Privacy Policy

Last updated: 19 August 2026

1. Introduction

This privacy policy explains how NXTL ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit our website nxtl.co.uk ("the Website") or engage with our services.

We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Data Use and Access Act 2025, and the Privacy and Electronic Communications Regulations (PECR).

2. Data Controller

The data controller responsible for your personal data is:

NXTL
Company Number: SC876720
Registered Office: 78 Harburn Road, West Calder, Scotland, EH55 8AT
Email: contact@nxtl.co.uk

3. Information We Collect

3.1 Information You Provide

When you contact us via email or through our website, we may collect:

• Your name
• Email address
• Any other information you choose to include in your correspondence

3.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on the Website
• Referring website address

This information is only collected where you have provided consent through our cookie consent mechanism, except where strictly necessary for the operation of the Website.

4. Lawful Basis for Processing

We process your personal data on the following lawful bases under Article 6 of the UK GDPR:

• Consent – Where you have given clear consent for us to process your personal data for a specific purpose, such as setting non-essential cookies.
• Legitimate Interests – Where processing is necessary for our legitimate interests, such as responding to your enquiries, provided these are not overridden by your rights and freedoms.
• Legal Obligation – Where processing is necessary for compliance with a legal obligation to which we are subject.

5. How We Use Your Information

We use your personal data to:

• Respond to your enquiries and communications
• Provide and improve our services
• Maintain and improve the Website
• Comply with legal obligations

6. Cookies

Our website uses cookies. A cookie is a small text file placed on your device when you visit our website. We use only strictly necessary cookies and, with your consent, functional cookies to remember your preferences.

For full details about the cookies we use and how to manage them, please see our Cookie Policy.

7. Data Sharing and Third Parties

We do not sell, trade, or rent your personal data to third parties. We may share your data with:

• Hosting providers – Our website is hosted by third-party providers who process data on our behalf and are bound by data processing agreements.
• Legal authorities – Where we are required to do so by law, regulation, or legal proceedings.

8. International Data Transfers

We endeavour to keep your personal data within the United Kingdom. Where it is necessary to transfer data outside the UK, we ensure that appropriate safeguards are in place, such as UK adequacy decisions or standard contractual clauses approved by the Information Commissioner's Office.

9. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy:

• Enquiry data – Retained for up to 2 years after the last correspondence, unless a longer period is required by law or for the establishment, exercise, or defence of legal claims.
• Website usage data – Retained for up to 12 months.
• Cookie consent records – Retained for 6 months.

10. Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

• Right of access – You can request a copy of the personal data we hold about you (a Subject Access Request).
• Right to rectification – You can ask us to correct inaccurate or incomplete data.
• Right to erasure – You can ask us to delete your personal data in certain circumstances.
• Right to restrict processing – You can ask us to limit how we use your data.
• Right to data portability – You can request your data in a structured, commonly used, machine-readable format.
• Right to object – You can object to our processing of your personal data based on legitimate interests.
• Rights related to automated decision-making – You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you.

To exercise any of these rights, please contact us at contact@nxtl.co.uk.

11. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint. We encourage you to contact us first so that we can attempt to resolve the matter directly.

Complaining to NXTL: Please email us at contact@nxtl.co.uk with details of your complaint. We will acknowledge your complaint and aim to provide a substantive response within 45 days. Where your complaint is complex, we may extend this period by a further 45 days, and we will inform you of this extension and the reasons for it.

Complaining to the ICO: You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at any time:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Telephone: 0303 123 1113

12. Children's Data

Our services are not directed at individuals under the age of 13. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly.

13. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.