Privacy Policy

Last updated: 10 September 2026

Nascreatives (“Nascreatives”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information you provide to us.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you:

• visit our website;
• contact us by email, telephone, social media or other communication channels;
• request information about our services;
• become a client or customer;
• purchase or use our services;
• submit an enquiry, quotation request or project brief;
• subscribe to marketing communications;
• interact with our social media pages;
• participate in surveys, competitions, promotions or other activities operated by us; or
• otherwise interact with Nascreatives.

This Privacy Policy is intended to provide clear information about how we handle personal data and the rights you have in relation to your information.

For UK users, this policy is intended to explain our approach under applicable UK data protection and privacy laws, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 (“DPA 2018”) and the Privacy and Electronic Communications Regulations 2003 (“PECR”), where applicable.

1. Who We Are

Nascreatives is a Liverpool-based web design and digital services business. We build websites and online shops for small and medium businesses, run digital advertising campaigns, and build AI automation for business processes. We also provide related branding, design and content services.

Business name: Nascreatives
Website: www.nascreatives.co.uk
Email: info@nascreatives.co.uk
Business address: Liverpool, Merseyside, United Kingdom
WhatsApp: +44 7487 714773 (WhatsApp only - this number does not take calls or SMS)

For most of the personal information covered by this Privacy Policy, Nascreatives acts as the data controller. This means that we determine why and how your personal information is processed.

In certain circumstances, particularly when providing services to a business client, Nascreatives may process personal information on the client's behalf. Where this happens, we may act as a data processor rather than a data controller, and the relevant client's instructions and contractual arrangements will apply.

2. What Is Personal Data?

“Personal data” means information that relates to an identified or identifiable individual.

This can include information such as your:

• name;
• email address;
• telephone number;
• postal or business address;
• company or organisation;
• job title;
• social media username or profile information;
• IP address;
• device and browser information;
• website usage information;
• enquiry or project information;
• communications with us;
• billing and transaction information;
• preferences and marketing choices; and
• other information that you voluntarily provide to us.

Personal data does not generally include information that has been genuinely anonymised so that you cannot reasonably be identified from it.

3. Information We Collect

Depending on how you interact with Nascreatives, we may collect different categories of information.

3.1 Information You Provide Directly

You may provide information to us when you:

• complete a contact or enquiry form;
• request a quotation;
• purchase our services;
• enter into a contract with us;
• communicate with us by email or telephone;
• send us a project brief;
• provide feedback or testimonials;
• subscribe to our mailing list;
• communicate with us through social media;
• register for an event, webinar or other activity;
• participate in a survey or promotion; or
• otherwise communicate with us.

This information may include your name, contact details, company information, project requirements and any other information you choose to provide.

3.2 Information We Collect Automatically

When you visit our website, we may automatically collect certain technical and usage information.

Depending on the technologies we use, this may include:

• IP address;
• browser type and version;
• operating system;
• device type;
• screen resolution;
• approximate location derived from IP address;
• pages visited;
• links clicked;
• referring website;
• time and date of visits;
• length of visits;
• website interactions;
• error information; and
• other technical information about your device or interaction with our website.

Some of this information may constitute personal data where it can be linked to you.

3.3 Information We Receive From Other Sources

We may receive personal information about you from third parties where permitted by law.

For example, this may include information received through:

• social media platforms;
• advertising platforms;
• referral partners;
• business partners;
• payment providers;
• website hosting or technology providers;
• publicly available business directories;
• professional networking platforms; or
• other services you use to interact with Nascreatives.

Where we receive personal information from another source, we will handle it in accordance with applicable data protection law.

4. How We Use Your Personal Information

We only use personal information where we have a lawful reason to do so.

Depending on the circumstances, we may use your information to:

Provide our services

We may use your information to:

• respond to enquiries;
• prepare quotations and proposals;
• discuss your requirements;
• create and deliver projects;
• provide customer support;
• communicate about projects;
• manage revisions and approvals;
• process payments;
• deliver products or services;
• manage contracts; and
• otherwise fulfil our obligations to you.

