Privacy Notice
Who we are
Nexsky Limited (“NexSky”) is a boutique family office incorporated in England and Wales under company number 16163927, with its registered office at 32–33 St. James’s Place, London SW1A 1NR. We operate from London and Monaco.
NexSky is the controller of the personal data described in this notice. That means we decide why and how it is used, and we are responsible for it.
To contact us about privacy, or to exercise any of the rights below: contact@nexsky.io, or write to us at the address above marked for the attention of the Managing Partner.
Who this notice is for
It covers everyone whose personal data we hold: clients and their families, prospective clients, people we have met professionally, people who receive our research or briefings, visitors to our website, and people whose details we have compiled from public and third-party sources without having met them. If you are in that last group, the section “If we obtained your details without contacting you” is the part that matters most.
What we collect, and where it comes from
From you directly. Your name and contact details; information about your family, circumstances and objectives; financial information including assets, liabilities, income, banking relationships and sources of wealth; identification and verification documents; and anything else you choose to tell us.
From your advisers, banks and other providers, with your authority — statements, valuations, structure documents and similar.
Generated by us in serving you — consolidated reports, analysis, meeting notes, correspondence, and records of the work we do.
From people who introduce you to us. Where someone introduces you, they may pass us your name and contact details before we meet. Where we have such an arrangement, we will tell you about it, including whether we pay that person.
From public and third-party sources. We compile professional details — names, roles, employers, public profiles and business contact details — from published sources and research lists, in order to identify people who may have a use for our services.
From your use of our website. Limited, privacy-conscious measurement described under “Our website” below.
Why we use it, and on what legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Provide family-office services to clients | To perform our engagement with you | Performance of a contract |
| Verify identity, screen for sanctions and politically exposed persons, and keep due-diligence records | Because the law requires it of firms like ours | Legal obligation |
| Keep records of our work, correspondence and decisions | To run the business, to answer questions later, and to defend claims | Our legitimate interests |
| Identify and approach people who may want our services | To find clients | Our legitimate interests |
| Send research, briefings and the NexSky Letter | Because you asked us to | Consent — withdrawable at any time |
| Measure how our website and publications are used | To understand what is useful | Our legitimate interests |
Where we rely on legitimate interests, we have weighed our interest against your rights and concluded ours does not override yours. You can ask us for that assessment.
We do not sell personal data, and we never will.
If we obtained your details without contacting you
Some people in our records have never spoken to us. We compiled their professional details from published sources because we thought our services might be relevant to them.
If that is you, you are entitled to know the following.
We hold your name, professional role, employer or affiliation, links to your public profile, your likely country of residence, business contact details where published, and a note that you are a prospective contact. We rely on our legitimate interest in identifying people who may want our services.
We also hold an estimate of your wealth, and of where it came from. We would rather tell you that plainly than have you discover it.
It is an estimate we derive from public information — published earnings lists, company filings, media reports — and it may be very different from your actual position. We use it for one purpose: to decide who to approach, and in what order. It is never shared outside NexSky. It is not used to make any decision about you beyond whether to make contact, and no decision about you is taken automatically.
We also run a preliminary check before deciding whether to approach you. Using public sources, we look at whether you hold or have held a prominent public position — what the rules call a politically exposed person — and whether there is anything that would prevent us taking you on as a client at all.
We do this for a practical reason. Some clients require substantially more work to take on than others, and a firm of our size would rather know that before spending time on an approach than afterwards. In most cases the effect is that we do not make contact.
This is a preliminary indication for our own planning. It is not a due-diligence finding and we do not treat it as one. It is not shared outside NexSky, and it determines nothing about you except whether and when we get in touch. Formal checks happen only if you become a client, and then with your knowledge and involvement.
You can ask us what we hold, correct it, or have it removed. If you tell us an estimate or an indication is wrong, we will amend or delete it — we have no attachment to a guess. If you would rather we held nothing about you at all, tell us and we will delete your record.
