Privacy Policy

Who we are

Nebula Alpha Ltd is responsible for the personal data collected through this website and is registered with the Information Commissioner's Office (ICO).

For any questions about how we handle your data, contact us at [email protected]

What data we collect

When you submit the mandate enquiry form on our website, we collect the following information:

• Your name
• Your email address
• Your organisation name
• Your role or title
• The topic of your enquiry
• A summary of your commercial situation

We do not use analytics cookies, tracking pixels, or any third party advertising technology on this website.

Why we collect it

We use your information solely to respond to your enquiry and to assess whether we can help with your commercial situation. The legal basis for this processing under the General Data Protection Regulation (GDPR) is legitimate interest (Article 6(1)(f)): you have contacted us with a business enquiry and we need your details to respond.

How we store and process it

Your enquiry is stored securely in a hosted database and sent to us by email so we can respond promptly. The website and database are hosted by our technology platform provider.

We take reasonable measures to protect your data, including encryption in transit and access controls on stored data.

How long we keep it

We retain enquiry data for as long as it is relevant to an active or potential commercial relationship. If we do not proceed with a mandate, we will delete your data within 12 months of your enquiry unless you ask us to keep it on file. Enquiries older than 12 months are removed automatically from our database.

Who we share it with

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data is shared only with our hosting and email platform provider as necessary to operate this website and deliver your enquiry to us.

Your rights

In line with the GDPR and applicable data protection laws, you have the right to:

• Request a copy of the personal data we hold about you
• Ask us to correct any inaccurate data
• Ask us to delete your data
• Object to our processing of your data
• Request that we restrict processing of your data

To exercise any of these rights, email [email protected] and we will respond within 30 days.

International transfers

We work with clients internationally, so your data may be processed in more than one country. Where data is transferred across borders, appropriate safeguards are in place in line with the GDPR, including the data processing agreements of our platform provider.

Complaints

If you are unhappy with how we have handled your data, please contact us first so we can put it right. You also have the right to complain to the data protection supervisory authority in the country where you live or work.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with the updated date shown above.