Privacy Policy

Last reviewed 21 June 2026. We recommend this policy is checked by a qualified adviser before you rely on it.

Last updated: 21 June 2026

This Privacy Policy explains how Nurtivly Design (“we”, “us”, “our”) collects, uses, shares and protects your personal data when you visit our website and get in touch with us. It also sets out your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are committed to protecting your privacy and handling your data in an open and transparent manner.

Who We Are

Nurtivly Design is a UK-based web design studio. For the purposes of UK data protection law, we are the data controller of the personal data described in this policy — meaning we decide how and why your data is processed.

Our details are:

Legal entity name: Tourney Time Network Ltd
Company number: 13038044
Registered address: 2 Womersley Park Gardens, Womersley, Doncaster, England, DN6 9GA
ICO registration number: ZA845782
Contact email: hello@nurtivly.com

If you have any questions about this policy or how we handle your data, please contact us using the email address above.

The Data We Collect and Why

We only collect the personal data we need. The table below explains what we collect, why we collect it, and the lawful basis on which we rely under Article 6 of the UK GDPR.

1. Enquiries made through our contact form

When you complete and submit our contact form, we collect:

Your name
Your email address
The content of your message

Purpose: to receive, respond to and manage your enquiry, to provide the information or services you have asked about, and to keep a record of our correspondence with you.

Lawful basis: Legitimate interests (Article 6(1)(f)). We have a legitimate interest in responding to people who contact us and in running and growing our web design business. We have considered your rights and freedoms and do not believe this processing is intrusive or unexpected — you are providing this data specifically so that we can reply to you.

2. Analytics and website performance

We use two analytics tools to understand how our website is used and to improve it.

Google Analytics 4 (cookie-based). Google Analytics 4 sets cookies and collects information about how visitors interact with our site, such as pages visited, approximate location, device and browser type. We load Google Analytics only after you have given your consent through our cookie banner. If you do not consent, these cookies are not set and this tracking does not take place.

Purpose: to measure website traffic and understand visitor behaviour so we can improve our content and services.
Lawful basis: Consent (Article 6(1)(a)), in line with the Privacy and Electronic Communications Regulations (PECR) for the storing of cookies. You can withdraw your consent at any time via our cookie settings, and withdrawing consent is as easy as giving it.

Vercel Web Analytics (privacy-friendly). We also use Vercel Web Analytics, which is designed to be privacy-friendly and does not use cookies. It gives us aggregated, high-level statistics such as page views and traffic trends. We treat it as not requiring consent on the basis that it does not set cookies or store identifiers on your device for cross-site tracking.

Purpose: to monitor overall site performance and traffic in an anonymous, aggregated way.
Lawful basis: Legitimate interests (Article 6(1)(f)) — we have a legitimate interest in understanding aggregate usage of our website to maintain and improve it, and this processing has minimal privacy impact as it does not identify you.

Cookies

Our website uses cookies only where you have consented (Google Analytics 4). Strictly necessary functions of the site do not rely on tracking cookies, and Vercel Web Analytics operates without cookies. You can manage or withdraw your cookie consent at any time through the cookie settings on our website, and you can also control cookies through your browser settings.

We do not sell your personal data. We share it only with the third-party service providers we rely on to run our website and respond to you, and only to the extent necessary. These providers act as our processors or independent controllers, as set out below.

Vercel Inc. — our website hosting and infrastructure provider, which also provides Vercel Web Analytics. Basic technical request data is processed on Vercel’s infrastructure as part of hosting our website.
HighLevel Inc. (GoHighLevel) — our customer relationship management (CRM) platform. When you submit our contact form, your name, email and message are sent to and stored in our GoHighLevel account so we can manage and respond to your enquiry.
Google Ireland Limited — provider of Google Analytics 4, used (with your consent) to measure how our website is used.

We may also disclose your data where we are legally required to do so, for example to comply with a court order or a request from a regulator or law enforcement.

International Transfers

Some of our service providers (including Google and Vercel) are based in, or process data in, the United States and other countries outside the UK. Where your personal data is transferred outside the UK, we ensure an appropriate level of protection is in place using one or more of the safeguards recognised under the UK GDPR, such as:

UK adequacy regulations (transfers to countries the UK Government has deemed to provide adequate protection), including the UK Extension to the EU–US Data Privacy Framework where the recipient is certified under it; and/or
the International Data Transfer Agreement (IDTA), or the EU Standard Contractual Clauses together with the UK Addendum, where adequacy or the Framework does not apply.

You can request more information about these safeguards, including a copy of the relevant transfer mechanism, by contacting us using the details in the “Who We Are” section.

How Long We Keep Your Data

We keep your personal data only for as long as we need it for the purposes set out in this policy, or for as long as we are legally required to keep it.

Contact form enquiries: we retain enquiry correspondence for 24 months after our last contact with you, after which it is deleted, unless the enquiry becomes a client project (in which case it is kept in line with our client and accounting records) or we are required to keep it longer by law.
Analytics data: retained in line with the providers’ data retention controls (for Google Analytics 4, in accordance with the data retention setting configured on our property; Vercel Web Analytics data is aggregated and anonymous).

When we no longer need your personal data, we will securely delete or anonymise it.

Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

The right to be informed — to be told how your data is used, as set out in this policy.
The right of access — to request a copy of the personal data we hold about you.
The right to rectification — to have inaccurate or incomplete data corrected.
The right to erasure — to ask us to delete your data in certain circumstances (“the right to be forgotten”).
The right to restrict processing — to ask us to limit how we use your data in certain circumstances.
The right to data portability — to receive your data in a structured, commonly used, machine-readable format, where this applies.
The right to object — to object to processing based on our legitimate interests, including any direct marketing.
Rights relating to automated decision-making and profiling — we do not make decisions about you based solely on automated processing.
The right to withdraw consent — where we rely on your consent (such as for analytics cookies), you can withdraw it at any time, without affecting the lawfulness of processing carried out before you withdrew it.

To exercise any of these rights, please contact us using the email address in the “Who We Are” section. We will respond within one month, though we may extend this by up to two further months for complex or numerous requests, in which case we will let you know. We will not charge a fee unless your request is clearly unfounded, repetitive or excessive.

Your Right to Complain to the ICO

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection regulator. We would, however, appreciate the chance to address your concerns first, so please do consider contacting us before going to the ICO.

You can contact the ICO at:

Website: https://ico.org.uk
Helpline: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your data.

Contact Us

If you have any questions, requests or concerns about this Privacy Policy or your personal data, please contact us at hello@nurtivly.com.