Communicate with you

We may use your contact information to:

• respond to questions;
• provide requested information;
• communicate about an ongoing project;
• send service-related notifications;
• provide customer support; and
• communicate with you about changes to our services.

Improve our business

We may use information to:

• understand how our website is used;
• improve our website;
• improve our services;
• understand customer needs;
• analyse business performance;
• troubleshoot technical issues;
• develop new services; and
• improve our communications and customer experience.

Marketing

Where permitted by law, we may use your information to send information about Nascreatives, our services, offers, news, events or other marketing communications.

Where consent is required, we will ask for it before sending the relevant marketing communications.

You can unsubscribe from marketing communications at any time.

Protect our business

We may process information to:

• detect and prevent fraud;
• protect our website and systems;
• maintain information security;
• investigate misuse;
• enforce our terms and conditions;
• establish, exercise or defend legal claims; and
• comply with legal or regulatory obligations.

5. Our Lawful Bases for Processing

Under UK data protection law, we need a lawful basis for processing personal information.

Depending on the circumstances, we may rely on one or more of the following lawful bases.

5.1 Contract

We may process personal information where it is necessary to enter into or perform a contract with you.

For example, we may need your name, contact information and billing information to provide a service you have purchased.

5.2 Legitimate Interests

We may process information where it is necessary for our legitimate interests, provided that those interests are not overridden by your rights and interests.

Our legitimate interests may include:

• operating and developing our business;
• providing and improving our services;
• managing client relationships;
• responding to business enquiries;
• maintaining website security;
• preventing fraud and misuse;
• analysing and improving our services;
• communicating with existing customers;
• managing business records; and
• establishing, exercising or defending legal claims.

Where we rely on legitimate interests, we consider whether the processing is necessary and whether your interests and fundamental rights override our interests.

5.3 Consent

In certain circumstances, we may rely on your consent.

For example, we may ask for your consent for:

• certain marketing communications;
• certain non-essential cookies;
• certain analytics technologies;
• certain advertising or tracking technologies; or
• other processing where consent is legally required.

Where we rely on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing that took place before you withdrew your consent.

5.4 Legal Obligations

We may process personal information where necessary to comply with a legal or regulatory obligation.

This may include obligations relating to:

• accounting;
• taxation;
• financial records;
• legal proceedings;
• fraud prevention;
• regulatory requirements; and
• lawful requests from competent authorities.

5.5 Vital Interests

In limited circumstances, we may process personal information where necessary to protect someone's vital interests.

This is unlikely to be a routine basis for our processing.

6. Marketing Communications

We may use personal information to send you marketing communications about Nascreatives and our services where permitted by law.

These communications may include:

• email newsletters;
• service updates;
• offers;
• promotions;
• new service announcements;
• educational content;
• events;
• creative or digital industry updates; and
• other information that we believe may be relevant to you.

Where applicable, we will obtain consent before sending electronic marketing communications where consent is required under applicable law.

You can unsubscribe from marketing emails by:

• clicking the unsubscribe link included in the email;
• contacting us using the details provided in this Privacy Policy; or
• using any available marketing preference controls.

Please note that opting out of marketing communications does not necessarily stop service-related communications. For example, we may still contact you regarding an active project, payment, contract or important service information.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

A cookie is a small text file stored on your device when you visit a website.

Cookies and similar technologies may be used for purposes such as:

• making our website function correctly;
• maintaining security;
• remembering preferences;
• understanding website usage;
• measuring website performance;
• improving user experience;
• analysing traffic;
• supporting marketing; and
• providing relevant advertising.

Not all cookies are treated in the same way.

Some cookies may be strictly necessary for the website or a service you have requested. Other cookies, such as certain analytics, advertising or tracking cookies, may require your consent.

We will provide appropriate information and, where required, obtain consent before using non-essential cookies or similar technologies.

The ICO's current guidance confirms that PECR applies not only to traditional cookies but also to technologies such as tracking pixels, local storage, device fingerprinting, scripts and tags.

