arrow_back Back to home

Privacy Policy

Last updated 8 September 2026

1. Scope

This policy covers the personal information NexGen Digital Marketing ("we", "us") collects through this website, our marketing, and the services we provide. It does not cover third-party sites we link to.

2. What We Collect

Information you give us

  • Name, business name, email, phone, job title
  • Website URL, industry, current marketing channels, budget range, and the goals you describe
  • Emails, form submissions, call notes, and meeting recordings where you have consented
  • Billing name, address, and tax details. Card details go directly to our payment provider — we do not store card numbers

Information collected automatically

  • IP address, browser, operating system, device type
  • Pages viewed, time on page, clicks, referring URL
  • UTM parameters and click IDs such as gclid and fbclid
  • City-level location derived from IP. We do not collect GPS location

Information from third parties

We may receive data about you from advertising platforms, business databases, enrichment providers, and referral partners, and combine it with what you have given us.

3. How We Use It

  • Prepare and deliver your audit, run campaigns, and report on performance
  • Respond to enquiries and schedule calls
  • Understand how the site is used and fix problems
  • Send marketing where you have opted in — unsubscribe any time
  • Measure our own ad performance and build remarketing audiences
  • Invoice, take payment, and keep business records
  • Meet legal obligations, prevent fraud, and enforce our agreements

Where GDPR or similar law applies, our legal bases are: performance of a contract, our legitimate interests in running and promoting the business, your consent where required, and legal obligation.

4. Cookies and Advertising Platforms

We use cookies, pixels, and local storage in four categories: strictly necessary, preference, analytics, and advertising. You can control them in your browser and through our cookie banner where shown. Blocking some will affect how the site works.

Third-party platforms on this site may include Google Analytics, Google Ads, Google Tag Manager, the Meta Pixel, the LinkedIn Insight Tag, Microsoft Advertising, and our call tracking, scheduling, and CRM tools. Each processes data under its own policy. You can opt out of personalised ads in your Google and Meta ad settings.

There is no common standard for the browser "Do Not Track" signal, so this site does not respond to it.

5. Who We Share It With

We do not sell your personal information. We share it with:

  • Service providers — hosting, email, CRM, analytics, scheduling, and payments — who act on our instructions under contract
  • Advertising platforms, for measurement and audience building
  • Accountants, insurers, and lawyers where reasonably necessary
  • An acquirer, in a merger or sale of assets, under confidentiality protections
  • Authorities, where required by law or to protect our rights or safety

Some laws define "sale" or "sharing" broadly enough to cover advertising cookies. Where that applies to you, use the opt-outs in sections 4 and 7.

6. Client Data We Process for You

Clients often give us access to ad accounts, analytics, and CRM records containing their own customers' data. For that data we act as a processor and the client remains the controller. We process it only on the client's instructions, never for our own marketing, and delete or return it at the end of the engagement. Clients are responsible for having a lawful basis and the necessary notices in place.

7. Retention

  • Enquiries that do not become clients — 24 months from last contact
  • Client records — the engagement term plus up to 7 years for tax and accounting
  • Access to client platforms — revoked at the end of the engagement or on request
  • Website analytics — per each platform's retention setting, typically 14–26 months
  • Marketing lists — until you unsubscribe, after which we keep a suppression record so we do not contact you again

8. Security

We use encryption in transit, need-to-know access controls, multi-factor authentication on business accounts, and vendor vetting. No system is completely secure, and we cannot guarantee absolute security. If a breach affects your data we will notify you and the relevant authorities where the law requires it.

9. Your Rights

Depending on where you live you may have the right to access, correct, delete, or port your data; to object to or restrict processing; to withdraw consent; and to opt out of targeted advertising. We will not discriminate against you for exercising any of them.

Email us at the address in section 13. We may need to verify your identity first, and will respond within the timeframe the law requires. In the UK or EEA you can also complain to your local data protection authority.

10. International Transfers

We and our providers may process data outside your country, including in the United States. For transfers out of the UK or EEA we rely on an adequacy decision or on Standard Contractual Clauses with supplementary measures where needed.

11. Children

Our services are for businesses and are not directed at anyone under 16. We do not knowingly collect their data. Contact us if you believe we have and we will delete it.

12. Changes

We may update this policy. The date at the top will change, and for material updates we will give more prominent notice. Continued use after an update means you accept it.

13. Contact