Privacy and cookies policy
Last updated: 25 October 2026
1. Who is responsible for your data
The controller of personal data collected through nexoflujos.com is:
- Larbi Nokra, trading as NexoFlujos Editorial, C/ Sant Jaume, 114, 1B, 07840 Santa Eulalia del Río, Islas Baleares, Spain
- Email: tradesivosupport@gmail.com
This policy is written for visitors in the United Kingdom, the United States and elsewhere. It follows the UK GDPR and the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and, for visitors in the European Economic Area, the EU GDPR. For visitors in California, it also contains the notice required by the California Consumer Privacy Act as amended (CCPA/CPRA). We have not appointed a data protection officer.
What NexoFlujos is. NexoFlujos is an independent editorial portal. It does not sell software or provide automation services and is not a representative or technical partner of Make, Zapier or n8n. If you sign up for one of them through an affiliate link, the contract, and the processing of your account data, is between you and that provider only; NexoFlujos has no access to your accounts, scenarios or data there.
The calculator runs in your browser. The values you enter (tasks per month, credit factor, billing type and currency) and the result are computed on your device and do not reach our servers; only your chosen currency is stored in your browser. If you accept analytics cookies, Google Analytics receives an anonymous usage event (currency, billing type and rounded estimated annual saving), never the volume you enter or data that identifies you.
2. What we collect and why
NexoFlujos has two forms (the free template pack and contact), no user accounts and no comments. This is what we process:
| Activity | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Hosting and security | Technical connection data (IP address, browser, date and time). | Serving the pages and protecting them from abuse. | Legitimate interests in running and securing the site (Art. 6(1)(f)). | As set by the hosting provider. |
| Statistics (Google Analytics 4) | Random identifier in cookies, page views, clicks on affiliate links (provider, location, destination, language, page type and, if you used the calculator, the rounded estimated annual saving), calculator use (currency, billing type and rounded estimated annual saving; never the volume you enter), submission of the pack form (without its content), technical device data and approximate location. | Understanding which content is read and measuring affiliate link clicks. | Your consent (Art. 6(1)(a) and PECR regulation 6), which you can withdraw at any time. | Up to 14 months in Google Analytics. |
| Free template pack | Email address, first name (optional), language, the page and campaign you came from, UTM parameters, your consents and their date. | Delivering the pack and knowing which page the request came from. | Your request (Art. 6(1)(b)) and your consent (Art. 6(1)(a)). | 30 days in Netlify Forms, then deleted. |
| Tips by email (optional) | Email address and first name. | Occasionally sending you automation tips. | Your explicit consent through the optional box (Art. 6(1)(a) and PECR regulation 22), confirmed by double opt-in. | Until you withdraw consent. |
| Contact form and email | Name, email address and message. | Replying to your question, correction or request. | Your consent and, where relevant, steps at your request before a contract (Art. 6(1)(a) and (b)). | 30 days in Netlify Forms; emails for as long as needed and within the legal limitation periods. |
If you tick the optional box on the pack form, we first ask you to confirm your address through a confirmation email (double opt-in). For that, we may pass your email address to an email-sending tool that acts as our processor before the 30 days are up. You can unsubscribe at any time.
3. Who receives your data
- Netlify, Inc. (USA): hosts the site and stores form submissions (Netlify Forms). Our agreement is the Netlify DPA (opens in a new tab); see also Netlify’s privacy policy (opens in a new tab).
- Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland): Google Analytics 4, only if you accept. Google’s privacy policy (opens in a new tab).
- Make (Celonis group, headquartered in Munich, Germany, and New York): automates the handling of the requests we receive, for example passing a form submission to our email system. Make is an independent third party and uses Amazon Web Services for hosting (see its sub-processor list (opens in a new tab)). When a Make organisation is created in its European region (zones
eu1.make.comandeu2.make.com), Make states that account data is hosted in EU data centres (Frankfurt (Germany) and Ireland); NexoFlujos uses its own organisation in that European region. Make offers a data processing agreement (DPA, Art. 28 GDPR) within its terms and conditions (opens in a new tab), which also include standard contractual clauses. Make warns that some AI features may process data outside the EU regardless of zone (Make’s documentation on data zones (opens in a new tab)).
We do not sell your personal information, and we do not disclose it to anyone else unless the law requires us to.
4. International transfers
Netlify and Google may process data outside the UK and the EEA, in particular in the United States. Those transfers rely on the Data Privacy Framework (opens in a new tab) (including the UK Extension) where the provider is certified, or on standard contractual clauses and the UK International Data Transfer Addendum. Make provides for standard contractual clauses for transfers not covered by an adequacy decision (see its terms and conditions (opens in a new tab)).
