Last updated: March 29, 2026
We collect building compliance data including property addresses, energy benchmarking scores, emissions data, and regulatory filing status. We also collect ownership information such as entity names, registered agents, and corporate structures.
Contact information (names, email addresses, phone numbers, job titles) is collected for outreach purposes. We additionally collect standard usage data such as IP addresses, browser type, and pages visited, along with cookies necessary for authentication and session management.
We use collected data to provide building compliance intelligence, identify ownership structures, and facilitate outreach to building owners and decision-makers. Usage data helps us improve platform performance and user experience.
Building and ownership data is sourced from publicly available records, government databases (including municipal energy benchmarking disclosures, property registries, and corporate filings), and user input. We do not purchase data from third-party data brokers.
We do not sell your personal data. We share data only with third-party service providers necessary to operate the platform: Amazon Web Services SES for transactional and outreach email delivery, Google OAuth for user authentication, and Neo4j AuraDB for graph-based data storage.
We may disclose information if required by law or to protect our legal rights.
We implement industry-standard security measures including encryption in transit (TLS), secure authentication, and access controls. While no system is completely secure, we take reasonable steps to protect your data from unauthorized access, alteration, or destruction.
We retain building and ownership data for as long as it remains relevant to our platform services. Contact information is retained until you request its removal. Usage logs are retained for up to 12 months.
As a UK-registered company, we comply with the UK General Data Protection Regulation (UK GDPR). You have the right to access, correct, or delete your personal data, restrict or object to processing, and request data portability.
To exercise any of these rights, contact us at the email address below. We will respond to requests within 30 days.
We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies. You can disable cookies in your browser settings, though this may affect platform functionality.
We may update this policy from time to time. Material changes will be communicated via the platform or email. Continued use of the platform after changes constitutes acceptance of the revised policy.
For privacy-related inquiries, contact Nexar Labs LTD at hello@nexarlabs.co.uk. Nexar Labs LTD is registered in the United Kingdom and operates the Data CRM platform at nexarlabs.co.uk.