Last updated: May 2026

Who we are

NXRD is a digital marketing agency providing end-to-end marketing consultancy, strategy, and execution services to businesses across domestic and international markets.

NXRD Rae House, Dane Street, Bishops Stortford, Hertfordshire, United Kingdom, CM23 3BT james@nx-rd.com nx-rd.com

Overview

NXRD is committed to protecting the privacy of our clients, their customers, and anyone whose data we may process in the course of delivering marketing services. This policy explains what data we collect, why we collect it, how we use it, and your rights in relation to it.

This policy applies to all marketing services delivered by NXRD including but not limited to strategy consultancy, search engine optimisation, AI-driven marketing, content creation, social media marketing, email marketing, website design and development, paid advertising, and brand development.

Data we collect and why

In the course of delivering marketing services, NXRD may collect and process the following categories of data:

Client business data Information provided by clients about their business, products, services, target audiences, and commercial objectives. This is used solely to deliver the agreed marketing services and is never shared with third parties without explicit consent.

Website and analytics data With client permission, NXRD accesses website analytics platforms including Google Analytics, Google Search Console, and similar tools to assess website performance, organic search visibility, and user behaviour. This data is used to inform marketing strategy and report on performance. NXRD accesses this data in a read-only capacity unless otherwise agreed in writing.

Contact data Names, email addresses, phone numbers, and job titles of client contacts and their team members. This information is used to manage the client relationship, deliver work, and communicate about projects. It is never sold or shared with third parties.

Campaign and audience data Where NXRD manages paid advertising, email marketing, or social media campaigns on behalf of a client, we may process audience data, customer lists, and campaign performance data. This data is processed strictly in accordance with the client’s instructions and applicable data protection law.

Prospect and lead data Contact information relating to prospective clients or leads generated through NXRD’s own marketing activity. This data is collected with consent and used solely for NXRD business development purposes.

How we use data

NXRD uses personal and business data for the following purposes:

To deliver marketing services as agreed with each client. To communicate with clients and their teams about projects, strategy, and performance. To produce reports, recommendations, and strategic documents. To manage billing and business administration. To comply with legal and regulatory obligations.

We do not use client data for advertising, profiling, or any purpose outside the scope of the agreed services.

International data transfers

NXRD works with clients and partners across multiple countries and markets. Where personal data is transferred outside the United Kingdom or European Economic Area, NXRD ensures that appropriate safeguards are in place in accordance with UK GDPR and applicable international data protection frameworks. This includes reliance on adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms as appropriate.

NXRD uses the following third-party services in the delivery of marketing services, which may involve international data transfers:

Google (Analytics, Search Console, Ads) — governed by Google’s Privacy Policy and Data Processing Terms. Anthropic (AI content generation via Claude API) — governed by Anthropic’s Privacy Policy at anthropic.com/privacy. ActiveCampaign (email marketing and automation) — governed by ActiveCampaign’s Privacy Policy. LinkedIn (social media marketing and advertising) — governed by LinkedIn’s Privacy Policy. Meta (Facebook and Instagram advertising) — governed by Meta’s Privacy Policy. Adobe (creative production tools) — governed by Adobe’s Privacy Policy.

Where NXRD acts as a data processor on behalf of a client, a Data Processing Agreement is available on request.

Legal basis for processing

NXRD processes personal data on the following legal bases under UK GDPR:

Contractual necessity — processing required to deliver services agreed with a client. Legitimate interests — processing necessary for NXRD’s own business development, client relationship management, and service improvement, where these interests are not overridden by the rights of individuals. Consent — where individuals have specifically consented to receiving communications from NXRD. Legal obligation — where processing is required to comply with applicable law.

Data retention

NXRD retains client data for the duration of the client relationship and for a period of six years thereafter in accordance with UK legal and tax obligations. Marketing campaign data, audience data, and analytics data are retained only for as long as necessary to deliver the agreed services and produce historical performance reports. Prospect data is retained until a request to be removed is received or until the data is no longer relevant for business development purposes.

Data security

NXRD takes the security of personal data seriously. We use appropriate technical and organisational measures to protect data against unauthorised access, loss, or disclosure. These measures include encrypted communications, access controls, and restricted sharing of sensitive data. Where third-party platforms are used, NXRD relies on those platforms’ own security infrastructure, which is governed by their respective security policies.

Your rights

Under UK GDPR and applicable data protection law, individuals have the following rights in relation to their personal data:

The right to access personal data held about them. The right to request correction of inaccurate data. The right to request deletion of personal data where there is no longer a lawful basis for processing. The right to object to processing based on legitimate interests. The right to restrict processing in certain circumstances. The right to data portability where processing is based on consent or contract. The right to withdraw consent at any time where processing is consent-based.

To exercise any of these rights, contact james@nx-rd.com. NXRD will respond within 30 days.

If you are not satisfied with how NXRD has handled a data request or complaint, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies and tracking

NXRD’s own website (nx-rd.com) may use cookies and similar tracking technologies for analytics and performance purposes. A separate cookie policy is available on the NXRD website. Where NXRD manages a client’s website, any cookies or tracking on that site are governed by the client’s own privacy and cookie policy.

Changes to this policy

NXRD may update this privacy policy from time to time to reflect changes in our services, legal obligations, or data handling practices. The date at the top of this page reflects the most recent update. Continued use of NXRD’s services after any changes constitutes acceptance of the updated policy. For material changes, NXRD will notify active clients directly.

Contact

NXRD Rae House, Dane Street, Bishops Stortford, Hertfordshire, United Kingdom, CM23 3BT james@nx-rd.com nx-rd.com

For data protection queries, subject access requests, or complaints, contact james@nx-rd.com directly. NXRD will acknowledge all data-related requests within 5 working days and respond in full within 30 days.