Privacy notice
What personal data we collect, why, and what you can do about it. In plain English.
Last updated: 31 May 2026
This notice explains what personal data Nexlane collects, why, and what you can do about it. We have written it in plain English on purpose.
Who we are
Nexlane is a UK workflow consultancy and the data controller for the personal data described here. If you need our registered details for a formal request, ask through our contact page and we will provide them.
What we collect, and when
- When you use our contact form. Your name, business name, email address, phone number if you give it, team size, and whatever you write in the message.
- When you book a call. Bookings are handled by Calendly, which collects your name, email and the time you choose, and shares the booking with us.
- When you email us. Your email address and the contents of your message, held in our Microsoft 365 inbox.
- If you ask to hear from us. If you opt in to occasional updates, we keep your name and email to send them, using Brevo.
- Automatically, for security. Our host, Netlify, keeps standard server logs, including IP addresses, to run and protect the site.
We do not use advertising or analytics tracking on this site. See our cookies page for the detail.
Why we use it
- To reply to you and discuss working together. Our lawful basis is our legitimate interest in responding to enquiries, and taking steps towards a contract at your request.
- To send updates you have asked for. Our lawful basis is your consent, which you can withdraw at any time.
- To keep the site secure and working. Our lawful basis is our legitimate interest in running a safe, reliable website.
Who we share it with
We do not sell your data. We use a small number of trusted providers to run the business, and they only process your data on our instructions:
- Netlify, for hosting the website and handling contact form submissions.
- Calendly, for scheduling calls.
- Microsoft 365, for our email.
- Brevo, for sending any updates you opt in to.
- Google Fonts, which serves the site's fonts. Loading a page sends your IP address to Google so the fonts can be delivered.
How long we keep it
We keep enquiry details only as long as we need them. If we do not end up working together, we will normally delete your enquiry within about 24 months. If we do work together, we keep what we need for the length of the project and for as long as the law requires afterwards. You can ask us to delete your data sooner.
Where your data is held
Some of our providers operate outside the UK. Where data is transferred abroad, it is protected by appropriate safeguards, such as the UK's international data transfer arrangements.
Your rights
Under UK data protection law you can ask us to:
- tell you what data we hold about you, and give you a copy
- correct anything that is wrong
- delete your data
- restrict or object to how we use it
- provide your data in a portable format
- stop sending you updates, by withdrawing consent at any time
To do any of these, get in touch through our contact page. We will not charge you, and we will respond within one month.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
Changes to this notice
If we change how we handle data, we will update this page and the date at the top.
Contact
For anything about your data, use our contact page and mark it for the attention of data protection.