Privacy

How we handle your data.

This policy covers data collected through this website — contact forms, cookies, and analytics. For how we handle customer data in our products, see our Trust & Security page.

Who we are

The controller.

Nimblecroft is the data controller for personal data collected through this website.

For any questions about how we handle your data, contact us at hello@nimblecroft.com.

Data we collect

What we collect.

1
Contact form submissions. When you use our contact form, we collect your email address and message content so we can respond to your enquiry.
2
Analytics cookies. If you consent, we use Google Analytics to understand how visitors use this site. Analytics cookies are only set after you click “Accept” on the cookie banner.
3
Server logs. Our hosting provider (Vercel) automatically collects standard server logs including IP addresses, browser type, and pages visited. This is standard for all websites.

We do not create user accounts, use tracking pixels, or set social media cookies on this site.

Legal basis

Why we can.

✓
Contact form. Legitimate interest — we need your email to respond to your enquiry. This may also constitute pre-contractual steps at your request.
✓
Analytics cookies. Consent — under the Privacy and Electronic Communications Regulations (PECR), analytics cookies require your explicit consent before being set.
✓
Server logs. Legitimate interest — necessary for website security, performance monitoring, and abuse prevention.

What cookies do.

Cookies are small files stored on your device. We only use analytics cookies, and only with your consent.

_ga

2 years

Set by Google Analytics. Distinguishes unique visitors to the site. Only set after you consent via the cookie banner.

_ga_*

2 years

Set by Google Analytics. Maintains session state across page views. Only set after you consent via the cookie banner.

cookieyes-consent

1 year

Set by CookieYes. Stores your cookie consent preferences so you are not asked again on every visit. This is a strictly necessary cookie.

You can change your cookie preferences at any time using the cookie banner, or by clearing your browser cookies and revisiting the site.

Who processes your data

Third parties.

Google Analytics

Website analytics — consent required

Collects anonymised usage data to help us understand how visitors use this site. Data is processed in the US under the EU-US Data Privacy Framework. Only active after you consent.

Google Tag Manager

Tag management — no cookies set directly

Manages the loading of analytics and consent scripts on this site. Does not collect personal data itself.

CookieYes

Consent management platform

Displays the cookie consent banner and stores your consent preferences. Ensures analytics cookies are only loaded after you give permission.

Vercel Inc.

Website hosting

Hosts this website and processes standard server logs (IP addresses, request data) as part of normal web hosting operations. Standard data processing addendum in place.

Resend

Email delivery for contact form

Delivers contact form submissions to us via email. Processes the email address and message content you provide when using the contact form.

How long we keep it

Retention periods.

→
Contact form submissions — retained for 12 months, then deleted
→
Analytics data — 14 months (Google Analytics default retention period)
→
Server logs — per Vercel's standard retention policy

Your rights

What you can ask for.

Under UK GDPR, you have the right to:

✓
Access — request a copy of the personal data we hold about you
✓
Rectification — ask us to correct inaccurate data
✓
Erasure — ask us to delete your data
✓
Restrict processing — ask us to limit how we use your data
✓
Data portability — receive your data in a structured, machine-readable format
✓
Object — object to processing based on legitimate interest
✓
Withdraw consent — for analytics cookies, use the cookie banner or clear your browser cookies

Right to complain

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk

Get in touch

Questions about privacy?

To exercise any of your rights, or if you have questions about this privacy policy:

hello@nimblecroft.com

We aim to respond to all data protection enquiries within 30 days.

This policy was last updated on 9 April 2025. We will update this page if our practices change.