Privacy Policy

01 Who We Are

Nexora UK Ltd ("Nexora UK", "we", "us" or "our") is a digital growth agency registered in England, with its office at 5 Brayford Sq, Stepney Green, London E1 0SG, United Kingdom. We provide digital marketing, SEO, social media management, graphic design, web design and e-commerce services to clients worldwide.

We are the data controller of the personal information collected through this website, and we are committed to protecting your privacy in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have over it. By using our website, you agree to the practices described here.

02 Information We Collect

We only collect information that helps us respond to you and deliver our services. This includes:

Contact details — your name, email address and phone number when you fill in our contact or proposal form, subscribe to our newsletter, or contact us directly.
Project information — details about your business, website and goals that you choose to share with us when requesting a proposal.
Communication records — emails, messages and call notes exchanged between you and our team.
Technical data — IP address, browser type, device type, pages visited and time spent on the site, collected automatically through standard analytics tools.

We do not knowingly collect data from children under 16, and we do not collect special-category (sensitive) data through this website.

03 How We Use Your Information

We use your personal data only where we have a lawful basis to do so. Specifically, we use it to:

Respond to your enquiries and prepare the free proposal you requested (performance of a contract / taking steps at your request).
Deliver, manage and invoice the services you engage us for (performance of a contract).
Send you our newsletter and growth tips — only if you subscribed — which you can opt out of at any time (consent).
Improve our website, services and user experience through analytics (legitimate interests).
Comply with legal, accounting and regulatory obligations (legal obligation).

We will never sell, rent or trade your personal information to third parties for marketing purposes.

04 Cookies & Analytics

Our website uses a small number of cookies and similar technologies to keep the site working smoothly and to understand how visitors use it.

Essential cookies — required for the website to function correctly. These cannot be switched off.
Analytics cookies — help us understand which pages are most useful, so we can keep improving. This data is aggregated and does not directly identify you.

You can control or delete cookies at any time through your browser settings. Blocking some cookies may affect how parts of the site work.

05 How We Share Your Information

We only share your information where it is necessary to run our business, and always with appropriate safeguards:

Service providers — trusted tools we use to operate (hosting, email, analytics and project management platforms), bound by their own strict data protection obligations.
Professional advisers — accountants, insurers or lawyers where reasonably necessary.
Authorities — where we are required to do so by law or court order.

Where any provider processes data outside the UK, we make sure equivalent protections are in place (such as adequacy decisions or standard contractual clauses).

06 Data Security & Retention

We take reasonable technical and organisational measures to protect your data — including secure hosting, encrypted connections (HTTPS), access controls and staff confidentiality.

We keep personal data only for as long as we need it:

Enquiries — up to 12 months after our last contact, unless you become a client.
Client records — for the duration of our engagement and up to 6 years afterwards, to meet legal and accounting requirements.
Newsletter data — until you unsubscribe.

When data is no longer needed, it is securely deleted or anonymised.

07 Your Rights

Under UK GDPR, you have the right to:

Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate or incomplete data.
Erasure — ask us to delete your data ("right to be forgotten").
Restriction & objection — limit or object to how we process your data, including direct marketing.
Portability — receive your data in a portable, machine-readable format.
Withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, simply contact us using the details below — we will respond within one month. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO).

08 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The latest version will always be published on this page with an updated "last revised" date. Significant changes will be highlighted on our website.