Privacy Policy

1. Who We Are

NextIce Digital Agency Ltd ("NextIce", "we", "us", "our") is a digital marketing and web development company registered in England and Wales. We operate the website nextice.co.uk and provide the following services:

• Search Engine Optimisation (SEO) — on-page, off-page and technical SEO
• Google Ads management (Search, Display, Shopping, YouTube, Remarketing)
• Facebook & Instagram Ads management
• LinkedIn Advertising & B2B marketing
• Web development using HTML, CSS, JavaScript, Bootstrap, PHP, Laravel and WordPress
• eCommerce development (WooCommerce, custom solutions)
• Social media marketing and content strategy
• Pay-per-click (PPC) management and conversion rate optimisation (CRO)

Data Controller Contact:
Email: info@nextice.co.uk
Country: United Kingdom

2. Data We Collect

2.1 Information You Provide Directly

• Full name, email address, phone number
• Company name and website URL
• Project details, service requirements and messages sent via our contact form
• Payment information (processed securely via third-party payment providers — we do not store card details)

2.2 Information Collected Automatically

• IP address, browser type and operating system
• Pages visited, time spent on site and referring URLs
• Device type (desktop, mobile, tablet)
• Cookie data (see Section 5 for full details)

2.3 Information from Third Parties

• Analytics data from Google Analytics 4 (GA4)
• Ad performance data from Google Ads, Meta Ads and LinkedIn
• Data provided when you interact with our social media pages

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to enquiries and provide quotations for our SEO, Google Ads, Facebook Ads, LinkedIn Ads, web development and digital marketing services
• To deliver and manage contracted services including campaign management, website development and reporting
• To send service-related communications and project updates
• To send marketing emails (only with your explicit consent; you may unsubscribe at any time)
• To improve our website performance and user experience
• To comply with UK legal and regulatory obligations
• To display targeted advertising through Google AdSense (in compliance with Google's policies)
• To process payments for our digital marketing and development services

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your data under the following lawful bases:

• Contract: Processing necessary to fulfil our service agreements for SEO, advertising and web development
• Legitimate Interest: Improving our services, website analytics, fraud prevention and business communications
• Consent: Marketing emails, non-essential cookies and Google AdSense advertising
• Legal Obligation: Compliance with UK laws, tax records and regulatory requirements

5. Cookies & Tracking Technologies

We use cookies and similar tracking technologies on nextice.co.uk. These include:

• Essential Cookies: Required for the website to function correctly
• Analytics Cookies: Google Analytics 4 (GA4) to understand site usage
• Advertising Cookies: Google AdSense, Google Ads and Meta Pixel for ad personalisation and campaign tracking
• Functional Cookies: To remember your preferences (e.g. cookie consent)

You can manage your cookie preferences at any time. Please see our full Cookie Policy for details.

6. Third-Party Services

We use the following third-party services which may process your data:

• Google Analytics 4 — Website analytics (Google LLC, USA)
• Google Ads — PPC advertising and remarketing (Google LLC, USA)
• Google AdSense — Display advertising (Google LLC, USA)
• Meta (Facebook) — Facebook and Instagram advertising (Meta Platforms, USA)
• LinkedIn — B2B advertising and lead generation (LinkedIn Corp, USA)
• WhatsApp Business — Client communications
• Hosting Provider — UK/EU-based servers

Each third party has its own privacy policy. We encourage you to review those policies. Where data is transferred outside the UK/EEA, appropriate safeguards (Standard Contractual Clauses) are in place.

7. Data Sharing & International Transfers

We do not sell, rent or trade your personal data to third parties. We may share your data only:

• With service providers acting as data processors on our behalf (under GDPR-compliant agreements)
• When required by UK law, court order or regulatory authority
• In the event of a business merger or acquisition (you will be notified in advance)

Some third-party platforms (Google, Meta, LinkedIn) may transfer data to the USA. These transfers are protected by appropriate legal mechanisms including UK adequacy decisions and Standard Contractual Clauses.

8. Data Retention

• Enquiry & contact form data: Retained for 3 years after last contact
• Client project data: Retained for 7 years for legal and accounting purposes
• Analytics data: As set by Google Analytics retention settings (default 14 months)
• Marketing consent records: Retained until you withdraw consent

After the applicable retention period, data is securely deleted or anonymised.

9. Your Rights Under UK GDPR

As a UK data subject, you have the following rights:

• Right to Access: Request a copy of your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Request that we limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction, including:

• SSL/TLS encryption on all data transmissions (HTTPS)
• Secure, access-controlled servers
• Regular security audits and vulnerability assessments
• Staff training on data protection best practices
• Principle of least privilege for data access

In the event of a data breach that poses a risk to your rights, we will notify you and the ICO within 72 hours as required by UK GDPR.

11. Children's Privacy

Our digital marketing and web development services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child, please contact us immediately at info@nextice.co.uk and we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technologies or legal requirements. We will notify you of significant changes by updating the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website after changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, please contact our Data Controller: