Privacy policy

Last updated: October 2026

Introduction

NOSY Consultancy Ltd respects your privacy and is committed to protecting your personal data.

This policy explains what information we collect when you use our website, how we use it, and your rights under UK data protection law.

Who we are

NOSY Consultancy Ltd is the controller responsible for your personal data.

Contact Details:

NOSY Consultancy Ltd
Top Floor
8 Gray’s Walk
Newport
Isle of Wight
PO30 1TD

Email: info@nosy.agency
Telephone: 01983 632997

If you have any questions about this policy or how your data is handled, please contact us using the details above.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO): Information Commissioner's Office

What data we collect

We may collect and process the following information:

• Your name, email address, telephone number and organisation, when you contact us
• The content of messages you send through our contact form
• Technical information such as your IP address, browser, device type and approximate location
• How you use our website, such as pages visited and links clicked, only if you allow Analytics cookies
• A record of your cookie choices, so we can respect them and show that we asked

We do not knowingly collect sensitive personal data through this website.

How we collect data

We collect data when you:

• Submit a contact form
• Email us directly
• Subscribe to communications (if applicable)
• Use our website

Some technical information is collected automatically through cookies and analytics tools.

How we use your data

We only process personal data where we have a lawful basis to do so. We use it for:

• Responding to your enquiry – legitimate interests, or taking steps before entering into a contract with you
• Keeping the website secure and working properly – legitimate interests
• Remembering your cookie choices – legal obligation, as we must be able to show that we asked for your consent
• Understanding how the website is used (Google Analytics) – consent
• Advertising features and embedded videos – consent

Cookies and similar technologies

When you first visit our website, we ask which cookies you are happy for us to use. Optional cookies are only set after you agree.

You can change your choice at any time using Cookie settings at the bottom of every page. If you withdraw consent, we delete our analytics cookies and stop collecting analytics data.

Strictly necessary

These are always on, because the website cannot work properly without them.

• c15t (NOSY, via c15t / consent.io) – stores your cookie choices. Kept until your choice expires or you change it.

Analytics

Only used with your consent. We use Google Analytics 4, loaded through Google Tag Manager, to understand how visitors use our website, such as which pages are popular and how people find us.

Google Analytics does not store your IP address. It records anonymous identifiers, the pages you view and actions such as clicking our email address or phone number, or sending our contact form. We record that a form was sent, never what you wrote.

• _ga (Google) – distinguishes visits from the same browser. Expires after 2 years.
• _ga_32QZ8LE69E (Google) – keeps track of your session. Expires after 2 years.

Marketing

Only used with your consent.

• Embedded videos – YouTube (Google) and Vimeo videos may set their own cookies and track your activity across websites. You can switch each provider on or off individually in Cookie settings.
• Google advertising features – if you allow both Analytics and Marketing, Google Analytics’ advertising features (Google signals) are enabled. If you are signed in to a Google account and have allowed ads personalisation, Google may link your visit to your account. This supports reporting across devices and may be used to personalise the ads you see elsewhere. Without Marketing consent, this does not happen.

You can read how Google uses data from websites that use its services at How Google uses information from sites or apps that use our services, and manage your Google ad settings in My Ad Center.

Third-party services

We use trusted providers to run our website. They process data on our behalf:

• Vercel – website hosting and security, which involves processing IP addresses and technical data
• Google (Tag Manager and Analytics) – website analytics, with your consent
• consent.io – storing and recording your cookie choices
• Resend – delivering contact form messages to our inbox
• Mux – video hosting. Our videos do not set cookies; Mux collects anonymised playback statistics.
• Adobe Fonts – website fonts, which your browser loads from Adobe
• YouTube and Vimeo – embedded videos, with your consent

We are not responsible for the privacy policies or practices of external websites linked from our site.

International transfers

Some of these providers are based in, or process data in, the United States. Where personal data is transferred outside the UK, we rely on UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or approved contractual clauses to protect it.

Data retention

We only keep personal data for as long as necessary to fulfil the purposes it was collected for, including legal, accounting or reporting requirements.

• Enquiries – kept for as long as needed to respond to you and for our business records, then deleted.
• Google Analytics data – kept for 14 months, then deleted automatically. The period restarts if you visit again.
• Cookie choices – kept for as long as needed to show that we asked for and respected your consent.

Your rights

Under UK GDPR, you have rights including:

• The right to access your personal data
• The right to correct inaccurate data
• The right to request deletion of your data
• The right to object to processing
• The right to withdraw consent where consent is relied upon

To exercise any of these rights, please contact us using the details above.

You can withdraw consent to cookies at any time using Cookie settings at the bottom of every page. This does not affect anything we did before you withdrew it.

Changes to this policy

We may update this privacy policy from time to time. Any changes will be published on this page with an updated revision date.