Last updated: May 2026

‍Nebula Foresight (“Nebula Foresight,” “we,” “our,” or “us”) is the trading name of Nebula Foresight and Consulting Ltd, a UK-registered company (Company No: 16367629). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share personal data when you visit our website, engage with us as a client, or participate in research projects.

‍1. Who We Are
‍Nebula Foresight and Consulting Ltd (trading as Nebula Foresight) is a UK-based research, insights and consultancy company helping brands navigate the creator economy and emerging consumer trends. We act as a Data Controller when we collect and use personal data for our own purposes. When we conduct research on behalf of a client, we act as a Data Processor on that client’s instructions. In these cases, the client is the Data Controller. Where relevant, the identity of the data controller will be made clear within the research project itself (for example, at the start of a survey). If you have any questions about this Privacy Policy or how your data is handled, please contact us:

‍Email: hello@nebulaforesight.com
‍Registered Address: 85 Great Portland Street, First Floor, London, W1W 7LT

‍2. Data We Collect
‍We may collect the following categories of personal data:

Website & Communications Data: Name, email address, and other contact details you provide when emailing us or booking a meeting via Third-party integrations.
Technical information such as IP address or device type (only if collected by third-party integrations).

Client Data: Business contact information (name, role, company, email, phone).
Research reports, presentations, or files shared with us (which usually contain aggregated or anonymised data).

Research Participant Data: If you participate in a Nebula Foresight–led research study, we may collect demographic details, opinions, and behavioural data. Survey responses are typically processed by our trusted fieldwork and platform partners. In all cases, responses are aggregated and anonymised before analysis and are not reviewed or reported at an individual level.

Vendor/Supplier Data: Business contact details necessary for managing projects, invoices, and contracts.

3. Survey Particpation
Where Nebula Foresight conducts surveys on behalf of a client, we act as a data processor on that client’s instructions. The client commissioning the research is the data controller, and their identity will be disclosed within the survey.Survey participation is based on your consent. You may withdraw your consent at any time by contacting hello@nebulaforesight.com and quoting the name or reference of the survey. Where responses have already been anonymised and aggregated into research findings, individual withdrawal may not be technically possible.  However, no individually identifiable data will be retained or reported.All survey responses are aggregated and anonymised. They are not reviewed, reported, or analysed at an individual level.We process personal data for the following purposes:
‍
4. Age Restrcition
Our surveys and research activities are intended for individuals aged 16 and over (or 13 and over where local law permits a lower threshold and we have consent). We do not knowingly collect personal data from children below the applicable age. If you believe we have inadvertently collected data from a minor, please contact us at hello@nebulaforesight.com and we will delete it promptly.

5. How We Use Personal Data
To provide consultancy and research services to our clients.
To communicate with clients, prospects, and research participants
To manage scheduling and meetings (via Calendly).
To analyse and improve our services.
To comply with legal and regulatory obligations.
We will not sell or rent your personal data to third parties.

‍6. Legal Basis for Processing
‍Under UK GDPR and EU GDPR, we rely on the following legal bases:
‍
‍Contractual necessity: to deliver services agreed with clients.
Legitimate interests: to operate our business, manage relationships, and improve services.
Consent: where required for research participation or optional communications.
Legal obligation: to comply with financial, tax, or regulatory requirements.
For California residents, we do not sell personal data as defined under CCPA/CPRA.

‍7. Sub-Processors and Data Sharing
To deliver our research and consultancy services, we work with categories of third-party sub-processors including:

Fieldwork and participant recruitment partners
Survey hosting and data collection platforms
Data storage and project management providers
Scheduling and communications tools
Professional advisers (e.g. accountants, legal advisers)

All sub-processors are bound by Data Processing Agreements and are required to handle personal data in accordance with applicable data protection law. A current list of our sub-processors is available on request by emailing hello@nebulaforesight.com.

We may also share data with regulators or authorities if legally required.

‍8. International Transfers
As we work with clients, participants, and sub-processors globally, personal data may be transferred to and processed in countries outside the UK and EU, including countries that may not have equivalent data protection laws.

Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs), UK International Data Transfer Agreements (IDTAs), or other lawful transfer mechanisms as required. We do not transfer personal data internationally without first satisfying ourselves that adequate protections are in place.

Participants based in India should note that their data is processed in accordance with India’s Digital Personal Data Protection Act (DPDPA) 2023 where applicable.

‍9. Data Retention
‍We keep personal data only as long as necessary for the purposes outlined:
‍
Client contact details: retained during the client relationship and for up to 6 years after for legal/tax purposes.
Research participant data: retained for a maximum of 6 months following project completion, after which data is anonymised or deleted. Anonymised, aggregated data may be retained for longer for research quality and benchmarking purposes.
Vendor data: retained for contract duration and relevant financial records.

‍10. Automated Decision-Making
We do not use personal data collected through surveys or research for automated decision-making or profiling that produces legal or similarly significant effects on individuals, as defined under GDPR Article 22.

11. Your Rights
Depending on where you are located, you may have the following rights in relation to your personal data:

Access: request a copy of the personal data we hold aout you
Correction: request correction of inaccurate data
Deletion: request deletion of your data (where legally possible)
Objection or restriction: object to or restrict processing
Portability: request your data in a portable format
Withdrawal of consent: withdraw consent at any time where processing is based on consent

Additional rights by jurisdiction:
UK/EU (GDPR): All rights above apply. You may lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk, or your local data protection authority.
California (CCPA/CPRA): You may request information about data collected, used, and disclosed, and exercise the right to deletion. We do not sell data.
Brazil (LGPD): You have rights to confirmation of processing, access, correction, deletion, and data portability.
Canada (PIPEDA / Quebec Law 25): You have rights to access, correction, and withdrawal of consent.
Australia (Privacy Act 1988): You have rights to access and correction of your personal information.
South Africa (POPIA): You have rights to access, correction, deletion, and objection.Other jurisdictions:

We respect applicable data protection rights wherever our research participants are located. Contact us to exercise your rights. To exercise these rights, please contact us at hello@nebulaforesight.com.

‍12. Security
We take appropriate technical and organisational measures to safeguard personal data, including secure storage and restricted access based on business needs. All sub-processors handling personal data on our behalf are subject to equivalent security requirements under contract.

‍13. Changes to This Policy
‍We may update this Privacy Policy from time to time. The latest version will always be available on our website.

‍14. Contact Us
‍For any questions, please contact:

‍Nebula Foresight
‍Email: hello@nebulaforesight.com
Address: 85 Great Portland Street, First Floor, London, W1W 7LT

If you are based in the UK or EU and have concerns about how we use your data, you may also contact the Information Commissioner’s Office (ICO) or your local data protection authority.