Privacy Policy

Last updated: August 2025

Nebula Foresight (“Nebula Foresight,” “we,” “our,” or “us”) is the trading name of Nebula Foresight and Consulting Ltd, a UK-registered company (Company No: 16367629). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share personal data when you visit our website, engage with us as a client, or participate in research projects.

1. Who We Are
Nebula Foresight and Consulting Ltd (trading as Nebula Foresight) is a UK-based research, insights and consultancy company helping brands navigate the creator economy and emerging consumer trends. We act as a Data Controller when we collect and use personal data for our own purposes.If you have any questions about this Privacy Policy or how your data is handled, please contact us:

Email: hello@nebulaforesight.com
Registered Address: 85 Great Portland Street, First Floor, London, W1W 7LT

2. Data We Collect
We may collect the following categories of personal data:

Website & Communications Data: Name, email address, and other contact details you provide when emailing us or booking a meeting via Calendly.
Technical information such as IP address or device type (only if collected by Calendly or other third-party integrations).

Client Data: Business contact information (name, role, company, email, phone).
Research reports, presentations, or files shared with us (which usually contain aggregated or anonymised data).

Research Participant Data: If you participate in a Nebula Foresight–led research study, we may collect demographic details, opinions, and behavioural data.
In most cases, this is handled by our trusted vendor partners, but we may occasionally act as a controller for participant data.

Vendor/Supplier Data: Business contact details necessary for managing projects, invoices, and contracts.

3. How We Use Personal Data
We process personal data for the following purposes:

To provide consultancy and research services to our clients.
To communicate with clients, prospects, and research participants
To manage scheduling and meetings (via Calendly).
To analyse and improve our services.
To comply with legal and regulatory obligations.
We will not sell or rent your personal data to third parties.

4. Legal Basis for Processing
Under UK GDPR and EU GDPR, we rely on the following legal bases:

Contractual necessity: to deliver services agreed with clients.
Legitimate interests: to operate our business, manage relationships, and improve services.
Consent: where required for research participation or optional communications.
Legal obligation: to comply with financial, tax, or regulatory requirements.
For California residents, we do not sell personal data as defined under CCPA/CPRA.

5. Data Sharing
We may share data with:

Vendors and research partners: who support project delivery (under strict contractual terms).
Service providers: such as Calendly, Google Workspace, and Zapier, used for scheduling, communications, and file management.
Professional advisers: (e.g. accountants, legal advisers).
Regulators or authorities: if legally required.
All vendors and suppliers are bound by confidentiality and data protection obligations.

6. International Transfers
As we work with clients and vendors globally, data may be transferred outside the UK/EU.
Where this occurs, we use appropriate safeguards (such as Standard Contractual Clauses) to ensure adequate protection.

7. Data Retention
We keep personal data only as long as necessary for the purposes outlined:

Client contact details: retained during the client relationship and for up to 6 years after for legal/tax purposes.
Research participant data: retained only for the duration of the project and then anonymised or deleted
Vendor data: retained for contract duration and relevant financial records.

8. Your Rights
You have the following rights under UK and EU GDPR:

To access your personal data.
To request correction of inaccurate data.
To request deletion of your data (where legally possible).
To object to or restrict processing.
To request data portability.
California residents may also request information about data collected, used, and disclosed, and can exercise the right to deletion. To exercise these rights, please contact us at hello@nebulaforesight.com.

9. Security
We take appropriate technical and organisational measures to safeguard personal data, including secure storage in Google Workspace and restricted access based on business needs.

10. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website.

11. Contact Us
For any questions, please contact:

Nebula Foresight
Email: hello@nebulaforesight.com
Address: 85 Great Portland Street, First Floor, London, W1W 7LT

If you are based in the UK or EU and have concerns about how we use your data, you may also contact the Information Commissioner’s Office (ICO) or your local data protection authority.