Privacy Policy

Nuvox Digital Ltd is a digital studio based in England, building websites, web applications, and digital products for clients across the UK and internationally.

For data protection purposes, Nuvox Digital Ltd is the data controller for personal information collected through this website. You can contact us at any time at hello@nuvoxdigital.com.

We collect only what we need. Specifically:

• —Contact form: your name, email address, company name, and message
• —Estimator tool: project requirements and preferences you enter — we do not store personally identifiable information from estimates
• —Analytics: anonymised page view data via Vercel Analytics — no cookies are set, no IP addresses stored
• —Email correspondence: any messages you send us directly

We do not collect payment card details. Any future payment processing will be handled entirely by a PCI-DSS compliant third-party provider.

Under UK GDPR, we must have a lawful basis for processing your personal data. Here is what we process and why:

We keep your data only for as long as necessary:

• —Contact form submissions: deleted after 12 months if no project begins
• —Client project data: retained for 6 years after project completion (required for tax and legal purposes)
• —Invoices and financial records: 6 years, as required by HMRC
• —Anonymised analytics data: retained indefinitely (contains no personal information)

When data is no longer needed, it is securely deleted.

We use a small number of trusted third-party services to operate our website and deliver our services. Each processes only the data necessary for their function:

All processors are contractually bound to protect your data and may not use it for their own purposes. We do not sell your data to any third party.

Some of our third-party processors (including Vercel, Resend, and Anthropic) are based in the United States. Where data is transferred outside the UK, we ensure it is protected by appropriate safeguards — including the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms — as required by UK GDPR.

Under UK GDPR, you have the following rights regarding your personal data:

• —Right of access — you can request a copy of the data we hold about you
• —Right to rectification — you can ask us to correct inaccurate data
• —Right to erasure — you can ask us to delete your data where we have no ongoing legal basis to hold it
• —Right to restrict processing — you can ask us to limit how we use your data
• —Right to data portability — you can request your data in a commonly used format
• —Right to object — you can object to processing based on legitimate interests

To exercise any of these rights, email us at hello@nuvoxdigital.com. We will respond within 30 days. We may need to verify your identity before processing a request.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk.

We use essential cookies only. For full details, please read our Cookie Policy.

We may update this policy when our practices change or when the law requires it. We will update the “Last updated” date at the top of this page. For significant changes that affect how we use your data, we will notify active clients directly. Continued use of our website after any update constitutes acceptance of the revised policy.