Privacy Policy

Last updated: 3 August 2026

Introduction

This Privacy Policy explains how NexPoint handles personal data collected through nexpointmaterials.com. We take your privacy seriously and are committed to processing personal data in accordance with applicable laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

What personal data we process

In this phase of our website, personal data processing is intentionally minimal:

  • Cookies and similar technologies. As described in our Cookie Policy, we currently place only strictly necessary cookies on your device (Cookiebot consent state and WordPress technical state).
  • Technical data processed by our content delivery network. Our hosting infrastructure uses Cloudflare as a content delivery network, which processes your IP address on a transient basis to route traffic and protect against attacks.

We do not currently operate contact forms, newsletter subscriptions, downloads with lead capture, chat functionality, or online purchasing on this website. If we introduce any of these functionalities in the future, this Privacy Policy will be updated accordingly.

Purposes and legal basis

The processing described above serves the following purposes:

  • Operating the website in a secure and reliable way
  • Managing cookie consent and cookie preferences
  • Protecting the website against fraud and abuse

Under the GDPR, our legal basis for these limited forms of processing is our legitimate interest (Article 6(1)(f)) in operating a functioning and secure website. This legitimate interest does not override your rights and freedoms, given the minimal nature of the processing.

Third parties and international transfers

The following service providers process data on our behalf as processors:

  • Cookiebot by Usercentrics (Denmark), for consent management
  • Cloudflare, Inc. (United States), for content delivery and network security

Data transfers to Cloudflare in the United States are governed by the Standard Contractual Clauses adopted by the European Commission, providing an adequate level of protection for personal data transferred outside the EEA.

How long we keep your data

  • Cookie consent state (CookieConsent cookie): 1 month
  • WordPress technical state (wpEmojiSettingsSupports): the current browser session only
  • Cloudflare edge logs: in accordance with Cloudflare's retention policy

We do not maintain any additional records of website visitors.

Your rights

If you are located in the European Economic Area, United Kingdom or Switzerland, you have the following rights under the GDPR:

  • The right to access the personal data we hold about you
  • The right to rectification of inaccurate personal data
  • The right to erasure of your personal data
  • The right to restriction of processing
  • The right to data portability
  • The right to object to processing
  • The right to lodge a complaint with your national supervisory authority

If you are a California resident, you have the following rights under the CCPA and CPRA:

  • The right to know what personal information is collected, used, shared or sold
  • The right to delete personal information held about you
  • The right to opt out of the sale or sharing of personal information (we do not sell personal information)
  • The right to non-discrimination for exercising these rights
  • The right to correct inaccurate personal information
  • The right to limit the use and disclosure of sensitive personal information

To exercise any of these rights, please contact us at [email protected]. We will respond to verified requests within the timeframes required by applicable law.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. The "Last updated" date at the top of this page indicates when the policy was last revised.

Contact

For questions about this Privacy Policy or to exercise your rights, please contact:[email protected]