Privacy Policy

01Who we are

NexPage ("we", "us") is a web & AI studio based in Rīga, Latvia, serving clients in Latvia, the UK and Ireland.

For any question about this policy or your data, write to hello@nexpage.co. We are the data controller for the personal data described here.

02What we collect

Contact and enquiry data: when you use our contact form or book a call, we collect the name, email address, phone number and any details you choose to include in your message. We store this enquiry, together with your IP address and browser type, so we can reply and to prevent spam and abuse.

Technical data: like most websites, our hosting provider records basic technical information such as your IP address, browser type and the pages you visit, in order to serve the site securely and reliably.

Consent data: a small record of your cookie choice, so we don't ask you on every visit.

We do not knowingly collect special-category data, and we never ask for it in our forms.

03Why we use it, and our legal basis

To reply to you and provide a quote or service you asked for (performance of a contract, and your consent when you submit the form).

To keep the site secure, prevent abuse and understand roughly how it is used (our legitimate interest in running a safe, working website).

To meet our legal and accounting obligations where a project goes ahead (legal obligation).

We never sell your data, and we do not use it for automated decisions that affect you.

04Who we share it with

We use a small number of trusted service providers (processors) who handle data only on our instructions: our hosting and delivery provider (Vercel), our email delivery provider (Resend) for enquiry and booking messages, our database provider (Supabase), which stores your enquiry so we can follow it up, and our own internal client-management system (the NexPage panel), which we use to track and respond to enquiries. For online-store projects we also use the Shopify platform.

These providers may process data outside the EU/EEA. Where they do, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.

We may disclose data if the law requires it, but not otherwise.

05How long we keep it

Enquiries that don't turn into a project are kept for up to 12 months, then deleted.

Data tied to an active client relationship is kept for as long as we work together and for the retention period our accounting and legal obligations require afterwards.

You can ask us to delete your data sooner at any time (see your rights below).

06Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. Where we rely on consent, you can withdraw it at any time.

To exercise any right, email hello@nexpage.co. We respond within one month.

If you believe we have mishandled your data, you can complain to the Latvian Data State Inspectorate (Datu valsts inspekcija, dvi.gov.lv).

07Cookies

We use only essential cookies by default, and analytics cookies only if you accept them. Full detail is in our Cookie Policy.

08Changes to this policy

If we change this policy we update the date at the top of the page. Material changes will be made clear on the site.