This policy explains how Cloud Supreme Limited, trading as Nimbus ("we", "us", "our"), collects and uses personal data. We are the data controller for the personal data described here. Our business address is 6 Higher Stockley Mead, Okehampton EX20 1FJ, and our company number is 12670354. You can contact us about privacy at privacy@cloudsupreme.co.uk.
Depending on how you interact with us, we may collect:
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Responding to enquiries and providing quotes | Legitimate interests; steps prior to a contract |
| Delivering, hosting and supporting the Services | Performance of a contract |
| Taking payment and preventing fraud | Performance of a contract; legal obligation |
| Sending service and account communications | Performance of a contract; legitimate interests |
| Marketing emails (where relevant) | Consent, or legitimate interests for existing clients — you can opt out at any time |
| Website analytics and security | Consent (analytics cookies); legitimate interests (security) |
| Meeting legal and accounting obligations | Legal obligation |
We do not sell your personal data. We share it only with trusted service providers who process it on our behalf under contract, including:
We may also disclose data where required by law, or to protect our rights.
Where a provider processes data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
Our website uses only the essential cookies needed for it to work. We do not use advertising or tracking cookies. If we add analytics in future, we will ask for your consent first. You can control or clear cookies at any time through your browser settings.
We keep personal data only as long as necessary for the purposes above: enquiry data for 12 months where it does not lead to a contract; client and billing records for 6 years to meet accounting and tax requirements; and data within software we host for you for as long as we provide the Services, then deleted or returned as agreed.
Under UK GDPR you have the right to access your data; to have inaccurate data corrected; to have data erased; to restrict or object to processing; to data portability; and to withdraw consent at any time. To exercise any of these, email privacy@cloudsupreme.co.uk. We will respond within one month.
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and isolated tenancy. No system is completely secure, but we work to reduce risk and will notify you and the ICO of any breach where required.
If you have a concern about how we handle your data, please contact us first so we can help. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
We may update this policy from time to time. The current version is always the one published on this page, with the "last updated" date shown above.