Where applicable, our cookie banner or consent management platform will allow you to control non-essential cookies.

You can also control cookies through your browser settings, although disabling certain cookies may affect website functionality.

Types of Cookies

Depending on the technology used on our website, cookies may include:

Strictly necessary cookies

These are required for essential website functionality, security or services requested by you.

Preference cookies

These may remember choices such as language, settings or preferences.

Analytics cookies

These help us understand how visitors use our website and identify ways to improve it.

Analytics cookies are not automatically exempt from consent requirements merely because they are used for analytics.

Marketing cookies

These may be used to understand advertising performance or support personalised advertising.

Third-Party Cookies

Some cookies may be placed by third-party services that appear on or support our website.

These may include services such as analytics, video hosting, social media, advertising, payment or other technology providers.

The actual providers used by Nascreatives may change over time. Our cookie consent mechanism should provide further information about the cookies and technologies currently in use.

8. Who We Share Personal Information With

We do not sell your personal information.

However, we may share personal information with trusted third parties where necessary to operate our business, provide our services or comply with legal obligations.

These may include:

Technology providers

We may use providers for:

• website hosting;
• cloud storage;
• email;
• project management;
• customer relationship management;
• communications;
• analytics;
• cybersecurity;
• software development; and
• other business technology.

Payment providers

Where you make a payment, your payment information may be processed by a third-party payment provider.

We generally do not need to store complete payment card details ourselves where payment processing is handled securely by a specialist payment provider.

Professional advisers

We may share information with professional advisers such as:

• accountants;
• solicitors;
• insurers;
• auditors; and
• other professional advisers.

Government and regulatory authorities

We may disclose information where required or permitted by law, including where necessary to:

• comply with a legal obligation;
• respond to a lawful request;
• protect our rights;
• investigate suspected fraud;
• prevent crime; or
• protect the safety of individuals.

Business transfers

If Nascreatives is involved in a merger, acquisition, restructuring, sale of assets or similar transaction, personal information may be transferred as part of that transaction, subject to applicable legal requirements.

9. Third-Party Services

Our website or services may contain links to websites, applications or services operated by third parties.

These may include social media platforms, payment services, advertising services, video platforms, software services and other external websites.

If you follow a third-party link, you will leave the Nascreatives website.

We are not responsible for the privacy practices, content or security of third-party websites or services.

We recommend reviewing the privacy policies of third-party services before providing them with personal information.

10. Artificial Intelligence and Automated Technologies

Nascreatives may use artificial intelligence (“AI”) and automated technologies as part of our creative, administrative, technical or business processes.

Depending on the service involved, AI-enabled tools may assist with activities such as:

• creative development;
• design ideation;
• content creation;
• research;
• transcription;
• workflow automation;
• customer support;
• document processing;
• analysis; or
• other business activities.

We will seek to use AI tools responsibly and will take reasonable steps to avoid unnecessarily providing personal or confidential information to AI systems.

Where third-party AI providers process personal information on our behalf, we will consider the relevant data protection requirements and contractual arrangements.

You should not provide Nascreatives with highly sensitive personal information unless it is necessary for the service and we have specifically requested it.

Where automated processing or AI is used in a way that produces legally significant or similarly significant effects on an individual, we will consider the requirements applicable to automated decision-making under data protection law.

11. Sensitive or Special Category Data

We generally do not seek to collect special category personal data.

Special category data may include information concerning:

• health;
• race or ethnic origin;
• religious or philosophical beliefs;
• political opinions;
• trade union membership;
• genetic data;
• biometric data used for identification;
• sex life; or
• sexual orientation.

If you voluntarily provide information of this type, we will only process it where we have an appropriate legal basis and, where required, an additional condition under applicable data protection law.

Where possible, we ask you not to provide sensitive information that is not necessary for the service you are requesting.

12. Children's Privacy

Our services and website are not generally directed towards children.

We do not knowingly collect personal information from children where this is not appropriate or necessary.

If you believe that a child has provided us with personal information without appropriate permission, please contact us.

