Privacy Notice
This notice explains what personal data NELVIO collects when you visit nelvio.co.uk, how we use it, and your rights under UK data protection law. We've kept it short and plain-English.
Who we are
NELVIO is the Data Controller for personal data collected through this website. We're a UK-based email marketing agency. Contact: hello@nelvio.co.uk.
What we collect
Just visiting this website causes some data to be logged automatically by our hosting provider:
- IP address: the public address of the device you're using to connect
- Browser & device info: user agent string, operating system, screen size
- Pages viewed & timestamps: what you looked at and when
- Referrer: the previous URL that brought you here, if any
If you fill out the contact form, we also collect what you type into it:
- Your name and email address
- Your brand name and business type
- Your current email platform
- The message you send us
Why we collect it
- Hosting logs (IP, browser, pages): security, abuse prevention, and basic performance monitoring. Legal basis: legitimate interests.
- Contact form data: to respond to your enquiry and, if you become a client, to deliver our services. Legal basis: pre-contract steps at your request.
- Aggregate analytics (if enabled): to understand which pages people read, in aggregate. Legal basis: consent, where consent is required.
We do not sell personal data, ever. We do not run advertising trackers on this website.
Cookies
This website uses a minimal set of cookies:
- Strictly necessary: session and security cookies needed for the site to function. These don't require consent under PECR.
- Analytics (if enabled): we may add a privacy-friendly analytics tool such as Plausible or Fathom which doesn't use cross-site cookies. We will update this notice and prompt for consent if we add anything that requires it.
You can clear or block cookies in your browser settings at any time.
Sharing & storage
The data above is processed by a small number of trusted services we use to run the site:
- Web hosting provider (e.g. Netlify, Cloudflare): logs IP addresses and serves the site.
- Email provider (e.g. Google Workspace): receives contact form messages and stores them in our inbox.
- Form handler (e.g. Formspree, Netlify Forms): passes the form contents through to us.
We keep data only as long as we need it:
- Hosting logs: typically rotated within 30 days by the provider
- Enquiry data: up to 12 months after last contact, then deleted
- Client records: for the engagement plus 6 years (required for UK accounting law)
Your rights
Under UK GDPR you have the right to ask us to:
- Access a copy of the personal data we hold about you
- Rectify anything that's inaccurate
- Erase your data (subject to legal exceptions like tax records)
- Restrict or object to processing in certain cases
- Withdraw consent at any time, where consent is the legal basis
- Lodge a complaint with the UK Information Commissioner's Office at ico.org.uk
To make any of these requests, email hello@nelvio.co.uk. We respond within 30 days.
Changes & contact
We may update this notice from time to time. The current version date is shown at the top of this page. Anything we hold for clients (e.g. subscriber data inside Klaviyo) is covered by a separate Data Processing Agreement which we sign alongside any Statement of Work.
Questions or requests: hello@nelvio.co.uk.
This is a starter template that's roughly the right shape for a UK marketing website. Before you rely on it commercially, please get a qualified data-protection specialist to review and tailor the specifics (your registered company name and number, your exact processors, your retention periods).