Privacy Policy

1. Information we collect

We only collect what we need to respond to you and deliver our services:

• Information you give us — when you complete our contact form or email us, we collect your name, work email address, company name (optional) and any project details you provide.
• Technical data — when you visit the site we may collect your IP address, browser type, device information and pages viewed, via server logs and privacy-respecting analytics.
• Cookies — see the “Cookies” section below.

We do not knowingly collect special-category data or information from children. Please don't send us sensitive personal data through the contact form.

2. How we use your information

• To respond to your enquiry and arrange a call.
• To provide, manage and improve the services you engage us for.
• To send service-related communications (for example, project updates and invoices).
• To meet our legal, accounting and regulatory obligations.
• To maintain the security and performance of our website.

3. Legal bases for processing

We rely on the following legal bases under UK GDPR:

• Consent — where you submit an enquiry or opt in to communications.
• Contract — where processing is necessary to provide services you have engaged us for.
• Legitimate interests — to run, secure and improve our business and website, balanced against your rights.
• Legal obligation — to comply with tax, accounting and other legal requirements.

4. Sharing your information & sub-processors

We never sell your personal data. We share it only with trusted service providers who help us operate, and only as far as needed:

• Hosting and infrastructure providers (for example, our cloud and website hosts).
• Email and communication tools used to reply to you.
• Stripe Payments Europe, Ltd. and its affiliates, which process invoices and payments on our behalf (see stripe.com/privacy).
• Analytics providers that help us understand site usage.
• Professional advisers (accountants, lawyers) and authorities where required by law.

5. Cookies

We use a small number of cookies and similar technologies: essential cookies that make the site work, and optional analytics cookies that help us understand how the site is used. You can control cookies through your browser settings. Disabling some cookies may affect how the site functions.

6. Data retention

We keep personal data only as long as necessary for the purposes above. Enquiry data is kept while we are in contact and for a reasonable period afterwards; client and financial records are kept for as long as required by law (typically six years for accounting records). When data is no longer needed, we securely delete or anonymise it.

7. International transfers

Some of our providers may process data outside the UK. Where that happens, we ensure appropriate safeguards are in place (such as UK adequacy regulations or the International Data Transfer Agreement) so your data remains protected.

8. Your rights

Under UK data protection law you have the right to access, correct, delete or restrict the use of your personal data, to object to processing, and to data portability. To exercise any of these rights, email us at hello@nextstagetechnologies.com.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you are unhappy with how we handle your data.

9. Security

We take appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and the principle of least privilege. No method of transmission over the internet is completely secure, but we work hard to protect your information.

10. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when it was last changed. Material changes will be reflected on this page.