1. Who we are
Nesium is a marketing automation studio specialising in AI-enabled workflows such as rapid quotes, booking pipelines, content systems, and KPI reporting. We operate from the United Kingdom and work with clients globally.
If you have any questions about this notice or would like to exercise your rights, reach us at hello@nesium.co.uk.
2. Personal data we collect
We only collect the information we need to scope, deliver, and support your automations. The categories are:
| Category | Examples | How we collect it |
|---|---|---|
| Identity & contact details | First and last name, work email, preferred contact channel, phone/WhatsApp number, country dial code. | Submitted via the “Let’s build your first automation” form or by contacting us directly. |
| Business profile | Company name, website, role, industry, monthly revenue band, budget band. | Provided in Step 2 of the intake form so we can tailor the project scope. |
| Project goals | Desired improvements, preferred automation KPI, desired start date, custom notes. | Captured through multiple-choice options and free-text fields in the intake form. |
| Technical diagnostics | Form metadata such as submission timestamps, page URL, and debugging logs (e.g. webhook status codes). | Generated automatically when the form submits to our n8n workflow or testing utilities. |
We do not intentionally collect special category data. Please avoid sharing sensitive information in free-text fields.
3. How we use your data
We use the information described above to:
- Respond to enquiries and deliver a one-page automation plan within 24 hours.
- Qualify projects, prepare proposals, and assemble the right automations (e.g. rapid quotes, booking pipelines, content systems).
- Operate core sales, support, and invoicing workflows.
- Improve product performance through aggregated, anonymised learnings.
- Maintain security, reduce spam, and troubleshoot integration issues.
4. Legal bases (UK & EU GDPR)
We rely on the following legal grounds:
- Consent – when you opt in to be contacted through the intake form.
- Contract – to scope, launch, and support automation projects you request.
- Legitimate interests – to secure our systems, prevent abuse, and develop our services in ways that do not override your rights.
5. How we share information
We do not sell your data. We only share it with trusted processors that help us run Nesium:
- n8n Cloud – receives form submissions through a secure webhook to trigger our intake workflow.
- Google Workspace & Google Sheets – used for email, calendar, and optional intake spreadsheet storage.
- Zapier, Make, Stripe, OpenAI, Notion, Slack – engaged when required to build or support the automations you commission.
- Hosting & infrastructure providers – vendors that keep our website and assets available.
Each processor is bound by a data processing agreement and only handles the information necessary to perform its task.
6. Client systems & assets
When you become a client we may ask for temporary access to the tools required to build and maintain your automations—such as CRM logins, spreadsheets, shared drives, payment platforms, or marketing suites. We only request the minimum level of access needed, prefer scoped service accounts, and document exactly what you have shared. Credentials are stored in encrypted password managers and removed or rotated at the end of the engagement or on your request.
If we process any personal data that you control inside those systems, we do so strictly as your processor and follow the instructions laid out in our statement of work or data processing agreement.
7. International transfers
Many of our processors operate in the EU, UK, and United States. When data leaves the UK or EU we use recognised safeguards such as the UK Addendum to the EU Standard Contractual Clauses or equivalent agreements required by law.
8. How long we keep information
Intake form submissions are retained for up to 24 months so we can follow up on active conversations and measure performance. If you become a client, we may retain project records for the lifetime of the engagement and for up to six years afterwards to meet legal and contractual obligations.
You can request deletion or updates at any time by messaging hello@nesium.co.uk.
9. Security
We apply least-privilege access, enforce strong authentication, and encrypt data in transit. Sensitive platform credentials remain in your systems whenever possible, and we prefer to connect through dedicated service accounts.
10. Your rights
If you are located in the UK or European Economic Area you have the right to:
- Access a copy of your personal data.
- Request corrections to inaccurate or incomplete information.
- Ask us to delete your data or restrict how we use it.
- Object to processing based on legitimate interests.
- Receive your data in a portable format.
- Withdraw consent at any time (this does not impact prior processing).
- Lodge a complaint with the UK Information Commissioner’s Office or your local supervisory authority.
To exercise any right, contact us at hello@nesium.co.uk. We respond within one month.
11. Cookies and tracking
We use Google Analytics 4 to understand how visitors navigate our website so we can improve content and performance. GA4 collects pseudonymous usage data such as page views, device type, and approximate location. We run it in line with applicable consent requirements and honour any signals you send via browser settings or consent tools.
Essential cookies may still be required by our hosting provider or embedded services to deliver core functionality. If we introduce additional tracking technologies, we will update this notice and gather consent where required.
12. Updates to this notice
We review this privacy policy whenever we launch new services, integrate additional tools, or change how we process personal data. Updates will appear on this page with a new “Last updated” date.
13. Contact
Email: hello@nesium.co.uk
Response time: within 24 hours on business days.