You can tell us to stop, and we must. If you object to us using your data to approach you, we will stop — immediately and permanently, with no balancing exercise and no need to give a reason. Write to contact@nexsky.io. We will keep the minimum record needed to make sure we do not contact you again.
If we have not approached you within twelve months, we delete your record.
Who we share it with
Your own advisers and providers — banks, custodians, managers, lawyers, tax advisers — with your authority, so that they can act for you.
Service providers who help us operate. We use a small number of technology providers, each under a written data-protection agreement: Google (email, calendar and document storage), Cloudflare (our website, member area and operational systems), Anthropic (the artificial-intelligence tools described below) and Apple (brief transit of scanned business cards). We keep a current list and will send it to you on request.
Regulators, courts and law-enforcement, where we are required to.
We do not share your data with anyone else for their own purposes.
Artificial intelligence
We use AI tools to help prepare analysis, correspondence, reporting and administration. Three things are true of how we do it, and we state them plainly because they are the questions people ask.
A person decides. No decision about you is made by a machine alone. Every AI-assisted output that affects you is reviewed and approved by a NexSky principal before it is used.
Your information is not used to train anyone’s model. We do not put confidential information into any AI tool that operates other than on commercial terms prohibiting its use for model training.
Some of it is processed outside the UK. Our AI provider processes in the United States. That transfer is covered by the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum. Our document storage is in the European Union.
If you are a client, you can restrict or exclude the use of AI tools on your data at any time, and we will give effect to it.
Where your data is held
Our documents and email are held in the European Union. Our website and operational systems run on a global edge network. Our AI provider processes in the United States. Our relationship database runs on our own equipment rather than in a third-party cloud; its encrypted backups are held with our cloud storage provider under a written data-protection agreement.
Where data leaves the UK or EEA, we rely on the European Commission’s Standard Contractual Clauses together with the UK International Data Transfer Addendum.
How long we keep it
| Client records | For the engagement, and seven years after it ends, to meet anti-money-laundering and other legal requirements |
| Prospective contacts we have not approached | Twelve months, then deleted |
| Prospective contacts we have spoken to | Three years from the last contact, unless you ask us to delete sooner |
| Meeting recordings and transcripts | Twelve months, unless part of a client file |
| Website measurement data | Thirteen months |
| Subscribers to our research | Until you unsubscribe |
Where the law requires us to keep something longer, we keep only that, and only for that purpose.
Our website
We measure how our website and publications are used, and we do it deliberately narrowly. We record which page was viewed, the country it was viewed from, a random session identifier that disappears when you close your browser, and — where you arrived by a link — the site or campaign that referred you. We do not record IP addresses, we do not use open-tracking pixels in our emails, and we cannot tell who clicked what. Links are identical for every recipient. Raw measurement data is deleted after thirteen months.
Our public website uses Google Analytics, which runs only if you accept it through the cookie banner. Our members’ area does not use it at all — members’ reading is measured only by our own first-party counter described above. We also use Cloudflare’s cookieless visitor measurement, which sets nothing on your device.
Your rights
You can ask us to: give you a copy of the data we hold about you; correct anything inaccurate; delete it; restrict how we use it; transfer it to someone else; or stop using it.
Two of these are absolute. If you object to direct marketing, we stop — there is nothing to weigh. If you withdraw consent, it takes effect immediately.
We respond within one month. There is no charge.
If you are unhappy with how we have handled your data, please tell us first — we would rather fix it. You can also complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). If you are in Monaco, you may also contact the Commission de Contrôle des Informations Nominatives (ccin.mc).
Changes
We will update this notice as our business changes, and we will post the current version here with the date it took effect.
Version 1.2 — 11 September 2026. (Version 1 gave the contact address as info@nexsky.io, which does not route, and did not name Formspree among our providers; both corrected the same day. Version 1.2 corrects the description of where our relationship database is held: the live database is on our own equipment, and its encrypted backups are with our cloud storage provider. Our enquiry form no longer uses Formspree.)