Here at nymbl, the security of your data is our priority. We respect your privacy and are committed to handling your personal information responsibly, transparently and in accordance with data protection legislation.
Information we hold
We collect and retain information necessary to maintain a professional relationship with our clients and contacts. This may include:
- Contact name
- Company name
- Postal address
- Email address
- Telephone number
- Social media handles
This information is typically collected when you enquire about our services or become a client.
How we use the information we hold
We use your personal data to:
- Communicate with you about projects, proposals or services we are providing
- Respond to enquiries or requests
- Share specific service updates or information that we believe may be of legitimate interest to you
We do not use your data for general or unsolicited marketing without your explicit consent.
Cookies and analytics
With your consent, we use Google Analytics to understand how visitors use our website and to improve its content and performance. Analytics cookies are optional and are not placed until you choose to accept them.
You can reject analytics cookies or change your choice at any time using Cookie settings in the site footer. We do not use analytics for advertising or to create marketing profiles.
How we use AI and your data
We use a small number of business-grade AI tools, such as our ChatGPT Business account and Google Workspace Gemini, to assist with research, summarisation, ideation and concepts. Under the applicable business terms and our current account settings, submitted data is not used to train or improve the providers’ general models unless expressly permitted by us. All outputs are reviewed and approved by a senior member of the nymbl team before delivery.
If you prefer that we do not use AI in relation to your materials, you may inform us at any time and we will adapt our approach accordingly.
For more information, see our AI Policy, which outlines in more detail how we use AI in our work with clients.
Legal basis for processing personal data
Under the UK GDPR, we only process personal data where we have a legal basis to do so.
These bases may include:
- Consent — when you have opted in to receive specific communications
- Contractual necessity — where processing is required to fulfil a service agreement
- Legitimate interests — for example, keeping in touch with past clients or improving our services, provided such interests are not overridden by your rights
Protecting your personal information
All personal data is stored securely in password-protected systems. Access is restricted to authorised personnel only. Any processing of data using AI tools is carried out on secure platforms with privacy controls enabled.
International data transfers
Some of the tools and services we use, including AI platforms and cloud-based systems, may store or process data outside the UK. When this happens, we make sure your personal information is still protected.
We only work with providers who meet recognised data protection standards. Where required, we use legally approved safeguards, such as standard contract terms, to ensure your data stays secure and is handled in line with UK privacy laws.
Data sharing
We do not share your personal information with third parties for marketing or advertising purposes.
We may share limited, relevant information with trusted suppliers — for example, delivery names and addresses when sending hardware materials. These suppliers are required to handle your data securely and only for the purpose specified.
Data retention
We retain personal data for as long as is necessary to maintain a business relationship, provide services or comply with legal or financial obligations.
If you request that we delete your data, we will do so unless there is a legitimate or legal reason for us to retain it.
Your rights
You have the right to:
- Request access to the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure of your data, under certain conditions
- Object to or restrict specific types of processing
- Request transfer of your data (data portability) in some cases
To exercise any of these rights, please contact us using the details provided below.
AI disclaimers and risk
While we use AI tools to support internal processes and enhance workflow, no final work is delivered to clients without human review and approval. AI tools may occasionally produce outputs that contain inaccuracies. We encourage all clients to review deliverables before publication, especially in technical or regulated contexts.
Changes to this policy
We review this privacy policy regularly to reflect evolving legal requirements and business practices. The latest version will always be available.
Contact
If you would like to request access to your data, exercise any of your rights, or have questions about how we handle your personal information, please contact:
Nymbl Ltd
26 Berkeley Square
Clifton
Bristol BS8 1HP
Email: privacy@nymbl.com