Privacy Policy

Privacy Policy

This Privacy Policy describes how Nebula Consulting Limited (“we,” “us,” or “our”) collects, uses, and protects your personal data when you visit our website at [Your Website URL] (“the Website”). We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

Nebula Consulting Limited is the data controller responsible for your personal data.

Registered Office: International House, 36-38 Cornhill, London, EC3V 3NG, United Kingdom.

Company Registration No.: 07953371.

2. What Information We Collect

We may collect and process the following data about you:

• Contact Data: If you contact us via a form or email, we will collect your name, email address, and any other information you provide.
• Technical Data: We automatically collect certain technical information about your device and how you interact with our Website. This includes your IP address, browser type and version, time zone setting, operating system, and platform.
• Usage Data: We collect information about how you use our Website, such as the pages you visit, the links you click, and the time and duration of your visit. This is primarily done through the use of Google Tag Manager.
• Cookie Data: We use cookies to manage your preferences and improve your browsing experience. We use Cookiebot to ensure all cookies are managed in compliance with UK data protection laws and to give you granular control over your cookie preferences.

3. How We Use Your Data

We use your data for the following purposes:

• To provide and improve our services: We use your data to understand how our Website is used and to make improvements.
• To communicate with you: If you contact us, we will use your details to respond to your queries.
• To comply with legal obligations: We may process your data to comply with legal requirements.
• For analytics and performance: We use Google Tag Manager to deploy various tracking tags, including Google Analytics, to help us understand visitor behavior and improve our content. This data is aggregated and anonymised where possible.

4. Legal Basis for Processing

Our legal basis for processing your personal data is typically one or more of the following:

• Consent: Where you have given us explicit consent (e.g., for certain cookies). You can withdraw your consent at any time through our Cookiebot consent management platform.
• Legitimate Interests: Where it is necessary for our legitimate interests (e.g., to improve our Website and services), and your fundamental rights do not override those interests.
• Legal Obligation: Where we need to comply with a legal or regulatory obligation.

5. Cookies

We use cookies on our Website. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree.

• Cookiebot: We use Cookiebot to manage and gain your consent for the use of cookies. This ensures our use of cookies is compliant with UK GDPR. You will be presented with a cookie banner that allows you to accept or reject different categories of cookies.
• Google Tag Manager (GTM): GTM is a tag management system that allows us to manage and deploy marketing and analytics tags on our Website. It does not itself collect personal data but enables us to use other tools like Google Analytics.

You can manage your cookie preferences at any time through the cookie consent management platform on our Website.

6. Data Sharing and Disclosure

We will not sell, rent, or lease your personal data to third parties. We may share your data with third-party service providers who assist us in operating our Website and providing our services (e.g., hosting providers, analytics services like Google Analytics). All such third parties are required to protect your data and are bound by confidentiality agreements.

We may also disclose your personal data if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation or protect and defend our rights or property.

7. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We also limit access to your data to employees and third parties on a need-to-know basis.

8. Data Retention

We will only retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

9. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete data we hold about you.
• Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal data in certain circumstances.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us at data-privacy@nebulaconsulting.co.uk.

10. Complaints

If you have a concern about our use of your information, you have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page. We encourage you to review this policy periodically.