Privacy Policy
[Company name] · Last updated 1 November 2026
1. Who is responsible
[Company name] (company number [Company number], [Registered address]) runs Nextclient and is the controller of the personal data described here, except where we process data on your behalf (see section 4). Contact: [Contact email]. [Confirm ICO registration and fee.]
2. What we collect
From you: your name, company name, email address and password (stored securely, never in readable form), your business profile, the searches you run, the prospects you save and notes you add, and your plan and usage.
Payments: Stripe handles your card details. We keep your plan, subscription status and Stripe customer and subscription identifiers.
About businesses: business names, addresses, phone numbers and websites from open business data, and contact email addresses that businesses have published on their own websites, together with the page where we found them. Some businesses are sole traders, so some of this is personal data.
Technical: basic logs and error information needed to run and secure the service.
3. Why we use it, and our lawful basis
To provide the service you asked for (contract): running your account, searches, research, billing and support.
To keep the service secure and to prevent misuse (legitimate interests).
To provide a business-to-business prospecting service that shows publicly available business information to our customers (legitimate interests). We keep the business information limited to what is public about the business, show where it came from, and honour requests to remove or correct it. [Complete and document a legitimate interests assessment.]
To meet legal obligations such as tax and accounting.
4. Information about businesses and people you contact
When you save prospects or add your own lists, you decide who to contact and why. You are responsible for having a lawful basis and for following the marketing rules; our terms explain this. We only show an email address if the business has published it on its own website, and we never guess one.
If you are a business listed in the service and want your details removed or corrected, or you object to being listed, email us at the address above and we will act on it. [Set the process and timescale.]
5. Who we share it with
We use these providers to run the service: Supabase (database and sign-in), Cloudflare (hosting), Stripe (payments), Anthropic (reading website text and writing observations and drafts), and Resend (service emails such as invitations). They process data on our instructions. We don't sell personal data.
Business data comes from the Overture Maps Foundation's open dataset, whose sources and licences are listed on our data sources page.
We may share information where the law requires it. [Confirm the full list of processors before launch.]
6. Moving data outside the UK
Some of our providers process data outside the UK. Where they do, we rely on safeguards the law recognises, such as the UK's approved transfer terms or adequacy decisions. [Confirm for each provider.]
7. How long we keep it
We keep account data while your account is open. You can delete leads from your account. When an account is closed we delete or anonymise its data within [period], except for what we must keep for legal or accounting reasons. [Set the retention periods.]
8. Your rights
You can ask to see the personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, and to receive a copy you can move elsewhere. Email us at the address above. You can also complain to the Information Commissioner's Office (ico.org.uk).
9. Cookies and similar technology
We use only what is needed to keep you signed in and the service working. We don't use advertising or tracking cookies. [Confirm no analytics are added before launch.]
10. Changes
We'll update this policy as the service changes and tell you about changes that matter to you.