Privacy Policy

1. Who I am

NextVibe AI is a sole trader business run by Victor Fernandez, registered and operating in the United Kingdom. I provide AI workflow automation services to UK businesses.

This policy explains what personal data I collect from visitors to nextvibeai.com and from clients who purchase services, how I use it, and your rights under UK GDPR.

2. Data I collect and why

Contact form submissions

When you submit a form on this website, I collect your name, email address, company name (optional), and the message you send. I use this to respond to your enquiry and, where you have expressed an interest in services, to follow up as part of a potential engagement. The legal basis is legitimate interests (responding to an inbound business enquiry).

Payment data (Stripe)

Purchases on this site are processed by Stripe, Inc. I do not store your full card details. Stripe provides me with transaction metadata: your name, email address, the amount paid, and the date of payment. I use this for billing, service delivery, and financial record-keeping. The legal basis is contract performance and my legal obligation to keep financial records.

Stripe's own privacy policy applies to payment processing: stripe.com/gb/privacy.

Analytics (Google Analytics)

This site uses Google Analytics (measurement ID: G-YQN59YEK9T) to understand how visitors use the site. Google Analytics collects your IP address (anonymised), browser type, device type, pages visited, time spent, and approximate location. I use this to improve the site and understand which content is useful. The legal basis is legitimate interests.

Google's privacy policy: policies.google.com/privacy. You can opt out of Google Analytics tracking via Google's opt-out browser add-on.

Server logs

This site is hosted on Netlify. Netlify's servers may log IP addresses, request times, and HTTP status codes for security and infrastructure purposes. I do not use these logs for marketing. Netlify's privacy policy: netlify.com/privacy.

3. Cookies

This site uses the following cookies:

• Google Analytics cookies (_ga, _ga_*) — analytics, expire after 2 years. Set by Google Analytics to track sessions and returning visitors.
• Language preference (nextvibe_language) — stores your chosen language (EN, ES, FR, DE, or IT) in your browser's localStorage so you do not need to re-select it. This is not transmitted to any server.

You can block or delete cookies in your browser settings. Blocking analytics cookies will not affect your ability to use the site.

4. How long I keep your data

• Contact form submissions: retained for up to 6 years, which is the standard limitation period under UK law for contract claims.
• Payment and billing records: retained for 7 years in line with HMRC requirements for financial records.
• Google Analytics data: retained for 26 months (Google Analytics default), after which it is deleted automatically.

5. Who I share your data with

I do not sell your personal data. I share it only with the following service providers, to the extent necessary to operate the business:

• Stripe, Inc. — payment processing
• Google LLC — analytics (Google Analytics)
• Netlify, Inc. — website hosting and form handling
• Calendly LLC — appointment scheduling (when you book a call)

Each of these processors has their own data protection obligations. I share only the minimum data required for each service to function.

I may also disclose your data if required by law, court order, or to protect my legal rights.

6. International transfers

Some of the service providers listed above are based in the United States. Where data is transferred outside the UK, it is protected by appropriate safeguards, including Standard Contractual Clauses approved by the ICO, or the UK-US Data Bridge.

7. Your rights under UK GDPR

If I hold personal data about you, you have the following rights:

• Right of access — to request a copy of the personal data I hold about you.
• Right to rectification — to ask me to correct inaccurate data.
• Right to erasure — to request that I delete your data in certain circumstances.
• Right to restriction — to ask me to restrict processing of your data in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests.

To exercise any of these rights, email victor.fernandez@nextvibeai.com. I will respond within one calendar month.

8. Complaints

If you believe I have handled your personal data unlawfully, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

I would ask that you contact me first so I have the opportunity to resolve any concern directly.

9. Changes to this policy

I may update this privacy policy from time to time. The date at the top of this page reflects when it was last revised. Material changes will be posted here. Continued use of the site after a revision constitutes acceptance of the updated policy.