Legal
Privacy Policy
This policy explains how Next Layer IT collects and uses personal information through this website and during prospective customer and business-to-business enquiries.
1. Who we are
Next Layer IT is the controller of the personal information described in this policy.
Exact registered company name: [PENDING CONFIRMATION]
Company number: [PENDING]
Registered in: [PENDING CONFIRMATION]
Registered office: 21 Western Road, WS12 4AS
Email: sales@nextlayerit.co.uk
2. Information we collect
We may collect:
- your name, business name, business email address and optional telephone number;
- information about your current email provider, domain, approximate mailbox count and possible file-migration requirements;
- the content of messages and other information you choose to include in an enquiry;
- records of business correspondence, proposals and discussions;
- limited technical information needed to operate and secure the website, such as IP address, request time and server logs.
Please do not send passwords, access codes, recovery keys or other sensitive credentials through the website form.
Required enquiry fields are needed so that we can understand and respond to your request. You do not have a statutory obligation to provide them, but without the required information we may be unable to assess the enquiry. Telephone and free-text information are optional.
3. How we use your information
We use personal information to:
- respond to enquiries and understand a potential Microsoft 365 migration or configuration project;
- prepare, discuss and manage quotations, assessments and prospective customer relationships;
- communicate with business contacts;
- protect the website, identify misuse and maintain appropriate records;
- meet applicable legal, regulatory, accounting and tax obligations.
We do not use website enquiry data for automated decision-making or profiling that produces legal or similarly significant effects.
4. Lawful bases
Depending on the context, we expect to rely on:
- steps at your request before entering a contract, where you ask for an assessment or quotation;
- legitimate interests, including responding to business enquiries, maintaining business relationships and protecting the website;
- legal obligations, where records must be retained or disclosed by law;
- consent, where the law requires it. You may withdraw consent at any time, without affecting earlier lawful processing.
Review before publication: Confirm this lawful-basis assessment against the final enquiry, sales and customer-handling process.
5. Sharing information
We may share information only where reasonably necessary with service providers that help us operate our website, email, business systems or professional services, and with authorities or advisers where the law requires or permits it. Providers must handle information under appropriate confidentiality and data-protection obligations.
We do not sell personal information.
Review before publication: Identify and document the actual website host, email provider, CRM or quotation tools, professional advisers and other processors used at launch.
6. International transfers
Some technology providers may process information outside the United Kingdom. Where that happens, we will use a lawful transfer mechanism and appropriate safeguards as required by UK data-protection law.
Review before publication: Confirm whether any launch providers transfer enquiry data internationally and record the relevant safeguards.
7. Retention
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including responding to an enquiry, maintaining appropriate business records, resolving disputes and meeting legal obligations.
Proposed periods requiring confirmation: unsuccessful or inactive enquiries — up to 24 months after the last meaningful contact; customer and transactional records — for the period required by applicable legal, tax and contractual obligations; security logs — for a short operational period proportionate to security needs.
8. Security
We use reasonable technical and organisational measures intended to protect personal information from unauthorised access, loss, alteration or disclosure. No internet transmission or storage system can be guaranteed completely secure.
9. Your rights
Subject to UK data-protection law, you may have rights to request access to your personal information, correct inaccurate information, request erasure or restriction, object to certain processing, and receive some information in a portable format. You may also withdraw consent where consent is the lawful basis.
To exercise a right, email sales@nextlayerit.co.uk. We may need to verify your identity before acting on a request.
Your right to object
You have the right to object to processing based on our legitimate interests. Whether we must stop processing will depend on the circumstances and applicable law. Contact us using the email above if you wish to object.
You may complain to the UK Information Commissioner's Office (ICO). Its current contact details and guidance are available at ico.org.uk. We would appreciate the opportunity to address your concern first.
10. Cookies and analytics
This V1 website does not use advertising trackers, analytics cookies or other non-essential cookies. The enquiry form may use a strictly necessary session cookie to provide CSRF security. If analytics or additional technologies are introduced later, this policy and any consent controls will be reviewed before they are enabled.
11. Other websites
Links to other websites are provided for convenience. We are not responsible for the privacy practices of third-party websites and recommend reading their own policies.
12. Changes to this policy
We may update this policy when our practices, providers or legal obligations change. The latest version will be published on this page with an updated date.