Privacy Policy

PPC Nest ("we", "us", "our") is committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have.

For the purpose of applicable data protection laws, PPC Nest is the data controller in respect of personal data collected through this website and in the course of providing our services. Our contact details are set out in the Contact section below.

We may collect and process the following categories of personal data:

• Identity and contact data: name, email address, phone number, job title, and company name when you contact us, request a free audit, subscribe to updates, or enter into a client relationship.
• Engagement and communications data: content of enquiries, correspondence, and feedback you send us; call recordings or notes where applicable and with your knowledge.
• Technical and usage data: IP address, browser type and version, device information, time zone, and how you use our website (e.g. pages visited, time spent). We may collect this via cookies and similar technologies-see our Cookie Policy.
• Client and project data: where you are a client, we may hold contract details, billing information, and data necessary to deliver our services (e.g. account access details as agreed, performance data). We process such data in accordance with our contract and this policy.

We do not knowingly collect special categories of personal data (e.g. health, ethnicity) unless you voluntarily provide them and we have a lawful basis. We do not collect personal data from children under 16; if you believe we have received such data, please contact us so we can delete it.

We use your personal data only where we have a lawful basis, including:

• Contract: to perform our contract with you (e.g. delivering services, managing your account).
• Legitimate interests: to run and improve our business, website, and services; to respond to enquiries and provide the free audit or information you requested; to send relevant marketing (where permitted); to protect our rights and comply with legal obligations. We balance our interests against your rights and only use data where necessary.
• Consent: where we rely on consent (e.g. for certain marketing or optional communications), you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
• Legal obligation: to comply with applicable laws, regulations, or court orders.

We use your data to: respond to your enquiries and provide the free audit or other requested information; deliver and manage our services; send service-related and, where lawful, marketing communications; improve our website and user experience; analyse usage and trends; prevent fraud and ensure security; and comply with legal and regulatory requirements.

We do not sell your personal data. We may share your data with:

• Service providers: trusted partners who assist us with hosting, analytics, email delivery, customer support, or other operations, under strict confidentiality and data processing terms.
• Professional advisers: lawyers, accountants, or insurers where necessary for our legitimate business purposes.
• Regulators and authorities: when required by law or to protect our rights, safety, or property.

Where we transfer personal data outside the UK or European Economic Area, we ensure appropriate safeguards are in place (e.g. adequacy decisions, standard contractual clauses, or other approved mechanisms) in accordance with applicable data protection law.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods may include:

• Enquiry and audit-request data: typically up to 24 months from last contact, unless you become a client or we have a longer legal obligation.
• Client and contract data: for the duration of the relationship and for a period thereafter as required by law (e.g. 6–7 years for tax and legal claims).
• Technical and cookie data: as set out in our Cookie Policy or for the duration needed for analytics and security.

After the retention period, we securely delete or anonymise your data so it can no longer identify you.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including encryption where appropriate, access controls, and regular review of our practices. Despite our efforts, no method of transmission over the internet or electronic storage is completely secure; we cannot guarantee absolute security and you provide data at your own risk in that regard.

Depending on your location, you may have the following rights in relation to your personal data:

• Access: to request a copy of the personal data we hold about you.
• Rectification: to request correction of inaccurate or incomplete data.
• Erasure: to request deletion of your data in certain circumstances (e.g. where it is no longer necessary or you withdraw consent where consent was the basis).
• Restriction: to request that we limit how we use your data in certain circumstances.
• Objection: to object to processing based on legitimate interests or for direct marketing.
• Data portability: where applicable, to receive your data in a structured, commonly used format or to have it transferred to another controller.
• Withdraw consent: where we rely on consent, to withdraw it at any time.
• Complaint: to lodge a complaint with a supervisory authority (e.g. the ICO in the UK or your local data protection authority).

To exercise any of these rights, please contact us using the details below. We will respond within the timeframes required by applicable law (e.g. one month under UK GDPR). We may need to verify your identity before processing your request.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the revised policy on this page and update the "Last updated" date. Material changes may be communicated by email or a prominent notice on the website where appropriate. We encourage you to review this policy periodically.

For any questions about this Privacy Policy, to exercise your rights, or to report a concern, please contact us at hello@ppcnest.co or via our Contact page. We aim to respond to legitimate requests within a reasonable time and in any event within the periods required by applicable law.