If we become aware that we have collected personal information from a child where we should not have done so, we will take reasonable steps to delete it.

13. How Long We Keep Personal Information

We will only keep personal information for as long as reasonably necessary for the purposes for which it was collected, including where necessary to satisfy legal, accounting, tax, contractual or reporting requirements.

Different categories of information may therefore be retained for different periods.

For example:

We may retain information for longer where necessary to comply with a legal obligation or to establish, exercise or defend legal claims.

When personal information is no longer required, we will take reasonable steps to securely delete, anonymise or otherwise dispose of it.

14. International Data Transfers

Some of our service providers may operate outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable UK data protection law.

Depending on the circumstances, this may involve:

• transferring information to a country recognised as providing an adequate level of protection;
• using appropriate contractual safeguards;
• implementing an International Data Transfer Agreement or UK Addendum where applicable;
• relying on another lawful transfer mechanism; or
• taking other measures required by applicable law.

Where appropriate, further information about relevant safeguards can be requested by contacting us.

15. How We Protect Your Information

We take the security of personal information seriously.

We use reasonable technical and organisational measures designed to protect personal information against:

• unauthorised access;
• accidental loss;
• destruction;
• alteration;
• disclosure;
• misuse; and
• other unlawful processing.

Security measures may include:

• access controls;
• passwords and authentication;
• encryption where appropriate;
• secure cloud services;
• software and security updates;
• restricted access to personal information;
• staff or contractor confidentiality obligations;
• backups;
• monitoring and security procedures; and
• appropriate disposal procedures.

However, no internet transmission, electronic storage system or business environment can be guaranteed to be completely secure.

You should take appropriate precautions when communicating sensitive information online.

16. Data Breaches

If we become aware of a personal data breach, we will assess the incident and take appropriate steps to contain, investigate and remedy it.

Where required by applicable data protection law, we may notify the Information Commissioner's Office (“ICO”) and/or affected individuals.

17. Your Data Protection Rights

Depending on the circumstances, you may have a number of rights under UK data protection law.

These may include:

Right to be informed

You have the right to understand how your personal information is collected and used.

This Privacy Policy is intended to provide that information.

Right of access

You may ask us for a copy of the personal information we hold about you.

This is commonly known as a Subject Access Request (“SAR”).

Right to rectification

You may ask us to correct inaccurate or incomplete personal information.

Right to erasure

In certain circumstances, you may ask us to delete your personal information.

This is sometimes known as the “right to be forgotten”.

This right is not absolute and may not apply where we have a lawful reason to retain or process the information.

Right to restriction

In certain circumstances, you may ask us to restrict the processing of your personal information.

Right to data portability

In certain circumstances, you may have the right to receive personal information you have provided to us in a structured, commonly used and machine-readable format and to ask us to transmit it to another organisation.

Right to object

You may have the right to object to certain processing of your personal information, particularly where we rely on legitimate interests.

You have an absolute right to object to direct marketing.

Rights relating to automated decision-making

In certain circumstances, you may have rights relating to decisions made solely through automated processing that produce legal or similarly significant effects.

The availability of these rights depends on the specific circumstances and applicable legal requirements.

18. How to Exercise Your Rights

To exercise any of your rights, please contact us using:

Email: info@nascreatives.co.uk

Please put "Data protection request" in the subject line so it reaches the right place quickly.

Please clearly state:

• your name;
• the right you wish to exercise;
• the information or processing concerned; and
• any additional information that may help us identify your records.

We may need to request additional information to verify your identity before providing personal information or completing certain requests.

This is a security measure designed to prevent personal information from being disclosed to someone who is not entitled to receive it.

We will respond within the timeframe required by applicable data protection law.

In most cases, requests concerning your data protection rights should be handled without charge. However, applicable law may allow us to charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive.

19. Direct Marketing Objections

You have an absolute right to object to the processing of your personal information for direct marketing purposes.

If you no longer wish to receive marketing communications from Nascreatives, you can unsubscribe using the relevant unsubscribe option or contact us directly.

