Privacy Policy

Last Updated: 16 June 2025

This Privacy Policy explains how SENDNEST LIMITED collects, uses, stores, shares, and protects personal data when you visit https://sendnest.live, use our services, communicate with us, or otherwise interact with our business. We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection legislation in the United Kingdom.

By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use our website or services. For questions regarding this policy, contact us at leader@sendnest.live or +44 7250 224488.

1. Data Controller Information

The data controller responsible for your personal data is SENDNEST LIMITED, registered in England and Wales, with its principal place of business at 59 Garth Road Hilperton, TROWBRIDGE, BA14 7GP United Kingdom. As the data controller, we determine the purposes and means of processing personal data collected through our website and service delivery activities.

You may contact our data protection enquiries team at leader@sendnest.live or by post at 59 Garth Road Hilperton, TROWBRIDGE, BA14 7GP United Kingdom. We aim to respond to all data protection enquiries within thirty calendar days, in accordance with statutory requirements under UK data protection law.

2. Personal Data We Collect

We collect personal data through various channels depending on how you interact with our business. The categories of personal data we may collect include identification and contact information such as your full name, email address, telephone number, job title, company name, and business address. We collect this information when you submit an alignment request through our contact form, correspond with us via email or telephone, enter into a service agreement, or attend meetings and discovery sessions.

Technical data collected automatically when you visit our website includes your IP address, browser type and version, operating system, device identifiers, referral source, pages visited, time and date of visits, time spent on pages, and other diagnostic data. This information is collected through cookies, server logs, and similar technologies as described in our Cookie Policy.

When you engage our computer systems design, software development, or IT consulting services, we may process project-related data including system specifications, business requirements, technical documentation, access credentials provided for integration purposes, communications relating to project delivery, and feedback on completed work. We may also process financial data including billing addresses, payment records, and invoice details necessary for contractual performance.

If you apply for employment or contractor positions with SENDNEST LIMITED, we may collect curriculum vitae details, employment history, qualifications, references, and information provided during the recruitment process. We do not routinely collect special category data such as health information, racial or ethnic origin, political opinions, religious beliefs, or biometric data unless specifically required for a legitimate purpose and with appropriate legal basis.

3. How We Collect Personal Data

We collect personal data through direct interactions when you complete forms on our website, send us emails, call our office, meet with our team, sign contracts, or provide information during service delivery. We collect data through automated technologies including cookies and analytics tools when you browse https://sendnest.live. We may receive data from third parties including business partners, referral sources, publicly available registers such as Companies House, and professional networking platforms where you have chosen to share your information.

4. Purposes and Legal Bases for Processing

We process personal data only where we have a valid legal basis under UK GDPR. The primary purposes and corresponding legal bases for our processing activities are as follows.

4.1 Contract Performance

We process personal data necessary to perform contracts with our clients, including delivering computer systems design services, custom software development, systems integration, cloud computing solutions, cybersecurity services, and related professional technical services. This includes processing contact details for project communication, technical data for system development, and financial data for invoicing and payment.

4.2 Legitimate Interests

We process personal data based on our legitimate interests in operating and improving our business, which include responding to alignment requests and enquiries, marketing our services to existing clients and prospects who have expressed interest, maintaining website security and preventing fraud, analysing website usage to improve user experience, and managing our business relationships. Where we rely on legitimate interests, we balance our interests against your rights and freedoms and implement appropriate safeguards.

4.3 Legal Obligation

We process personal data where necessary to comply with legal obligations including tax and accounting requirements under UK law, responding to lawful requests from regulatory authorities, maintaining records required by employment legislation, and fulfilling data protection obligations including responding to data subject access requests.

4.4 Consent

Where required by law, we obtain your consent before processing personal data for specific purposes such as sending marketing communications to individuals who are not existing clients, placing non-essential cookies on your device, or processing special category data. You may withdraw consent at any time by contacting us at leader@sendnest.live, without affecting the lawfulness of processing based on consent before its withdrawal.

