Privacy Policy

Last updated: 13 February 2026

1. Data Controller

SMS Consulting ("we", "us", "our") is the data controller responsible for your personal data. We are based in London, United Kingdom, and are committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Data Protection Act 2018.

If you have any questions about this policy or our data practices, please contact us at hello@nebulawise.com.

2. What Data We Collect

We collect personal data that you voluntarily provide to us through our website contact form. This includes:

• Your name
• Email address
• Company or organisation name
• Any additional information you include in your message

3. How We Use Your Data

We use the personal data you provide for the following purposes:

• To respond to your enquiry or message
• To communicate with you about potential projects or services
• To maintain records of our business communications

4. Legal Basis for Processing

We process your personal data on the following legal grounds under Article 6 of the GDPR:

• Consent: By submitting the contact form, you consent to us processing your data for the purpose of responding to your enquiry.
• Legitimate interests: We may process your data where it is necessary for our legitimate business interests, such as managing client relationships, provided these interests do not override your fundamental rights and freedoms.

5. Data Sharing

We do not sell, trade, or rent your personal data to third parties. We may share your information only in the following circumstances:

• With service providers who assist us in operating our website or conducting our business, under strict data processing agreements
• When required by law, regulation, or legal process
• To protect the rights, safety, or property of SMS Consulting, our clients, or the public

6. International Transfers

If we transfer your personal data outside the UK or the European Economic Area (EEA), we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant authority, to protect your data in accordance with applicable data protection laws.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Contact form submissions are retained for a maximum of 24 months after your last interaction with us, unless a longer retention period is required by law or for the establishment, exercise, or defence of legal claims.

8. Cookies and Tracking

Our website does not use cookies for tracking or analytics purposes. We do not use any third-party tracking scripts. The only external resources loaded are Google Fonts for typography rendering. No personal data is collected through cookies on this website.

Should we introduce cookies or analytics tools in the future, we will update this policy and implement a cookie consent mechanism in compliance with the Privacy and Electronic Communications Regulations (PECR).

9. Your Rights

Under the UK GDPR and EU GDPR, you have the following rights regarding your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data.
• Right to erasure: You have the right to request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to restrict processing: You have the right to request that we limit the processing of your personal data in certain circumstances.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis.
• Right to withdraw consent: Where processing is based on consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at hello@nebulawise.com. We will respond to your request within one month.

10. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority. In the United Kingdom, the relevant authority is the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

If you are located in the EU, you may also contact your local data protection authority.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

For any questions, concerns, or requests related to this privacy policy or your personal data, please contact us:

• Email: hello@nebulawise.com
• Location: London, United Kingdom