP address, browser type, operating system, device identifiers
  • Usage data: page interactions, session duration, referral sources
  • Project data: technical specifications, business requirements, deliverable preferences

2.3 Legal Basis for Processing

Personal data is processed under Article 6(1)(b) GDPR (performance of a contract) for project delivery, and Article 6(1)(f) (legitimate interest) for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

2.4 Data Retention

Personal data is retained for the duration necessary to fulfill the purposes for which it was collected, or as required by applicable law. Project-related data is retained for 5 years following project completion for audit and warranty purposes. Marketing consent records are retained for the duration of the consent period plus 12 months.

2.5 Data Sharing & International Transfers

BuildNexoras does not sell, rent, or trade personal data to third parties. Data may be shared with trusted sub-processors (cloud hosting providers, payment processors) solely for project delivery. All data transfers outside the EU/EEA are protected by Standard Contractual Clauses (SCCs) or equivalent safeguards.

2.6 Your Rights

You have the right to:

  • Access your personal data (Article 15 GDPR)
  • Rectify inaccurate data (Article 16 GDPR)
  • Erase your data ("right to be forgotten") (Article 17 GDPR)
  • Restrict processing (Article 18 GDPR)
  • Data portability (Article 20 GDPR)
  • Object to processing (Article 21 GDPR)
  • Withdraw consent at any time (Article 7(3) GDPR)

To exercise any of these rights, contact [email protected]. We will respond within 30 days of receipt.

2.7 CCPA Rights (California Residents)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete personal information, the right to opt-out of the sale of personal information, and the right to non-discrimination for exercising your CCPA rights.

GDPR Compliant
03

Terms of Service

These Terms of Service govern all commercial engagements between BuildNexoras (registered at 268 75 Gluggstorpsvägen 56 Tågarp, Sweden) and its clients. By engaging our services, you agree to the following terms.

3.1 Scope of Services

BuildNexoras provides web development services including but not limited to: custom API architecture, full-stack web platform development, cloud infrastructure setup, database engineering, security auditing, performance monitoring, and ongoing maintenance retainers. All services are delivered according to the specifications outlined in the executed Statement of Work (SOW).

3.2 Intellectual Property

Upon complete payment of all agreed invoices, BuildNexoras assigns all worldwide intellectual property rights in the client-specific software deliverables, design assets, and documentation to the Client. Pre-existing frameworks, libraries, and general-purpose tools used in development remain the property of BuildNexoras.

3.3 Payment Terms

Invoices are payable within 14 days of issuance unless otherwise specified in the SOW. Late payments accrue interest at the rate of 1.5% per month. BuildNexoras reserves the right to suspend work on outstanding invoices exceeding 30 days.

3.4 Project Timelines

Estimated delivery timelines are provided in good faith based on project scope. Timelines may be adjusted due to scope changes, delayed client feedback, or third-party dependencies. BuildNexoras will communicate any timeline adjustments promptly.

3.5 Limitation of Liability

BuildNexoras's total liability for any claim arising from or related to the services shall not exceed the total fees paid by the Client for the specific project giving rise to the claim. BuildNexoras shall not be liable for indirect, incidental, consequential, or punitive damages.

3.6 Confidentiality

Both parties agree to maintain the confidentiality of proprietary information disclosed during the engagement. This obligation survives termination of the agreement for a period of 3 years.

3.7 Termination

Either party may terminate the agreement with 14 days written notice. In the event of termination, the Client shall pay for all work completed up to the date of termination. Completed deliverables and associated IP rights transfer to the Client upon payment.

ISO 27001
04

Cookie Policy

This Cookie Policy describes how BuildNexoras, registered at 268 75 Gluggstorpsvägen 56 Tågarp, Sweden, uses cookies and similar tracking technologies when you visit our website.

4.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They enable the website to recognize your device and store information about your preferences or past actions.

4.2 Types of Cookies We Use

  • Essential Cookies: Required for basic website functionality, including session management and security tokens.
  • Functional Cookies: Enable personalized features such as remembering your cookie consent preferences.
  • Analytics Cookies: Help us understand how visitors interact with our website, allowing us to improve user experience.

4.3 Managing Cookies

You can control and manage cookies through your browser settings. Disabling essential cookies may impair website functionality. You can withdraw your cookie consent at any time by clearing your browser's local storage for our domain.

4.4 Third-Party Cookies

We may use third-party services (e.g., Google Analytics) that place their own cookies. These third parties have their own privacy policies governing their use of information. We do not control third-party cookies and encourage you to review their respective policies.

Cookie Compliant
05

Refund & Reimbursement Policy

BuildNexoras is committed to delivering services that meet the specifications outlined in the executed Statement of Work. The following refund terms apply to all engagements.

5.1 Pre-Development Deposits

Deposits paid to initiate project work are non-refundable once development has commenced. If a project is cancelled before development begins, a full refund of the deposit will be issued within 14 business days.

5.2 Milestone-Based Payments

For milestone-based projects, payments for completed milestones are non-refundable. If a milestone deliverable fails to meet the agreed specifications after two rounds of revision, the Client may request a pro-rata refund for that milestone.

5.3 Maintenance Retainers

Monthly maintenance retainer fees may be cancelled with 30 days written notice. No refund is provided for the current billing period. Annual retainer prepayments may be refunded on a pro-rata basis for unused months, minus a 10% administrative fee.

5.4 Refund Process

Refund requests must be submitted in writing to [email protected] within 30 days of the invoice date. Approved refunds are processed within 14 business days via the original payment method.

5.5 Dispute Resolution

Any disputes arising from refund requests shall be resolved through good-faith negotiation. If unresolved, disputes shall be submitted to the competent courts of Sweden under Swedish law.

Refund Policy
06

ISO Compliance Signatures

ISO 27001
Verified

Information Security Management

Compliant with ISO/IEC 27001:2022

GDPR
Verified

EU General Data Protection

Compliant with Regulation (EU) 2016/679

CCPA
Verified

California Consumer Privacy

Compliant with Cal. Civ. Code § 1798.100

PCI DSS
Verified

Payment Card Industry

Level 1 Service Provider Compliant