You do not need to provide a reason for opting out.

20. Complaints

We hope that we can resolve any concerns you may have about our use of your personal information.

If you have a concern, please contact us first using the details below:

Email: info@nascreatives.co.uk

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

You can find information about making a complaint through the ICO's official website:

Information Commissioner's Office (ICO)

We would generally appreciate the opportunity to address your concerns before you approach the ICO, but you are entitled to contact the ICO directly.

21. Social Media

Nascreatives may operate profiles or pages on social media platforms.

If you interact with us through social media, the relevant platform may collect and process information about you independently.

This processing is governed by the privacy policy and terms of the relevant social media platform.

We may receive information from social media platforms depending on your interaction with our pages and the platform's settings.

For example, we may receive:

• your public profile name;
• comments;
• messages;
• reactions;
• engagement information; or
• other information made available to us through the platform.

We may use this information to respond to enquiries, communicate with users, manage our social media presence and improve our services.

22. Testimonials, Reviews and Portfolio Work

With your permission, we may use customer testimonials, reviews, project information, images or other content for marketing and portfolio purposes.

We will seek appropriate permission where required before publishing personal information or identifiable customer content for promotional purposes.

If you have previously provided permission and would like us to stop using your content, please contact us.

Please note that removing content from our own website or channels may not remove copies that have already been shared, cached or reproduced elsewhere.

23. Business Clients and Personal Data Provided to Us

If you are a business client and provide us with personal information belonging to your customers, employees, suppliers or other individuals, you should ensure that you have an appropriate legal basis for providing that information to us.

Depending on the nature of the service, Nascreatives may process that information on your behalf as a data processor.

Where we act as a processor, we will process personal information in accordance with your documented instructions and applicable data protection requirements.

Where necessary, we may enter into a separate data processing agreement with you.

24. Confidential Business Information

Personal data is not the same as confidential business information.

During a project, you may provide Nascreatives with confidential business information, trade secrets, creative concepts, marketing plans, customer information or other commercially sensitive material.

We will take reasonable steps to protect confidential information entrusted to us and will use it only for legitimate business purposes associated with our relationship with you, subject to our contractual arrangements.

Where appropriate, separate confidentiality or non-disclosure agreements may apply.

25. Links to Other Websites

Our website may contain links to websites operated by third parties.

These websites have their own privacy policies and terms.

We do not control and are not responsible for the privacy practices of third-party websites.

We recommend reviewing the privacy policy of any external website before submitting personal information.

26. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

This may be necessary because:

• our services change;
• our website changes;
• we introduce new technologies;
• our data processing activities change;
• legal or regulatory requirements change; or
• we identify improvements that should be made to our privacy practices.

When we make changes, we will update the “Last updated” date at the top of this Privacy Policy.

Where appropriate, we may provide additional notice of significant changes.

We recommend reviewing this Privacy Policy periodically.

27. Contact Us

If you have questions about this Privacy Policy, our use of personal information or your data protection rights, please contact us.

Nascreatives

Email: info@nascreatives.co.uk
WhatsApp: +44 7487 714773 (WhatsApp only - this number does not take calls or SMS)
Website: www.nascreatives.co.uk
Address: Liverpool, Merseyside, United Kingdom

28. Summary of Your Privacy Choices

In simple terms:

• We collect personal information that we need to operate our business and provide our services.
• We do not sell your personal information.
• We use information only where we have an appropriate lawful basis.
• We may use trusted third-party service providers to operate our business.
• Some third-party providers may process information outside the UK, subject to appropriate safeguards where required.
• We use cookies and similar technologies in accordance with applicable privacy laws.
• Where consent is required for non-essential cookies or certain marketing activities, we will ask for it.
• You can unsubscribe from marketing communications at any time.
• You may have rights to access, correct, delete, restrict or object to the processing of your personal information.
• You can contact us if you have questions or concerns about how we handle your information.
• You can complain to the Information Commissioner's Office if you believe your data protection rights have not been respected.