Last updated: 4 November 2026
This notice explains how NIMBLEREACH LTD uses personal information when you visit our website, contact us or discuss our services. It covers our own business contacts and website visitors. Where we handle personal information on a client’s instructions while delivering services, the client’s privacy information and our separate data-processing agreement apply to that work.
1. Who we are and how to contact us
NIMBLEREACH LTD, trading as NimbleReach, is the controller responsible for the personal information described in this notice.
- Company number: 17551378
- Registered in: England and Wales
- Registered office: 51 The Hedgerows, Stevenage, Hertfordshire, SG2 7DQ
- Privacy and general enquiries: hello@nimblereach.co.uk
Please contact Ian Piddock at this email address if you have a question about how we use your information or want to exercise your rights.
2. Information we collect
Information you give us: your name, email address, telephone number if supplied, business or venue name, job role, the services you are interested in and the information you include in emails or conversations. If you become a client, this may also include correspondence, agreed work, billing details and transaction records. Please avoid sending sensitive personal information unless we have agreed a suitable way to handle it.
Technical information: our website, hosting and security providers may process information such as your IP address, browser and device details, pages requested, request times and security events to deliver and protect the service.
Information from others: a colleague, business contact or referrer may introduce you or supply your business contact details. We use this information for the introduction or relevant business discussion and explain its source when we contact you, where required.
3. Why we use information and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries, understanding requirements and arranging discussions | Our legitimate interests in responding to business enquiries and providing relevant information. Where you are personally entering a contract with us, taking steps at your request before that contract. |
| Preparing proposals, delivering agreed services and managing client relationships | Performance of a contract where you are personally a party to it. For contacts acting for a company or other organisation, our legitimate interests in delivering and administering that business relationship. |
| Billing, accounting and keeping records required by law | Compliance with legal obligations, and our legitimate interests in administering payments and resolving queries where applicable. |
| Delivering and securing the website, preventing misuse and investigating technical problems | Our legitimate interests in maintaining a reliable, secure website and protecting visitors and our business. Separate rules also apply to cookies and similar technologies. |
| Handling complaints, rights requests and legal claims | Compliance with legal obligations where applicable, and our legitimate interests in resolving concerns and establishing, exercising or defending legal claims. |
Where we rely on legitimate interests, we consider the purpose, necessity and effect on your rights and expectations. You can ask us for more information about this assessment and object to processing on this basis.
You do not have to provide information to browse our website. If you do not supply the details needed to answer an enquiry or carry out agreed work, we may be unable to provide that response or service. We will explain any information required for a contract when we request it.
4. Enquiries and marketing
We use an enquiry to respond to your request and manage the resulting discussion. Sending an enquiry does not automatically subscribe you to a newsletter or promotional mailing list.
If we introduce a newsletter or a new direct-marketing programme, we will explain how it works and apply the relevant consent or other legal requirements before using your details for it. You can object to direct marketing at any time.
When you submit an enquiry form, its contents are sent to FormSubmit to process and forward to hello@nimblereach.co.uk. FormSubmit provides spam protection and may present a Google reCAPTCHA challenge on its own service. Its documentation states that it retains form submissions for 30 days. Our mailbox copy is handled through Microsoft 365 and retained according to the criteria below. You can also email us directly or use Microsoft Bookings.
When you book a meeting, Microsoft Bookings collects your name, email address, appointment choice and any additional details you provide, such as a phone number, address or notes. We use this information to arrange and manage the meeting, send confirmations or reminders and respond to your request. Microsoft processes the booking through our Microsoft 365 service. The enquiry and business-relationship lawful bases and retention criteria in this notice also apply to meeting bookings. Please provide only information relevant to the meeting.
5. Who receives information
Information may be handled by service providers supporting our business, including:
- FormSubmit, to process website enquiry submissions, filter spam and forward them to our inbox; see its privacy terms and submission retention information;
- Microsoft 365, for business email, Microsoft Bookings appointments and related business communications or documents where used;
- the OpenAI Sites hosting service and its infrastructure providers, to deliver and secure this website;
- Google, when your browser requests the Google Fonts currently used by the website;
- professional advisers such as accountants, insurers and legal advisers where their involvement is necessary; and
- public authorities or other recipients where disclosure is required by law or necessary in connection with legal claims.
Access is limited to what is appropriate for the service or purpose. Providers’ responsibilities depend on their role and applicable terms. We do not sell your personal information.
6. International processing
Some technology providers operate internationally, so information may be processed outside the UK. Where a transfer is subject to UK international-transfer requirements, an appropriate legal mechanism is needed, such as UK adequacy regulations or approved contractual safeguards, together with any required assessment and supplementary measures.
You can contact us for details of the arrangements relevant to your information and how to obtain information about applicable safeguards.
7. How long we keep information
We keep personal information for as long as it is needed for the purpose for which it was collected, taking account of legal requirements and relevant claims or disputes.
- Enquiries that do not become client work: we consider whether the discussion remains active, whether follow-up has been requested and whether the information is still useful for that enquiry. We delete or anonymise it when it is no longer needed.
- Client correspondence and project records: we consider the duration of the relationship, ongoing support, contractual responsibilities and the period for which records may be needed to resolve queries or claims.
- Accounting and tax records: we retain the relevant records for the periods required by applicable law.
- Technical and security information: retention depends on the operational or security purpose and the relevant provider’s arrangements. We do not keep it indefinitely merely because it is available.
Information subject to a legal obligation, dispute or legal hold may need to be kept longer.
8. Cookies, browser storage and external resources
The website currently uses a temporary sessionStorage entry named nimblereach-interest to carry your selected service to the enquiry page. It contains the service name, not the text you enter into a form. The site removes it after reading the selection on the enquiry page; otherwise browser session storage normally ends when the tab or session closes.
Our website code currently includes no advertising pixels or visitor-analytics scripts added by NimbleReach. The hosting platform uses Cloudflare security services. On the public domain we observed the __cf_bm security cookie, with an expiry of approximately 30 minutes. Hosting, sign-in and security services may also use other cookies or similar technologies. The cookies and similar technologies used by these services depend on the hosting and sign-in configuration; the absence of advertising scripts in our code does not mean the platform uses no cookies.
The website currently loads fonts from Google Fonts. This causes your browser to connect to Google, which receives technical request information such as your IP address. See Google’s information about privacy and Google Fonts.
If we introduce technologies requiring consent, we will provide the appropriate choices before using them. We will explain any applicable exception and objection mechanism where required. External websites linked from our pages have their own privacy arrangements.
9. Your rights
Depending on the circumstances, you may have rights to:
- access your personal information;
- correct inaccurate or incomplete information;
- ask for deletion or restriction of processing;
- object to processing based on legitimate interests;
- object to direct marketing;
- receive or transfer information where the portability right applies; and
- withdraw consent where processing relies on consent, without affecting the lawfulness of earlier processing.
These rights are subject to conditions and exceptions. Contact hello@nimblereach.co.uk to make a request. We may need to confirm your identity and will respond within the applicable legal time limits. Requests are normally free of charge.
We do not use the information covered by this notice to make solely automated decisions producing legal or similarly significant effects about you.
10. Concerns and complaints
Please contact us if you have concerns about our use of your information. You can also complain to the UK Information Commissioner’s Office. See ico.org.uk/make-a-complaint for its current contact and complaint arrangements.
11. Changes to this notice
We will update this notice when our processing or services change and display the latest revision date. Where required, we will bring significant changes to your attention directly.