Status report
3 November 2026
Privacy Policy
The report on your data: what is held, why, who sees it, and the rights you can exercise at any point. Completed marks what is settled, Current marks what applies while you deal with us, Next marks what happens later.
- Completed: settled
- Current: applies while you deal with us
- Next: happens later
Your rights, first
Ask for a copy of your data, for a correction, for deletion, for a restriction on how we use it. Object to any use grounded in legitimate interests. Receive a portable copy where the law provides one. Withdraw consent wherever consent is the basis.
One written message does it: by email to studio@nextelyxprojectsteps.com, or by post to our registered office, Nextelyx Project Steps Ltd, 61 Bridge Street, Kington, United Kingdom, HR5 3DJ. The law allows us a month to reply; where a complex request needs longer, we say so. Normally there is no charge.
Two settled points: no law requires you to give us your data (though without a name and a way to reply, an enquiry cannot be answered and a project cannot be done), and we make no automated decisions about you and profile no one.
Who controls the data
The controller is Nextelyx Project Steps Ltd — "Nextelyx", "we". Registered in England and Wales, company number 17280206, registered office 61 Bridge Street, Kington, United Kingdom, HR5 3DJ.
Anything here can be raised in writing: by email to studio@nextelyxprojectsteps.com, or by post to our registered office, Nextelyx Project Steps Ltd, 61 Bridge Street, Kington, United Kingdom, HR5 3DJ.
What this website gathers
The site has no enquiry form, no accounts, no newsletter and no uploads. The pages gather nothing from you; if you email us, we receive the information you include in your message.
The host does log what any host must: the visitor's IP address, the date and time of the visit, the page requested and the browser in use — to serve the site and keep it secure.
What is held once you write
What you send, to start with: your name, your business, how to reach you, and a description of how clients currently hear about progress. An agreed project adds the correspondence, the quotation as accepted, the materials you supply and the records bookkeeping requires.
Supplied materials can contain personal data — the name of the person who will keep your reporting page current, for one. Such content is used only to prepare your structures and guidance, and where that means handling personal data for you, the written quotation sets the terms.
The Examples page is inert markup throughout; nothing typed or ticked on this site goes anywhere or is kept.
Why it is used, and the lawful bases
The uses are: answering an enquiry and preparing a quotation; doing the work an agreed project covers and delivering its materials; invoicing and accounts; a running, secure website; and dealing with any question, complaint or claim a project produces.
The UK GDPR bases:
- Article 6(1)(b) — steps you ask for ahead of a contract, and the contract's performance once it exists;
- Article 6(1)(f) — our legitimate interests: a secure website that stays running, and a correspondence record that lets us answer questions about a project after it closes. We use only what those purposes need;
- Article 6(1)(c) — the accounting records the law requires.
Who else sees it
We see it, and so do the services the business relies on: the host that serves these pages, the email provider, the payment provider whose secure page takes a card payment where one is offered, and our accountant. Each handles the data only for its own service to us. Data may also be shared where the law demands it, or with professional advisers when a claim needs them. Personal data is not sold and not used for advertising.
Card details, where a quotation offers card payment, are typed into the payment provider's own secure page — they never reach us and are never stored by us.
A provider may store data outside the UK. Where that happens, the transfer stands on UK adequacy regulations or another safeguard the UK GDPR permits, such as the International Data Transfer Agreement — ask, and we will confirm which applies.
How long it is kept
Nothing is kept past its purpose. An enquiry that does not become a project is deleted once it is answered and followed up. A project's correspondence and records are kept for as long as questions or claims about it may need them. Accounting records stay for the period company and tax law set. Server logs are kept by the host for the period its security settings provide.
How to complain
Complain to us first, so we can put it right. You can also take it to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, via its website at ico.org.uk.
Changes to this policy
A changed policy is published on this page under a new date. If a change touches a project in progress, you are told directly.