Privacy policy

What personal information Nebula Design collects through nebula.design, why, how long we keep it and what your rights are.

Who we are

Nebula IT Services Limited, trading as Nebula Design (company number 08323677, registered office Building 2 Riverside Court, Chipping Sodbury, Bristol, BS37 6JX), is the controller for the personal information described here. You can contact us about your data at [email protected].

What we collect and why

  • Enquiries. When you use our contact form we collect your first name, organisation, email address, what you need help with, your rough budget and timeframe, and your message. We use this to reply and to discuss working together. Our legal basis is our legitimate interest in answering enquiries, or taking steps at your request before entering into a contract.
  • Referrals. If you refer someone to us, we collect your name, organisation and email address, and the same details for the person you’re referring, plus the service involved. We use them to follow up the referral. Please only refer people who are happy for you to share their details.
  • Funding Finder. If you ask for funding results by email, we collect your email address to send them. We only use it to send your results and don’t add it to any mailing list.
  • Analytics. If you choose “Opt in” in our cookie banner, Google Analytics collects information about how you use the site, such as pages visited and your device type. Our legal basis is your consent, which you can withdraw at any time. See our cookie policy.
  • Your cookie choice. We keep a record of your cookie choice (a random ID, the date, what you chose and the page you were on) so we can show we asked properly. We don’t store your IP address with it.
  • Accessibility tools. Our accessibility toolbar can count which features are used, as anonymous totals. It only sets a cookie if you’ve opted in to analytics.
  • Payments. Our donation and payment forms are handled by Stripe, which processes your payment details under its own privacy policy. We don’t see or store your full card details.

Who we share it with

We don’t sell your information. We use a small number of service providers who process it for us:

  • Our website host, Krystal Hosting, on servers in the UK.
  • Cloudflare, which protects and speeds up the site.
  • Brevo, which sends the emails our website generates.
  • Google, for Google Analytics (only if you opt in).
  • Stripe, for payments.

Some of these providers may process data outside the UK. Where they do, they’re covered by UK adequacy regulations or the UK’s International Data Transfer Addendum.

How long we keep it

  • Enquiries and referrals: 2 years after our last contact, or longer if you become a client.
  • Funding Finder emails: 12 months.
  • Cookie choice records: 18 months.
  • Google Analytics data: 14 months.

Your rights

You can ask us for a copy of your information, ask us to correct it or delete it, object to how we use it, or ask us to restrict it. Where we rely on your consent, you can withdraw it at any time. Email [email protected] and we’ll reply within one month.

If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk.

Last updated: 19 October 2026.