5. How long we keep it
Form submissions are kept in Netlify Forms for a maximum of 30 days: an automated daily job deletes older entries. Technical logs are kept as long as the hosting provider determines. Google Analytics 4 data is kept for up to 14 months and its cookies expire after 2 years at most. Emails are kept as long as needed to deal with your enquiry and, after that, for the legal limitation periods.
6. Cookies and similar technologies (PECR)
Cookies and similar technologies store or read information on your device. Under PECR regulation 6, we need your consent for anything that is not strictly necessary to provide the service you asked for. The table lists everything this site uses.
| Name | Type | Purpose | Duration | Provider |
|---|---|---|---|---|
nf-consent | Local storage, strictly necessary | Remembers your choice about non-essential cookies. | 12 months | First party |
nf-divisa | Local storage, strictly necessary | Remembers the currency you picked in the calculator. | Until you clear it | First party |
nf-lead | Session storage (only if you accept statistics or advertising) | Remembers, until you close the tab, which page the pack form was sent from, to measure the request when you reach the thank-you page. It holds no personal data. | Until you close the tab | First party |
_ga | Analytics cookie (only if you accept) | Tells visitors apart pseudonymously for usage statistics and to measure clicks on affiliate links. | 2 years | Google Ireland Ltd. (Google Analytics 4) |
_ga_5LJKCJCKZV | Analytics cookie (only if you accept) | Keeps the Google Analytics 4 session state for this site. | 2 years | Google Ireland Ltd. (Google Analytics 4) |
Google Analytics 4 only loads if you press “Accept all” or switch it on under “Customize”. Until you choose, and if you press “Reject all”, the site loads no Google code and sets no Google cookies. We use Google Analytics 4 only for usage statistics and to measure clicks on affiliate links, with Google signals switched off and no ad personalisation. This site sets no advertising cookies. If that changes, we will update this policy and ask for your consent first.
Managing your choice. The cookie banner offers “Accept all” and “Reject all” with equal prominence. You can change your mind at any time with the “Cookie settings” button in the footer; if you withdraw consent, Google Analytics stops sending data and its cookies are deleted. We ask again after 12 months.
7. Global Privacy Control
We honour the Global Privacy Control signal. If your browser sends it, we treat it as a request to opt out of the sale or sharing of your personal information. This site currently uses no advertising cookies, so there is nothing to switch off; if we add them, they will stay off for you.
8. Affiliate links
Links to Make go through an address on this site (/ir/make) that redirects you to Make. We store nothing in that redirect beyond the hosting provider’s technical logs. Once you are on a provider’s website, that provider is responsible for its own processing; if you sign up for Make through our link, your contract and the processing of your account data are directly between you and Make, and NexoFlujos does not receive that data. We explain these links in our affiliate disclosure.
9. Your rights
Under the UK GDPR and the EU GDPR you have the right to access your data, have it corrected or erased, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time (withdrawal does not affect processing carried out before it). To exercise any of them, email tradesivosupport@gmail.com saying which right you wish to use. We reply within one month.
Complaints. You can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk (opens in a new tab), to the data protection authority where you live, or to our lead authority in Spain, the Agencia Española de Protección de Datos (www.aepd.es (opens in a new tab)). We would appreciate the chance to put things right first.
10. Notice for California residents
If you live in California, the CCPA/CPRA gives you the right to know and access the personal information we hold about you, to have it deleted or corrected, to opt out of its sale or sharing, to limit the use of sensitive personal information, and not to be treated differently for using these rights. In the last 12 months we have collected, from you or your device, identifiers (email address, IP address, online identifiers), internet activity (pages viewed, link clicks) and the content of messages you send us, for the purposes in section 2.
We do not sell personal information and we do not share it for cross-context behavioural advertising. We do not use sensitive personal information to infer characteristics about you. To make a request, email tradesivosupport@gmail.com; we may need to verify it is you before we act, and you can use an authorised agent. Residents of other US states with comparable laws can use the same address. If we do not grant a request, you can ask us to reconsider and, where the law provides, contact your state’s attorney general.
11. Children
The site is aimed at professionals and is not directed to anyone under 16. We do not knowingly collect their data; if you think a child has sent us some, write to tradesivosupport@gmail.com and we will delete it.
12. Security and changes
The site is served only over HTTPS with security headers, including a strict Content Security Policy. We will update this policy if the law or the site changes; the date of the latest change is at the top of the page.