This policy explains how Cloud Supreme Limited, trading as Nimbus ("we", "us", "our"), collects and uses personal data. We are the data controller for the personal data described here. Our registered office is [registered address], company number [00000000], and our ICO registration number is [ZA000000]. You can contact us about privacy at privacy@cloudsupreme.co.uk.
Depending on how you interact with us, we may collect:
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Responding to enquiries and providing quotes | Legitimate interests; steps prior to a contract |
| Delivering, hosting and supporting the Services | Performance of a contract |
| Taking payment and preventing fraud | Performance of a contract; legal obligation |
| Sending service and account communications | Performance of a contract; legitimate interests |
| Marketing emails (where relevant) | Consent, or legitimate interests for existing clients — you can opt out at any time |
| Website analytics and security | Consent (analytics cookies); legitimate interests (security) |
| Meeting legal and accounting obligations | Legal obligation |
We do not sell your personal data. We share it only with trusted service providers who process it on our behalf under contract, including [update to reflect the services you actually use]:
We may also disclose data where required by law, or to protect our rights.
Where a provider processes data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
Our website uses essential cookies to function and, with your consent, analytics cookies to help us improve it. You can control cookies through your browser and, where shown, our cookie banner. [Add or link your cookie details here.]
We keep personal data only as long as necessary for the purposes above: enquiry data for [12 months] where it does not lead to a contract; client and billing records for [6 years] to meet accounting and tax requirements; and data within software we host for you for as long as we provide the Services, then deleted or returned as agreed.
Under UK GDPR you have the right to access your data; to have inaccurate data corrected; to have data erased; to restrict or object to processing; to data portability; and to withdraw consent at any time. To exercise any of these, email privacy@cloudsupreme.co.uk. We will respond within one month.
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and isolated tenancy. No system is completely secure, but we work to reduce risk and will notify you and the ICO of any breach where required.
If you have a concern about how we handle your data, please contact us first so we can help. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
We may update this policy from time to time. The current version is always the one published on this page, with the "last updated" date shown above.