Privacy Policy

1. Who we are

NexQ is a web design and development service operated by Aidan Hall, based in the United Kingdom. We are the data controller for personal data collected through this website. Contact us at info@nexq.co.uk with any data-related questions.

2. What data we collect

Information you provide directly

When you submit our contact or review request form, we collect:

• Your name
• Your email address
• Your phone number (if provided)
• Your website URL (if provided)
• Information about your business and requirements

Analytics data (only if you consent)

If you choose to accept analytics cookies, we collect anonymised data about how you use this site via Google Analytics 4, Google Ads conversion measurement, and Microsoft Clarity. This includes:

• Pages visited and time spent on each page
• How you navigate between pages (clicks, scrolls)
• Browser type, device type, and screen size
• Approximate location (country/city level only — IP addresses are anonymised)
• Microsoft Clarity also captures session recordings and heatmaps to show us where visitors click and scroll

This data does not identify you personally and is used solely to improve the website. Analytics cookies are optional — you can choose "Essential only" when the cookie banner appears and no analytics data will be collected.

3. Why we collect it and our legal basis

We collect your contact information solely to respond to your enquiry and, if you proceed, to fulfil the service contract. Our legal basis under UK GDPR is:

• Contract performance — to deliver the service you have requested
• Legitimate interests — to respond to your initial enquiry before any contract exists
• Consent — analytics and conversion-measurement cookies are only placed if you explicitly accept them via the cookie banner

4. How long we keep your data

Enquiry correspondence is kept for 12 months. Data relating to active or completed projects is retained for 6 years in line with UK tax record requirements. You may request deletion at any time — see Section 7.

Analytics data held by Google and Microsoft is governed by their respective retention policies (typically 14 months for GA4, 13 months for Clarity).

5. Who we share data with

We do not sell or share your personal data with third parties for marketing purposes. Your data may be processed by the following sub-processors:

• Cloudflare — hosting and CDN provider (standard contractual clauses)
• Resend — transactional email delivery for enquiry notifications
• Google LLC (Google Analytics 4) — website analytics, if you consent. Anonymised IP. Google Privacy Policy
• Google LLC (Google Ads) — conversion measurement so we can see whether an ad led to a completed brief, if you consent. Google Privacy Policy
• Microsoft Corporation (Microsoft Clarity) — session recording and heatmap analytics, if you consent. Microsoft Privacy Statement

6. Transfers outside the UK

Cloudflare, Google, and Microsoft operate global infrastructure. Where your data is transferred outside the UK, these providers apply appropriate safeguards (standard contractual clauses or equivalent mechanisms) in accordance with UK GDPR requirements.

7. Your rights

Under UK GDPR you have the right to:

• Access — request a copy of your personal data
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data (subject to legal retention requirements)
• Restriction — ask us to limit how we process your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — you can change your cookie preference at any time by clearing your browser's local storage for nexq.co.uk and refreshing the page

To exercise any right, email info@nexq.co.uk. We will respond within 30 days. You also have the right to complain to the Information Commissioner's Office (ICO).

8. Cookies

Cookies are small text files stored in your browser. We use two categories:

Essential cookies (always active)

These are required for the site to function securely and cannot be disabled.

• __cf_bm — set by Cloudflare to distinguish human visitors from automated traffic. Expires after 30 minutes.
• nexq-cookies — stores your cookie preference (stored in localStorage, not sent to any server)
• nexq_consent — a first-party cookie on .nexq.co.uk that stores your cookie choice (all or essential) for 180 days, so it applies across nexq.co.uk and form.nexq.co.uk.
• nexq-theme — stores your light/dark mode preference (localStorage only)

Analytics cookies (only if you consent)

These are placed only if you click "Accept all cookies" on the banner. You can decline and use the site without them.

• _ga, _ga_* — Google Analytics 4. Tracks page views and navigation. IP is anonymised. Expires after 2 years.
• _clck, _clsk — Microsoft Clarity. Records anonymised session behaviour (clicks, scrolls). Expires after 1 year / 1 day respectively.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last revised. Material changes will be communicated via the cookie consent banner, which will re-appear to allow you to review and re-confirm your preference.