Privacy Policy

Last revised: 20 June 2025

 

Nexora Services Limited (“Nexora”, “we” or “us”) is committed to protecting the privacy of our customers, and we take our data protection responsibilities with the utmost seriousness.

Nexora will comply with all applicable data protection laws. This Privacy Policy describes how Nexora collects and processes your personal information (“you”, “your”, “I”, “my” or “user”) through Nexora’s websites and applications that reference this Privacy Policy. Nexora refers to an ecosystem comprising Nexora websites (whose domain name includes but is not limited to fastex.com), mobile applications clients, applets and other applications that are developed to offer Nexora Services, as well as independently operated platforms, websites and clients within the ecosystem. This Privacy Policy applies to all personal information processing activities carried out by us, across platforms and websites of Nexora and its Affiliates.

 

Nexora is a limited liability company, registered with the Republic of Costa Rica National Registry, having company registration number 4062001342087 with our registered offices at PROVINCE 01 SAN JOSE, DISTRICT 02 ESCAZU, SAN RAFAEL, EBC CORPORATE CENTER BUILDING, EIGHTH FLOOR, SFERA LEGAL OFFICES. 

Capitalized terms used herein without definition shall have the meaning ascribed to them in our Nexora Terms of Use.

In the interests of transparency, this Privacy Policy explains how and why we collect personal information and the rights that users can exercise over it.

 
1. What personal information does Nexora collect? Why does Nexora process my personal information? What is the legal basis for the processing activities

 

What personal information does Nexora collect and process?Why does Nexora process my personal information?Legal Basis for our use of personal information

- email address

- name

- gender

- date of birth

- home address

- phone number

- nationality

- device ID

- a video recording

- Transaction services. We use your personal information to process your orders, and to communicate with you.

- Communicate with you: We use your personal information to communicate with you in relation to Nexora.

- We collect and process identity information and sensitive/ special personal data (as detailed in section 1) to comply with our Know Your Business (“KYB”) and Know Your Customer (‘’KYC’’) obligations under applicable laws and regulations, and anti-money laundering laws and regulations.

Performance of a contract with the data subject. When we provide you with products or services or communicate with you about them. This includes when we use your personal information to take and handle orders, and process payments.

Legal requirements to comply with our legal obligations under applicable laws and regulations, and anti-money laundering laws and regulations.

Your consent when we ask for your consent to process your personal information for a specific purpose that we communicate to you. The withdrawal of your consent will not affect the lawfulness of processing prior to such withdrawal.

- the Internet protocol (IP) address used to connect your computer to the Internet.

- login, e-mail address, password and location of your device or computer.

- Nexora’s metrics (e.g., the occurrences of technical errors, your interactions with service features and content, and your settings preferences).

- version and time zone settings.		- Provide, troubleshoot, and improve Nexora’s services: We use your personal information to provide functionality, analyse performance, fix errors, and improve the usability and effectiveness of the Nexora Services.

Our legitimate interests are to ensure the proper functioning of our business operations and the interests of our users when for example, we detect and prevent fraud and abuse in order to protect the security of our users, ourselves or others.

Performance of contract with the data subject, when we provide you with products or services, or communicate with you about them. This includes when we use your personal information to take and handle orders, and process payments.  Legal requirements that we need to comply with concerning identifying customers, preventing fraud and/or abuse and avoiding non-compliance.

- transaction history

- information from other sources: we may receive information about you from other sources, such as credit history information from credit bureaus		Fraud prevention. We process personal information to prevent and detect fraud and abuse in order to protect the security of our users, Nexora’s services and others. We may also use scoring methods to assess and manage credit risks.

Our legitimate interests and the interests of our users when, for example, we detect and prevent fraud and abuse in order to protect the security of our users, ourselves, or others.

Legal obligation; to comply with our legal obligations under applicable laws and regulations, and anti-money laundering laws and regulations.
- Information about your behavior: we may process information about you on your behavior and your activity for marketing and advertising purposes

- Improve our services: We process personal information to improve our services and for you to have a better user experience.

- Recommendations and personalisation: We use your personal information to recommend features and services that might be of interest to you, identify your preferences, and personalise your experience with the Nexora Services.

Our legitimate interest to improve our services.

Your consent when we ask for your consent to process your personal information for a specific purpose that we communicate to you. When you consent to processing your personal information for a specified purpose, you may withdraw your consent at any time and we will stop processing your data for that purpose. The withdrawal of your consent will not affect the lawfulness of processing prior to such withdrawal.

 

We firmly believe that where the above table states that we rely on our legitimate interests for a given purpose, this is not overridden by your interests, rights or freedoms. Therefore, If you wish to obtain further information, please contact [email protected].

 

 

Special categories of personal data

The term “special categories of personal data” refers to the various categories of personal data identified by data privacy regulations as requiring special treatment, including in some circumstances the need to obtain explicit consent from you. These categories include racial or ethnic origin, political opinions, religious, philosophical or other similar beliefs, physical or mental health, biometric or genetic data, orientation, or criminal convictions and offenses (including information about suspected criminal activities).

Due to the nature of the services we provide, we may need to process certain categories of personal data. In the limited cases where we do collect such data, we do so in accordance with the Applicable Laws. 

 

2. Can minors use the Nexora Services? 

We do not allow anyone under the age of 18 to use our Services and do not knowingly collect personal information from individuals under the age of 18.

 

3. What about cookies and other identifiers?

Cookies are small pieces of data stored on your computer or mobile device by websites you visit. They help us identify you when you use our Platform, remember your preferences, and enhance your user experience. We may use cookies and other tracking mechanisms on our Platform for these purposes. 

We currently do not subscribe to any do-not-track listings.

