Nestlyz LTD Logo
NESTLYZ
Get in Touch
UK GDPR & Data Protection Act 2018 Compliant

Privacy Policy

This Privacy Policy describes how Nestlyz LTD. collects, uses, and safeguards information when you visit our website, engage our venture studio services, or submit project inquiries.

Last Updated: September 17, 2026 • Version 2.1

01 Data Controller & Contact

For the purposes of the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), the data controller is:

NESTLYZ LTD.

Company Incorporation: England & Wales, United Kingdom

Website: https://www.nestlyz.co.uk

Email: contact@nestlyz.co.uk

02 Information We Collect

We may collect and process the following categories of data:

  • Contact & Inquiry Data: Full name, corporate email address, organization name, phone number, and project briefs submitted through our contact forms.
  • Career & Recruitment Data: Curriculum Vitae (CV), portfolio links, GitHub/LinkedIn URLs, employment history, and salary expectations when applying for roles.
  • Technical & Telemetry Data: IP address, browser type and version, time zone setting, operating system, and anonymized aggregate analytics.
  • Client Commercial Information: Billing details, contractual milestones, and technical specifications provided under Non-Disclosure Agreements (NDAs).

03 Custom AI Model Training & Data Sovereignty

A core pillar of Nestlyz LTD's venture studio is Custom AI Model Training & Fine-Tuning. We adhere to rigorous data isolation and confidentiality principles:

Zero-Knowledge Client AI Data Guarantee

1. No Unauthorized Model Sharing: Client training datasets, weights, LoRA adapters, and proprietary prompts are never used to train global public models or models of competing clients.

2. Private Cloud Hosting: Dedicated vLLM inference pods and GPU clusters are provisioned inside isolated virtual private clouds (VPCs) with at-rest (AES-256) and in-transit (TLS 1.3) encryption.

3. Data Purging: Raw fine-tuning datasets and vector embeddings are securely wiped upon contract completion or upon client request.

04 Legal Basis for Processing

We process your personal information under the following legal bases under UK GDPR:

  • Contractual Necessity: To fulfill project agreements, venture studio deliverables, and customer support.
  • Legitimate Interests: To optimize our platform performance, prevent cybersecurity threats, and communicate relevant venture services.
  • Consent: For direct marketing communications and optional telemetry tracking.
  • Legal Obligation: To comply with UK statutory, taxation, and regulatory reporting obligations.

05 Cookies & Local Storage

Our website uses essential session cookies and privacy-friendly local storage to maintain session security, render UI components, and remember interactive form states. We do not sell your personal browsing history to third-party data brokers.

06 Your Legal Rights

Under UK data protection law, you possess key rights regarding your personal data:

Right of Access Request a copy of the personal information we hold about you.
Right to Rectification Request correction of inaccurate or incomplete personal records.
Right to Erasure ("To Be Forgotten") Request deletion of your data where no overriding statutory basis exists.
Right to Restrict Processing Limit how we use your data during verification or disputes.

To exercise any of these rights, please email our Data Protection team at contact@nestlyz.co.uk. We respond to all verified requests within 30 days.

07 Policy Revisions

We may update this Privacy Policy from time to time to reflect evolving technological, statutory, or operational standards. All updates will be published on this page with an amended "Last Updated" date.