Privacy policy
How The Nexclick handles personal data under the UK GDPR and the Data Protection Act 2018 — what we collect, why, how long we keep it, and what you can require us to do about it.
Last updated 28 July 2026
Draft — not yet legally reviewed
1. Who we are
The Nexclick of 12 Adelaide St, London WC2N 4HZ, United Kingdom is the data controller for personal data collected through this website.
For anything in this policy, contact info@thenexclick.com or call +44 7577 316553.
2. What we collect
We collect the following, and nothing else:
- Enquiry details — your name, email address, and optionally your phone number, company name, website and whatever you write in the message field, plus the service area, budget band and timeline you select.
- Marketing preference — whether you ticked the box asking for occasional emails. It is unticked by default.
- Technical data — your IP address, browser type and the pages you visited, but only if you consent to analytics cookies. Without that consent, no analytics data is collected at all.
- Anti-spam data — your IP address is used transiently to rate-limit form submissions and is not stored beyond that window.
We do not collect special category data, we do not buy personal data from third parties, and we do not build profiles of visitors.
3. Why we hold it, and on what lawful basis
| What | Why | Lawful basis |
|---|---|---|
| Enquiry details | To reply to you and, if you become a client, to deliver the work | Legitimate interests — responding to a request you made |
| Client records and correspondence | To perform the contract and meet our record-keeping duties | Contract, and legal obligation for accounting records |
| Marketing emails | To send occasional practical emails you asked for | Consent — withdrawable at any time |
| Analytics | To understand which pages are useful | Consent — nothing loads before you give it |
| Spam protection | To stop automated abuse of the enquiry form | Legitimate interests — keeping the service working |
4. How long we keep it
- Enquiries that do not become work — 24 months, then deleted. Long enough that a conversation picked up a year later still makes sense.
- Client records — for the duration of the engagement and six years afterwards, which is the period HMRC requires for accounting records.
- Marketing list — until you unsubscribe, plus a minimal suppression record so we do not email you again by accident.
- Analytics — retained according to the Google Analytics 4 setting stated in our cookie policy.
5. Who else sees it
We do not sell personal data and we do not share it for anyone else's marketing. We use the following processors, each under a data processing agreement:
- Vercel — website hosting and delivery.
- Resend — delivery of enquiry emails to our inbox.
- Cloudflare — bot protection on the enquiry form.
- Google — Analytics and Tag Manager, only where you have consented.
- Our email and file storage provider — for correspondence and project files. [Provider to be named before launch.]
Some of these process data outside the UK. Where they do, transfers rely on the UK International Data Transfer Addendum or adequacy regulations. We will disclose data to authorities only where legally required.
6. Your rights
Under the UK GDPR you can require us to:
- tell you what we hold about you, and give you a copy;
- correct anything inaccurate;
- delete it, where we have no overriding reason to keep it;
- restrict or stop a particular use;
- provide it in a portable format;
- stop using it for direct marketing — this one is absolute, no balancing test;
- reconsider any processing based on legitimate interests, if your circumstances make it unfair.
Email info@thenexclick.com. We will respond within one month. There is no charge unless a request is manifestly excessive, and we will tell you before treating one that way.
7. Complaints
If you are unhappy with how The Nexclick has handled your data, tell us first — most things are a misunderstanding and we would rather fix it directly.
You also have the right to complain to the Information Commissioner's Office at any time, without going through us first. The ICO can be reached at ico.org.uk/make-a-complaint or on 0303 123 1113.
8. Security
The site is served over HTTPS. Enquiry data travels encrypted and is delivered straight to our inbox rather than stored in a database on this website. Access to client files is limited to the people working on the account and protected by two-factor authentication.
No system is perfect. If a breach occurs that is likely to affect your rights, we will notify the ICO within 72 hours and tell you directly where the risk to you is high.
9. Changes to this policy
If this policy changes materially, the "last updated" date at the top changes with it. Where the change affects how we use data you have already given us, we will tell you rather than relying on you noticing.