 

4. Does Nexora share my personal information?

Information about our users is an important part of our business and we are not in the business of selling our users' personal information to others. Nexora shares users' personal information with third parties (including other Nexora group entities) if we believe that sharing your personal information is in accordance with, or required by, any contractual relationship with you, or us, applicable law, regulation or legal process. When sharing your personal information with other Nexora group entities, we will use our best efforts to ensure that such entities are either subject to this Privacy Policy or follow practices at least as protective as those described in this Privacy Policy.

 

We may also share personal information with the following persons:

  1. Third party service providers: We employ other companies and individuals to perform functions on our behalf. These third-party service providers only have access to personal information needed to perform their functions, but may not use it for other purposes. Further, they must process the personal information in accordance with our contractual agreements and as only permitted by applicable data protection laws.

  2. Legal authorities: We may be required by law or by court or other legal mandate to disclose certain information about you or any engagement we may have with you to relevant regulatory, law enforcement and/or other competent authorities. We will disclose information about you to the authorities to the extent we are obliged to do so according to applicable laws. We may also need to share your information in order to enforce or apply our legal rights or to prevent fraud.

  3. Business transfers: As we continue to develop our business, we might sell or buy other businesses or services. In such transactions, user information generally is one of the transferred business assets but remains subject to the promises made in any pre-existing Privacy Policy (unless, of course, the user consents otherwise). Also, in the unlikely event that Nexora or substantially all of its assets are acquired by a third party, user information will be one of the transferred assets.

 

Protection of Nexora and others: We release accounts and other personal information when we believe such release is appropriate to: (i) comply with the law, law enforcement requests, or with our regulatory obligations; (ii) enforce or apply our Terms of Use and other agreements; or (iii) protect the rights, property or safety of Nexora’s users or others. This includes exchanging information with other entities and organisations for fraud protection.

 

5. International transfers of personal information

To facilitate our global operations, Nexora may transfer your personal data outside of Costa Rica. Nexora implements appropriate safeguards to ensure that such transfers are carried out in compliance with applicable data protection laws. Where Nexora transfers personal data to affiliates, subsidiaries, or service providers located outside Costa Rica, such transfers are made in compliance with Applicable Laws. 

 

6. How secure is my information?

We design our systems with paramount importance placed on the security and privacy of your data. We have appropriate security measures in place to prevent your information being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We work to protect the security of your personal information during transmission and while stored by using encryption protocols and software.

We maintain physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of your personal information. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know.

Our security procedures mean that we may ask you to verify your identity to protect you against unauthorised access to your account password. We recommend using a unique password for your Nexora account that is not utilized for other online accounts and to sign off when you finish using your shared computer.

 

7. What about advertising?

In order for us to provide you with the best user experience, we may share your personal information with our marketing partners for the purposes of targeting, modeling, and/or analytics as well as marketing and advertising.

You have a right to object at any time to processing of your personal information for direct marketing purposes.

 

8. What rights do I have?

When you consent to our processing your personal information for a specified purpose, you may withdraw your consent at any time and we will stop any further processing of your data for that purpose.

As outlined below, you have a number of rights in relation to your privacy and the protection of your personal information. You have the right to request access, rectify and erase your personal information and to ask for data portability. You may also object to our processing of your personal information or ask that we restrict the processing of your personal information in certain instances. In addition, when you consent to our processing of your personal information for a specified purpose, you may withdraw your consent at any time. you have the rights enumerated below. These rights may be limited in some situations - for example, where we can demonstrate we have a legal requirement to process your personal data.

 

  1. Right to access: you have the right to obtain confirmation that your personal information is processed and to obtain a copy of it as well as certain information related to its processing;

  2. Right to rectification: you can request the rectification of your personal information which is inaccurate, or incomplete. You can also change your personal information in your Nexora Account at any time;

  3. Right to erasure: you can, in some cases, have your personal information deleted;

  4. Right to object: you can object, for reasons relating to your particular situation, to the processing of your personal information. For instance, you have the right to object where we rely on legitimate interest or where we process your data for direct marketing purposes;

  5. Right to restrict processing: You have the right, in certain cases, to temporarily restrict the processing of your personal information by us, provided there are valid grounds for doing so. We may continue to process your personal information if it is necessary for the defense of legal claims, or for any other exceptions permitted by applicable laws;

  6. Right to portability: in some cases, you can ask to receive your personal information which you have provided to us in a structured, commonly used and machine-readable format, or, when this is possible, that we communicate your personal information on your behalf directly to another data controller;

  7. Right to withdraw your consent: for processing requiring your consent, you have the right to withdraw your consent at any time. Exercising this right does not affect the lawfulness of the processing based on the consent given before the withdrawal of the latter.

 

To exercise these rights or if you have any questions or objections regarding the collection and processing of your personal information, please send a request with a copy of your identity card, passport, or any other form of identification to [email protected].

 

9. How long does Nexora keep my personal information?

We keep your personal information to enable your continued use of the Nexora Services, for as long as it is required in order to fulfill the relevant purposes described in this Privacy Policy, as may be required by law for record keeping purposes, or as otherwise communicated to you.

Additionally, identity information and special categories of personal data may be retained for as long as necessary to fulfill record-keeping purposes. 

In certain circumstances as provided by law, some personal data may be stored for longer periods.

 

10. Contact information

Our data protection officer can be contacted at [email protected], and will work to address any questions or issues that you have with respect to the collection and processing of your personal information.

 

11. Notices and revisions

If you have any concerns about privacy at Nexora, please contact us, and we will try to resolve it. You also have the right to contact your local Data Protection Authority.

Our business changes regularly, and our Privacy Policy may change also. You should check our websites frequently to see recent changes.