5. How We Use Personal Data

To respond to alignment requests, enquiries, and support communications submitted through our website or other channels
To deliver computer systems design, software development, IT consulting, and related professional services under contract
To manage client relationships, project delivery, and ongoing support agreements
To process payments, issue invoices, and maintain financial records
To improve our website, services, and client experience through analytics and feedback
To send service-related communications including project updates, security notices, and policy changes
To send marketing communications about our services where permitted by law
To comply with legal and regulatory obligations and protect our legal rights
To prevent fraud, unauthorised access, and security incidents affecting our systems and client data
To manage recruitment and employment relationships

6. Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share personal data with trusted service providers who assist us in operating our business, including cloud hosting providers, email service providers, payment processors, accounting software providers, analytics platforms, and professional advisers such as solicitors and accountants. All third-party processors are bound by contractual obligations requiring them to process personal data only on our instructions and implement appropriate security measures.

We may disclose personal data where required by law, regulation, court order, or governmental authority. We may share data in connection with a business transfer such as a merger, acquisition, or sale of assets, in which case the receiving entity will be bound by equivalent data protection obligations. Where we engage sub-processors for client project delivery, such as cloud infrastructure providers for hosted solutions, we ensure appropriate data processing agreements are in place.

7. International Data Transfers

SENDNEST LIMITED is based in the United Kingdom. While we primarily process personal data within the UK and European Economic Area, some of our service providers may process data in countries outside the UK. Where international transfers occur, we implement appropriate safeguards including Standard Contractual Clauses approved by the UK Information Commissioner's Office, adequacy decisions, or other mechanisms recognised under UK data protection law to ensure your personal data receives an equivalent level of protection.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements. Contact form submissions and enquiry records are retained for three years from the date of last communication unless a business relationship is established. Client project data is retained for the duration of the contract plus seven years to comply with limitation periods under UK contract law and tax regulations.

Financial records including invoices and payment data are retained for six years in accordance with HM Revenue and Customs requirements. Website analytics data is typically retained for twenty-six months. Employment records are retained in accordance with UK employment legislation. When personal data is no longer required, we securely delete or anonymise it using industry-standard methods.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit using TLS protocols, access controls limiting data access to authorised personnel, regular security assessments of our systems and processes, secure development practices for software we build and maintain, incident response procedures for data breaches, and staff training on data protection and information security.

While we take reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents in accordance with our legal obligations including notification to the Information Commissioner's Office and affected individuals where required.

10. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights regarding your personal data, subject to certain exceptions and limitations.

Right of access: You may request a copy of the personal data we hold about you
Right to rectification: You may request correction of inaccurate or incomplete personal data
Right to erasure: You may request deletion of your personal data in certain circumstances
Right to restrict processing: You may request that we limit how we use your personal data
Right to data portability: You may request your data in a structured, machine-readable format
Right to object: You may object to processing based on legitimate interests or for direct marketing
Rights related to automated decision-making: You have rights regarding solely automated decisions with legal effects
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at leader@sendnest.live or write to 59 Garth Road Hilperton, TROWBRIDGE, BA14 7GP United Kingdom. We will respond within one month, which may be extended by two further months for complex requests. We may need to verify your identity before processing your request. You also have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk if you believe your data protection rights have been violated.

11. Children's Privacy

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of eighteen. If we become aware that we have collected personal data from a child without appropriate parental consent, we will take steps to delete that information promptly.

12. Third-Party Links

Our website may contain links to third-party websites including Google Maps and professional networking platforms. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. The updated version will be posted on this page with a revised date. Material changes will be communicated through our website or direct notification where appropriate. We encourage you to review this policy regularly.

14. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact SENDNEST LIMITED at leader@sendnest.live, +44 7250 224488, or 59 Garth Road Hilperton, TROWBRIDGE, BA14 7GP United Kingdom.

Additional Data Processing Information

In the course of delivering professional scientific and technical services, SENDNEST LIMITED may process additional categories of data specific to client projects. This may include source code repositories, database schemas, API specifications, network topology diagrams, security assessment reports, and system configuration data. Such data is processed solely for the purpose of fulfilling our contractual obligations and is subject to the same security and retention standards described in this policy. Client data processed during engagements remains the property of the client, and we act as a data processor where we handle personal data on behalf of our clients in accordance with applicable data processing agreements.