Last updated 11 October 2026. This is a pre-launch version that will be reviewed before the Hull pilot starts in January 2027.
Who we are
NexSurplus is run by Nexsurplus Ltd, Hull, UK (“we”). We are the controller of the personal data described here.
What we collect
- Account details: your name, email address and the organisation you belong to.
- Organisation details: name, type, postcode and, if you add it, a phone number.
- Pilot applications: name, email, company, role, postcode and whether you'd like to use WhatsApp.
- Your WhatsApp number, if you link it, and the messages and photos you send to the assistant.
- What you record about your projects: materials, deliveries, usage, listings, offers and deals.
- Basic technical data needed to run the service securely, such as sign-in sessions and error logs.
Why we use it
- To provide the service you signed up for (contract): your account, projects, the assistant, the marketplace and notifications.
- To reply to your pilot application and keep you updated about the pilot (legitimate interests; you can opt out any time).
- To keep the service secure and working, and to improve it (legitimate interests).
- To meet legal obligations, for example keeping business records.
Who can see what
Other organisations see your listings, your organisation's name and type, and an approximate location — never your exact site address. Your exact pickup address and contact details are only shared with the other party once a deal is agreed. People in your organisation see the projects their role allows.
Service providers
We use trusted providers to run NexSurplus. They process data on our behalf and under contract:
- Vercel (hosting and file storage), Neon (database), Clerk (sign-in and accounts).
- Twilio (WhatsApp messages) and Resend (email).
- An AI model provider (Anthropic or Google) that powers the assistant; it processes the messages and photos you send it.
- postcodes.io (turning postcodes into map positions) and OpenStreetMap (map tiles).
Some of these providers process data outside the UK. Where they do, transfers are covered by appropriate safeguards such as the UK International Data Transfer Addendum.
How long we keep it
We keep account and project data while your organisation uses NexSurplus, and delete or anonymise it within 12 months of the account closing, unless the law requires us to keep it longer. Pilot applications are kept until the pilot ends or you ask us to delete them.
Your rights
You can ask to see, correct, delete or export your personal data, and object to or restrict how we use it. Contact us to do this. If you're unhappy with how we handle your data you can complain to the Information Commissioner's Office (ico.org.uk).
Cookies
We only use cookies needed to sign you in and keep the service secure. We don't use advertising cookies. We count page visits with Vercel Web Analytics, which doesn't use cookies or identify you.